Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1c60c7f-c029-3371-9ddb-a1f0a29c8e04.roa
File:                     d1c60c7f-c029-3371-9ddb-a1f0a29c8e04.roa (raw, json)
Hash identifier:          L2NcV+XimCAkXpN5ZUHu3wO2IqF6XpDW5X/YPugOSUU=
Subject key identifier:   A4:A1:56:49:A0:3D:76:72:BE:F8:8D:17:3A:64:70:03:6F:A3:3B:65
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F4328584A0C060102F400EA2628AA2940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1c60c7f-c029-3371-9ddb-a1f0a29c8e04.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     33287
IP address blocks:        76.117.62.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:06:01:02:f4:00:ea:26:28:aa:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=c47c6e0d-5d4e-4771-9528-b9d2e4ff2084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3e:56:73:8d:96:f9:a5:2c:20:fc:3b:9e:84:
                    fe:81:b8:06:29:e7:13:35:ce:86:38:0a:e3:a9:52:
                    d9:90:9f:6c:5e:54:60:6c:a4:2c:c2:af:43:be:41:
                    e0:7a:11:eb:3f:a2:f8:b0:a7:c3:ec:78:c1:df:fe:
                    5c:08:42:72:9a:8c:33:95:9a:63:e9:3b:70:e0:80:
                    ec:e1:37:a9:23:7b:f7:44:8a:2b:5c:51:14:51:a9:
                    35:39:e1:24:71:49:62:a2:c4:68:b5:e3:76:3d:a0:
                    a9:0d:f6:af:71:56:f7:73:33:91:f1:f7:49:74:66:
                    b2:9d:c9:ef:bf:52:37:54:c1:62:ed:98:4b:9f:3f:
                    6b:82:26:10:57:d8:06:f7:43:74:5f:97:a1:43:4f:
                    3c:f3:9b:a8:69:28:dd:f7:1e:dd:ec:af:24:e6:20:
                    fb:3a:ca:3d:c1:82:5e:8f:16:90:6b:2d:c4:13:30:
                    37:c6:c0:c2:44:73:9e:c2:6b:b7:8f:86:e8:d1:43:
                    44:a5:6e:bd:ce:31:9f:9a:e2:7a:cf:9c:d2:6b:38:
                    f6:99:9b:d9:af:4f:99:44:04:4f:99:57:10:ac:ee:
                    31:cd:68:9e:a0:24:b9:1b:51:c0:8d:a1:ab:c8:22:
                    07:a7:af:e6:dc:b1:8f:3c:af:1a:e4:ed:0b:61:21:
                    43:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:A1:56:49:A0:3D:76:72:BE:F8:8D:17:3A:64:70:03:6F:A3:3B:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1c60c7f-c029-3371-9ddb-a1f0a29c8e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.117.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d5:5a:b1:9d:58:05:3f:c7:dd:4a:9d:79:b7:9a:91:be:0b:db:
         83:70:44:5b:82:46:71:ff:29:f4:66:86:1c:a0:c7:7f:27:80:
         eb:c6:ec:f1:46:e8:14:db:17:72:a0:70:1b:db:76:c4:38:46:
         20:0f:9d:25:a6:bc:fd:da:81:63:e1:f4:ab:92:23:de:c3:48:
         d4:df:a8:a7:19:77:a7:74:27:e5:d1:67:e3:5f:69:8f:a0:2c:
         d3:ef:0a:44:53:1c:6b:fa:41:a1:76:8d:06:bd:bc:b2:56:e5:
         2f:98:ce:0b:a9:29:99:dd:b8:c2:6c:7d:47:70:2e:67:10:de:
         1c:c6:76:08:c8:3f:78:93:7e:89:a0:72:5b:56:b9:ad:3d:ab:
         42:57:7c:9c:79:79:d5:4e:0b:08:78:b4:db:cc:1f:c0:1b:1b:
         3f:46:8a:b0:dc:27:38:fb:6c:26:af:73:ea:43:17:33:95:7e:
         78:d6:8a:5a:d9:29:bc:e2:44:02:0f:7a:22:2e:cd:7b:dc:9f:
         ff:6b:15:00:62:d0:0d:09:0d:7a:a8:33:d6:71:d0:cc:c4:8e:
         be:de:f2:93:0f:82:2b:32:2c:7f:eb:0f:c9:c5:a8:57:13:c2:
         2c:f6:bb:8b:5a:26:fa:06:dd:83:5e:89:a9:83:21:f1:da:05:
         4f:77:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:03:09 2025 by rpki-client