Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed41f3ff-9d8b-3c83-b73d-58ccbe648376.roa
File:                     ed41f3ff-9d8b-3c83-b73d-58ccbe648376.roa (raw, json)
Hash identifier:          vNvdEiyCxcld4ses5Sbl92KYqi//fcODm2H+pNGovpc=
Subject key identifier:   89:52:C8:76:39:A9:89:6A:84:1E:02:AC:22:F4:9A:62:2F:1F:AF:98
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FBF9E9B2D5C9E4F5BAB90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed41f3ff-9d8b-3c83-b73d-58ccbe648376.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     33490
IP address blocks:        24.22.60.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:bf:9e:9b:2d:5c:9e:4f:5b:ab:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=080df431-7a6a-480a-b137-e77552e626ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b3:77:b3:9d:92:bf:44:25:6a:ae:46:c0:34:
                    98:19:bc:eb:7d:d0:86:0a:97:41:98:19:5a:d2:eb:
                    39:de:42:99:e3:bf:cf:eb:80:53:60:38:31:31:37:
                    f0:a3:17:34:ba:62:24:d9:50:08:2a:e5:18:d8:90:
                    0e:42:14:5b:45:e9:01:63:e0:0f:a7:ea:52:7d:d2:
                    fb:d0:40:d7:aa:02:80:6c:38:71:20:5a:78:11:21:
                    50:f9:a7:96:99:0e:26:c4:96:5c:18:ea:97:eb:a9:
                    38:ea:40:2c:28:84:12:7a:5b:00:ca:86:b2:05:f7:
                    ec:20:5e:ff:e4:51:52:f8:48:e2:31:ce:57:a9:ae:
                    c8:a6:32:5f:6d:90:6c:74:ca:9d:f6:ed:1b:b2:03:
                    12:ea:41:e8:6f:95:24:27:45:de:4a:87:3f:e0:7c:
                    49:d4:9a:2b:b4:2e:3c:86:79:03:42:42:3e:d2:17:
                    d1:46:6d:22:cb:52:70:c2:bd:de:8a:0f:ac:72:7a:
                    bc:a2:5c:ef:f8:94:2d:67:97:12:ae:8c:6c:7a:40:
                    b5:3d:55:49:e2:e2:89:80:e5:78:7b:fc:7d:4e:b7:
                    c6:bf:66:10:e5:21:14:6d:f3:86:d7:67:b0:4a:4e:
                    8b:51:7e:0c:67:00:67:ab:d0:ba:87:64:18:0c:df:
                    cc:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:52:C8:76:39:A9:89:6A:84:1E:02:AC:22:F4:9A:62:2F:1F:AF:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed41f3ff-9d8b-3c83-b73d-58ccbe648376.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.22.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:ec:2b:37:43:c2:49:2e:d0:d1:92:0f:24:91:94:3b:1a:a4:
         d2:09:58:f1:ff:90:a1:eb:87:cf:8d:81:a1:8b:53:31:22:fd:
         c7:93:39:ea:25:42:ea:1e:f4:5e:95:51:1f:52:52:1b:0c:67:
         e2:65:b4:91:07:43:c8:35:63:4b:f0:75:52:44:24:f9:40:13:
         f4:a1:90:d2:10:d0:0e:05:c4:26:38:66:a8:32:87:92:ae:05:
         69:07:b5:f3:ed:ff:66:87:f5:b9:d6:5d:ec:d5:48:6d:82:07:
         e8:7a:53:68:90:3c:a8:49:07:a8:7b:11:d6:80:17:db:72:11:
         09:e7:4e:6d:a0:c2:96:4c:f1:d5:a2:a7:ca:05:7d:00:ab:3d:
         67:3e:2c:07:89:09:82:2f:7e:41:90:7e:87:f7:79:74:a9:be:
         30:31:b2:67:43:22:25:42:37:26:2b:40:2e:1a:50:27:24:e0:
         87:c8:4f:9b:e0:7c:15:97:26:f7:96:95:ba:17:a0:6e:02:33:
         b8:75:06:5a:a4:3a:34:cc:d4:f4:0a:f6:b0:87:e7:b8:7c:cc:
         d3:d6:b7:a9:22:c5:93:b3:e8:fb:0b:a7:94:ce:cc:2b:54:f1:
         f0:4f:41:2e:48:7d:c2:e3:5e:75:f7:ec:d2:b4:27:a3:7d:70:
         57:2a:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 06:11:26 2025 by rpki-client