Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a87be15-e214-34be-a015-853c0754bd36.roa
File:                     4a87be15-e214-34be-a015-853c0754bd36.roa (raw, json)
Hash identifier:          x0/fgv0JcuA4+VqUlCtajpSURNR7hJSfes895JJf4EQ=
Subject key identifier:   19:05:4A:0E:84:F3:6D:A0:25:46:75:1F:83:6E:80:BB:C0:97:DC:8D
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F4328584A066F757130D9536A2AE9E000
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a87be15-e214-34be-a015-853c0754bd36.roa
Signing time:             Fri 30 May 2025 13:00:11 +0000
ROA not before:           Fri 30 May 2025 13:00:11 +0000
ROA not after:            Thu 28 Aug 2025 13:00:11 +0000
asID:                     208485
IP address blocks:        172.94.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:06:6f:75:71:30:d9:53:6a:2a:e9:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: May 30 13:00:11 2025 GMT
            Not After : Aug 28 13:00:11 2025 GMT
        Subject: CN=98031af9-3561-4a3f-9311-537e42d8ba95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:35:0d:85:16:2c:fa:36:9b:58:ef:13:af:c6:
                    3b:51:d2:30:e7:2f:5b:6a:3e:79:28:94:96:0d:c8:
                    bb:5f:9f:08:4f:a2:27:e9:e5:39:2d:ae:b8:95:7e:
                    ce:7b:9c:f9:1f:dd:89:f7:01:28:8b:ad:d6:2f:e0:
                    9f:2d:fc:2e:83:a4:dc:18:87:cb:da:6e:59:04:81:
                    96:70:e1:f4:9f:75:00:24:29:cc:4a:ec:9d:f3:29:
                    1a:b3:75:1f:c8:57:da:ce:3d:a3:06:ce:9c:dd:40:
                    7a:a2:ef:fd:24:e7:ea:de:fd:e5:40:35:43:6c:ff:
                    c7:57:84:3d:ea:8f:53:d9:6b:ae:77:34:ad:17:29:
                    49:57:ef:44:60:8c:60:b4:d8:a7:78:3b:60:a3:be:
                    61:21:86:57:3f:e1:c3:7e:40:08:83:56:43:0f:b0:
                    6e:0d:3e:57:b9:68:1b:60:d1:a5:35:cd:91:20:c7:
                    b2:86:40:c0:95:37:26:e3:9e:db:27:33:9c:73:03:
                    ef:e1:e5:27:df:38:eb:2c:ff:ec:f4:33:6c:9d:12:
                    13:9f:9f:41:31:17:9b:96:17:f8:d8:69:af:17:54:
                    63:25:6b:51:25:1b:87:9e:a9:e9:f7:7a:14:13:2e:
                    1c:54:d8:63:ad:c9:5a:8f:27:c3:dc:1b:48:82:85:
                    20:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:05:4A:0E:84:F3:6D:A0:25:46:75:1F:83:6E:80:BB:C0:97:DC:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/4a87be15-e214-34be-a015-853c0754bd36.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.94.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b2:7c:9d:ae:a1:aa:c5:ec:e3:96:6e:72:a1:3e:76:74:0d:
         1e:87:22:de:b8:8b:d8:68:fa:af:a1:b3:e3:d3:36:8c:5f:3f:
         73:55:7d:ea:94:c0:f1:6f:bb:7a:c6:37:c0:0e:5d:fa:0a:a3:
         9d:ea:7e:e4:a8:78:2f:dd:5e:a4:f7:74:f4:12:80:82:0d:6b:
         c7:5a:36:fd:02:f9:c4:57:95:de:9e:d4:7a:ed:26:f5:fe:74:
         e3:52:11:c3:67:74:ad:2d:db:d0:c6:dd:83:66:54:dc:9a:29:
         d9:48:d9:ff:d2:c5:2f:ea:0b:43:af:b9:23:77:ad:ae:b9:d7:
         8c:c9:e6:d0:07:6d:7e:19:5c:7b:a1:df:49:79:e5:cd:02:40:
         62:70:90:71:e2:5d:62:03:10:8a:03:53:99:7d:d6:0d:0c:cf:
         38:98:fa:dc:90:ca:ed:79:cd:7d:57:d4:5c:35:c6:f6:a2:03:
         19:1e:2e:74:fa:c5:2b:e0:87:ce:e8:55:3f:1c:c6:d2:ee:0c:
         ee:d3:5a:bb:e6:cf:61:2d:50:57:9a:23:11:94:24:c4:38:22:
         39:92:df:ad:03:b9:75:52:0a:5c:cd:f8:20:2f:d0:14:09:f7:
         de:89:4d:2a:cc:e5:c9:3d:9b:17:de:2c:59:ee:1f:d5:0b:54:
         1a:67:ed:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:18:04 2025 by rpki-client