Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
File:                     61831d1c-625e-3eb6-a562-d812a9101222.roa (raw, json)
Hash identifier:          j5QngsiK2yjHXcg9lQybkSonTbRmKjG4Q67N57NK5Fw=
Subject key identifier:   77:03:EB:96:C3:77:D9:79:65:20:83:49:BE:96:7B:38:23:27:4E:B1
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F4328584A00DAC97BE7BD34C9DB977E80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     6461
IP address blocks:        216.123.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:c9:7b:e7:bd:34:c9:db:97:7e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=18fd879d-ea32-4a03-98b2-6742ed06c418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:19:5a:fa:94:16:a5:48:a4:56:d0:26:3f:ab:
                    61:08:1f:ca:25:48:6e:5c:b7:a7:d6:73:42:4c:ec:
                    92:fd:82:7e:9c:5d:68:9b:b2:99:f5:b2:bd:ba:76:
                    de:41:d0:60:d0:d9:83:a8:ca:1b:3c:4d:84:9f:6d:
                    ad:c8:cf:e7:15:b6:a6:32:95:86:f2:78:87:2d:1b:
                    c6:35:c4:6f:13:48:fc:33:0f:67:05:63:69:61:86:
                    b4:6c:9f:6b:2b:fb:1e:6f:76:ab:05:6b:42:c1:64:
                    e0:9c:a6:61:95:10:c2:cd:22:9a:a6:6b:80:6b:0c:
                    23:63:fc:c6:a4:a0:45:2d:7f:1a:b4:05:90:cc:68:
                    cb:7d:6d:c2:05:82:72:f0:70:49:0b:2d:bd:de:fd:
                    d8:1b:e4:af:50:25:ff:0e:2e:a0:ff:4f:cb:62:7d:
                    52:3a:35:fb:40:8c:94:0f:c4:f6:fb:3d:78:63:c1:
                    cc:02:ee:7b:03:57:41:0c:73:8b:09:9f:d2:ff:b4:
                    3f:7d:ca:36:e5:31:62:39:b0:34:27:7a:6d:5c:3c:
                    a4:89:46:ba:6c:54:e4:8c:96:5d:e3:12:89:8a:14:
                    fd:46:58:68:ee:da:6f:42:8a:80:b3:da:8e:41:28:
                    79:e8:7a:32:84:d5:0c:0f:08:d3:71:55:ab:a0:1f:
                    20:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:EB:96:C3:77:D9:79:65:20:83:49:BE:96:7B:38:23:27:4E:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/61831d1c-625e-3eb6-a562-d812a9101222.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:d1:1f:26:17:f8:e7:66:ba:71:a7:eb:24:62:5e:fa:8c:01:
         9c:62:67:3c:ea:66:b3:46:8d:c9:0a:18:49:50:84:78:da:41:
         4c:b5:69:49:0b:ff:08:a9:de:32:e3:03:89:aa:45:b3:a2:74:
         cb:b3:14:1f:59:4b:2e:d1:85:1c:86:c8:42:7b:f4:f2:77:d2:
         44:3b:80:6b:6a:50:36:41:c4:5e:78:2e:8d:11:96:7a:ef:7a:
         87:d9:75:30:b5:55:21:6a:ca:e1:32:dd:92:3f:a3:a5:1c:af:
         d2:fb:57:2c:6c:47:d6:e0:d1:06:54:67:0b:4a:ea:a7:71:63:
         95:1e:eb:0e:64:cf:1c:49:0c:7c:c2:ed:b8:45:b0:0c:4f:be:
         58:fb:d6:1e:90:3d:49:f2:65:30:97:fc:e0:e6:39:c0:49:d4:
         9a:e9:c6:1f:82:a2:05:58:49:84:14:2a:15:d2:f7:62:4c:04:
         15:44:91:25:e3:bf:df:8c:4d:23:48:bf:31:95:e0:77:31:1b:
         2f:c7:65:68:0e:a6:36:1b:6f:cd:02:9d:f2:e9:cc:fd:e4:2a:
         93:57:77:69:f5:ae:a3:a4:c0:01:5e:a7:99:f6:a8:57:8f:27:
         51:1c:fd:46:93:4c:01:f9:c9:6b:08:a3:79:29:47:bf:76:23:
         75:cb:ed:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:43:58 2025 by rpki-client