Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d64c8d-563a-3d55-b6d7-947811fdea1c.roa
File:                     a6d64c8d-563a-3d55-b6d7-947811fdea1c.roa (raw, json)
Hash identifier:          d6f6CKar+UscPdoo0dUiIVGsfaywFzraiJJwP6jmIzg=
Subject key identifier:   33:36:70:06:3F:4E:AC:96:60:6A:6B:C1:0D:3A:92:BD:EB:14:9F:04
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C07BA034BF64E5426E26DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d64c8d-563a-3d55-b6d7-947811fdea1c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33491
IP address blocks:        24.14.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:07:ba:03:4b:f6:4e:54:26:e2:6d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=8d68559c-5dbe-425f-b08f-3d69f56368b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c0:ed:3c:fd:7f:f5:cf:36:d4:0e:18:3e:c8:
                    a8:d6:ab:a9:12:9b:b2:04:58:35:a6:6f:6a:8d:3c:
                    62:ee:7c:2e:7c:a4:d3:89:a1:cf:1d:73:ee:00:6a:
                    8a:16:d2:3e:2f:0a:8a:76:a5:83:b9:70:7b:d5:ea:
                    79:04:1e:64:76:69:d5:61:dd:7b:8d:7a:6f:4e:6a:
                    b4:f6:ed:23:39:c2:f8:dc:8d:63:ff:ba:40:20:e7:
                    01:9c:52:ee:56:30:b3:28:0b:de:07:7f:6f:b8:66:
                    25:95:0d:e7:26:96:bf:c7:18:60:cf:cc:84:d9:c0:
                    81:3f:b3:30:d2:8f:2f:78:8b:eb:01:05:50:f9:54:
                    f3:e9:1b:ec:fd:26:0e:87:ac:df:56:b0:df:c3:9f:
                    3c:06:74:84:93:4c:23:a2:ba:40:7c:c1:73:55:ee:
                    13:dd:b2:c1:1d:4a:d4:58:a6:95:6c:a5:e2:b3:da:
                    d8:2f:aa:09:43:35:73:1c:cc:38:09:b0:47:a8:0b:
                    a9:dc:8d:58:42:30:81:23:86:fd:80:59:98:74:ad:
                    3a:6e:6c:65:9b:74:b5:64:10:e2:ff:53:95:7e:70:
                    b6:99:45:f8:a6:30:b3:df:6d:31:ae:7f:ef:7f:40:
                    73:d8:43:0a:5f:2c:a8:45:4c:c6:a2:70:b2:8a:99:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:36:70:06:3F:4E:AC:96:60:6A:6B:C1:0D:3A:92:BD:EB:14:9F:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a6d64c8d-563a-3d55-b6d7-947811fdea1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.14.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:a6:95:5f:0f:89:9b:78:80:4b:3d:99:ba:b8:14:3d:67:2f:
         5f:e2:0a:7c:f6:24:59:a7:25:92:37:2e:50:d5:df:0e:24:cf:
         bc:e1:e9:48:24:79:01:12:0e:24:3c:cb:a2:c9:c6:fa:b9:3b:
         a2:d4:7f:84:a4:f3:9c:71:72:8c:2f:bc:71:96:09:8d:ab:0c:
         7c:83:f8:49:7a:c0:e6:f8:af:f5:dd:7c:da:66:64:7c:49:01:
         ae:d6:2a:13:95:a4:ab:3b:59:f4:c7:30:d8:60:de:dd:d1:ba:
         c1:19:bb:f8:4d:a3:89:b3:3d:8f:7f:6b:0b:56:1e:80:3d:7a:
         76:c9:4b:8a:82:e6:3d:59:a9:09:80:cd:3e:97:ff:7a:19:91:
         ad:88:ed:6d:02:33:23:4f:56:00:26:b4:12:a2:3f:0f:cd:b2:
         69:11:78:98:65:71:fc:9d:80:a0:a2:b1:98:4c:d2:58:8c:a5:
         cc:d1:67:66:dc:a3:64:af:bc:1d:45:30:73:79:0e:74:95:9c:
         63:8b:51:bb:cb:65:73:79:e9:dc:c5:32:ae:65:68:d9:0d:5a:
         6f:56:09:16:d1:c2:35:61:4f:80:07:7d:e9:4f:b1:a0:f8:9a:
         77:26:ab:db:68:0f:98:23:7f:90:4b:10:09:fd:73:da:8f:ca:
         2a:14:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:03:41 2025 by rpki-client