Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3fcfb365-e583-3758-af22-9fbdb34b716f.roa
File:                     3fcfb365-e583-3758-af22-9fbdb34b716f.roa (raw, json)
Hash identifier:          YK3o1ghbh3QS3n/TETtmZs/NS7njAJeigMAGm+9j7D8=
Subject key identifier:   F5:00:03:55:BD:1B:94:13:F2:CC:35:3D:E2:1A:E4:A0:6A:33:01:C7
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC86AA015CA0243095A60
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3fcfb365-e583-3758-af22-9fbdb34b716f.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     29731
IP address blocks:        159.18.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c8:6a:a0:15:ca:02:43:09:5a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=e3a029a1-9029-4694-a2f1-f2260e6ac638
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:65:2e:c3:58:ca:c7:b1:90:18:44:16:71:
                    11:0b:c5:d8:71:b5:83:8a:6c:48:23:0c:9f:42:db:
                    f9:0e:92:0e:59:0f:04:81:81:e5:d2:2a:81:06:c5:
                    68:29:d9:64:33:31:9e:09:52:e2:87:25:fe:8a:17:
                    32:cc:e0:c1:a0:6e:28:56:d1:7f:00:b7:f3:8d:1f:
                    59:dd:a4:42:29:99:b4:fc:dd:ce:9a:0f:94:e0:dd:
                    b6:5f:09:ef:5f:22:a7:3c:85:d1:c6:62:49:cf:de:
                    a7:83:fe:a3:34:5a:31:48:ee:7e:78:97:97:d5:fe:
                    9e:e3:a4:f1:55:16:8b:ad:41:ac:cd:7a:3c:8e:7f:
                    81:87:bb:d0:ec:d0:e0:5a:f8:1e:ed:9d:9f:f9:91:
                    05:64:89:0e:01:d0:e8:b1:b0:33:a9:5e:41:02:08:
                    27:b9:7f:40:15:86:8d:1c:2b:9e:b5:a2:e2:66:af:
                    e8:18:0e:d4:5b:9b:6f:d9:d5:ea:89:0f:03:92:06:
                    69:2b:26:9f:6d:31:20:b5:78:03:c4:b3:f1:69:ba:
                    8c:2f:8c:bf:1c:d4:5e:07:23:94:0a:55:4e:e4:12:
                    5d:58:6d:45:c6:88:ab:49:f1:0e:ae:11:64:cb:ab:
                    43:24:f9:7c:23:5c:57:fa:3a:6c:d2:58:02:9d:ec:
                    ed:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:00:03:55:BD:1B:94:13:F2:CC:35:3D:E2:1A:E4:A0:6A:33:01:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/3fcfb365-e583-3758-af22-9fbdb34b716f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:af:ef:e8:eb:67:37:e7:3b:57:82:21:aa:81:9f:f1:a5:4b:
         80:a1:45:08:15:43:04:29:44:65:f9:31:84:d2:8c:59:46:eb:
         11:6a:90:dd:01:21:e1:44:32:b7:57:37:2b:1e:f3:e3:89:a7:
         63:06:fc:e6:e4:28:1e:0d:9b:cd:40:b8:e0:06:ea:8f:6a:5f:
         27:8b:97:e8:d0:7d:51:41:ee:54:c4:81:21:8a:6c:57:bd:a6:
         ef:98:86:6f:9a:0c:71:a3:02:84:2e:c4:c2:67:0d:86:bb:76:
         75:a2:64:6b:78:e6:7b:ae:5c:44:dc:65:2c:36:dd:58:1e:70:
         de:f2:d6:cc:92:19:06:48:d6:a6:f0:f4:85:5c:37:c6:13:f4:
         14:91:0e:e7:87:ed:21:22:dd:16:b4:38:a0:e0:19:b2:07:3e:
         bf:9d:64:cd:8c:ac:fc:af:47:5a:f0:6f:d1:b6:a2:d8:0a:a6:
         e9:fd:f5:f7:fd:be:7a:9f:38:5b:d7:88:cc:a4:c0:da:d4:83:
         5a:ce:2d:b0:ec:8c:a2:9f:f9:50:40:0f:9b:6c:5d:b1:3a:c1:
         10:13:5e:5d:75:e2:31:be:9e:3e:4f:0f:ad:b2:3c:6a:29:0c:
         17:26:a1:5b:c1:e0:b0:ef:06:5b:ca:a8:0f:90:18:39:a2:1f:
         ab:aa:67:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 18:17:31 2025 by rpki-client