Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/1d45368e-7a7e-3312-aeea-d00d1f87bdac.roa
File:                     1d45368e-7a7e-3312-aeea-d00d1f87bdac.roa (raw, json)
Hash identifier:          20zUx7+asiqBuZP1OxS3SplLG8Xo3xdQXiy0Xv+5ZSI=
Subject key identifier:   66:6B:CE:84:16:E2:23:10:FE:F9:DF:56:F0:E2:DD:05:29:E3:25:BA
Certificate issuer:       /CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
Certificate serial:       010D0C9F4328584A6AF090EBDCA767686311E640
Authority key identifier: 2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/1d45368e-7a7e-3312-aeea-d00d1f87bdac.roa
Signing time:             Sat 05 Jul 2025 13:01:04 +0000
ROA not before:           Sat 05 Jul 2025 13:01:04 +0000
ROA not after:            Fri 03 Oct 2025 13:01:04 +0000
asID:                     55097
IP address blocks:        198.176.44.0/22 maxlen: 24
                          2604:a680::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6a:f0:90:eb:dc:a7:67:68:63:11:e6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a491649-e76e-4a4b-aa8d-8c44043b81bb
        Validity
            Not Before: Jul  5 13:01:04 2025 GMT
            Not After : Oct  3 13:01:04 2025 GMT
        Subject: CN=49a43111-0b59-4225-83b9-5cba58f80f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:43:00:25:09:e4:08:25:f3:d6:1d:cb:ac:11:
                    c7:5d:f1:19:fd:cc:ec:75:13:9d:ac:ca:92:7a:bc:
                    42:fc:6d:36:9f:57:01:01:bf:70:bc:1e:f4:48:b4:
                    90:c9:cd:af:22:4c:9a:b5:08:ea:00:d6:91:a7:b1:
                    f5:8b:32:d6:2c:a0:e4:b0:ad:be:b6:1d:c6:51:78:
                    3c:5d:9e:51:de:ef:2a:ce:ab:66:bb:76:69:1f:35:
                    fd:d9:78:21:75:b4:be:d7:94:29:45:41:dd:26:2b:
                    e3:d3:92:19:9c:d1:4b:7b:b6:97:49:0d:75:78:28:
                    63:c4:58:54:c6:f1:1a:af:c3:0d:1c:12:68:9b:f3:
                    16:6b:12:77:fe:6e:29:3a:4c:4c:2d:80:72:d7:5b:
                    05:66:d9:d4:a2:e4:66:88:a5:be:9c:ff:91:d1:65:
                    81:20:6d:49:1d:0c:dc:38:c7:5e:57:fd:4a:3f:9a:
                    00:5a:7e:fc:3a:dd:51:ba:65:86:84:24:77:c3:ff:
                    8d:f1:20:69:49:e2:d2:3c:4c:f6:c2:26:23:6d:d1:
                    5d:06:5d:b6:33:66:a3:51:76:bb:d9:ee:74:fd:5a:
                    e1:50:21:44:aa:21:40:15:aa:a7:a7:fe:20:eb:2e:
                    76:51:62:a8:2b:85:c1:0b:be:22:e0:31:5e:d1:60:
                    f6:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6B:CE:84:16:E2:23:10:FE:F9:DF:56:F0:E2:DD:05:29:E3:25:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/1d45368e-7a7e-3312-aeea-d00d1f87bdac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb/6a491649-e76e-4a4b-aa8d-8c44043b81bb.crl

            X509v3 Authority Key Identifier:
                keyid:2F:9C:DF:58:D6:DC:59:06:B3:86:E9:37:EC:EE:5A:0F:D4:9F:DF:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a491649-e76e-4a4b-aa8d-8c44043b81bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.176.44.0/22
                IPv6:
                  2604:a680::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:ef:41:c0:c7:66:45:7d:35:7a:09:f5:58:3a:b4:a0:e1:
         90:2a:bd:c8:61:1a:5e:42:e2:c3:e9:e1:d9:54:77:d6:35:5b:
         00:5c:b9:54:8c:b7:ea:8c:dc:44:6c:68:01:1f:91:2c:72:17:
         ec:d9:ac:e2:68:3f:42:c2:12:da:24:b1:2d:e9:73:ab:ce:bf:
         0e:85:32:53:a0:13:e3:70:35:5e:ca:e0:f6:00:88:7e:a4:56:
         47:3e:49:e3:76:ca:10:b9:e1:d4:ec:0c:33:27:7a:97:e2:6e:
         3e:ea:b7:71:5f:be:af:67:a0:df:e5:42:d3:3d:ac:3b:b4:23:
         be:77:b1:3e:a1:72:b6:2f:3a:d6:af:1d:95:9b:df:b5:bf:83:
         ca:8d:c4:3d:4a:17:8f:3f:9b:81:46:93:88:ea:15:46:7a:c4:
         2a:31:08:98:ec:59:d6:17:86:34:a5:c3:90:94:c0:55:18:2f:
         80:8d:ac:6f:74:6b:fe:bc:7b:24:cb:ae:ef:29:be:61:19:40:
         0c:8d:2e:16:f6:a1:10:bb:ba:20:32:77:01:61:3c:88:fc:b2:
         d6:8b:24:4e:94:fa:f9:49:47:eb:70:48:38:55:41:87:b0:14:
         a3:ac:24:b4:91:b5:43:9a:14:95:cb:b9:d8:6a:ef:9b:ad:54:
         a7:ca:3e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 10 09:37:06 2025 by rpki-client