Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7624530d-ef15-3024-84fd-426ab418c6f4.roa
File:                     7624530d-ef15-3024-84fd-426ab418c6f4.roa (raw, json)
Hash identifier:          rLQdkJmSIQ3g8KvsegdiRLcbzjhSRWqzTPmT1h7wlnw=
Subject key identifier:   75:EE:AC:57:AA:14:35:D0:2A:D1:6F:C4:D2:21:66:20:F7:05:7F:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07A964E5D1CCACA9991880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7624530d-ef15-3024-84fd-426ab418c6f4.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        76.111.168.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:a9:64:e5:d1:cc:ac:a9:99:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=14f15933-c654-4ffe-9137-b6d23b08f9df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:96:a9:8f:98:7f:55:b5:d1:aa:5e:5d:21:85:
                    c7:42:55:21:c5:68:ad:f2:99:29:2c:cf:bd:17:cc:
                    aa:57:b5:1e:58:e1:4c:20:e5:ad:0c:0e:25:e0:78:
                    66:c6:01:7b:61:b2:31:ab:62:84:80:59:0a:af:b4:
                    e6:e1:c4:46:11:50:75:28:bb:d5:ef:47:5d:b4:66:
                    a3:94:1f:f1:ff:5f:4f:41:7d:87:a9:b4:3d:29:70:
                    4c:48:b4:1c:84:f6:8d:7a:d8:5e:83:26:11:bb:49:
                    3b:ff:19:2b:93:c9:25:00:2c:60:8f:1e:16:24:11:
                    d1:14:22:15:e4:a7:9c:71:67:e8:38:63:1e:44:c0:
                    5d:74:47:57:c2:da:98:c4:19:49:2e:be:28:7d:70:
                    c9:16:1c:34:0a:33:97:92:52:c5:22:fb:22:5d:6a:
                    eb:8f:96:15:b4:33:9c:ee:bc:b9:2c:94:14:75:c0:
                    e5:c9:ce:da:af:03:0a:b9:72:92:9e:e9:00:43:cd:
                    cc:2e:9d:a2:96:ab:f0:a3:11:0a:cc:13:fa:a9:4e:
                    16:42:f0:b2:a8:a1:9b:6f:e0:fc:bb:4d:4f:52:ea:
                    ea:63:e5:b3:af:23:0d:94:1a:37:56:c5:af:b2:6e:
                    dc:5d:4c:58:62:20:28:f7:88:b0:4b:9c:d6:81:ef:
                    db:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EE:AC:57:AA:14:35:D0:2A:D1:6F:C4:D2:21:66:20:F7:05:7F:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7624530d-ef15-3024-84fd-426ab418c6f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.111.168.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:fe:67:e6:88:33:18:89:13:53:9e:76:8c:20:a2:3d:5d:38:
         c8:eb:df:ae:99:e8:d8:80:ad:6b:8d:87:e7:6e:ae:87:e2:29:
         aa:64:59:38:3a:35:7a:2c:ec:8a:9f:c9:dc:68:07:e1:e4:45:
         44:97:13:63:c7:38:31:64:b3:02:30:c1:ab:50:59:35:27:8d:
         f0:29:3a:e7:b0:a0:c5:4b:0d:ac:4a:b8:69:2f:e5:ed:bf:b5:
         e3:74:b5:b2:4d:fc:a4:fa:8b:a3:b5:be:f2:b1:9b:93:15:75:
         c7:1e:52:ba:bc:3e:cc:0f:55:1c:df:39:ee:b2:80:aa:9c:b3:
         51:61:2a:e1:87:f4:80:9d:fb:f4:02:ff:43:e4:2f:79:5f:ef:
         61:85:23:e5:e2:d5:5b:69:9f:6e:db:0b:b0:85:69:ab:11:33:
         26:ee:2c:c1:9d:71:ec:3e:d2:ed:1e:f2:ca:0b:54:03:e0:07:
         85:7d:3b:e2:27:40:b9:0c:45:fb:0e:0c:12:f3:4f:18:bf:1a:
         a8:f3:1b:d9:15:0c:f9:ea:8d:f1:d7:76:2a:29:94:95:84:1b:
         18:e7:19:c2:7d:09:1e:66:f8:70:8b:f5:27:2f:5b:39:76:a8:
         59:c8:76:eb:a5:57:81:50:fa:eb:4f:b3:1e:28:c1:4a:59:4d:
         a2:6f:ef:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 08:10:48 2025 by rpki-client