Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa
File:                     a03db81e-4e1b-3802-b95c-a47c09b9a421.roa (raw, json)
Hash identifier:          hd7VV0rOHEna9I/aWOmRZAvOaxCuZiWFR7qrHKdAve0=
Subject key identifier:   CF:20:0E:1C:1D:72:0F:5E:C5:32:AB:E2:02:1E:66:0E:68:BE:50:1D
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC8169B85686B2B917500
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     53737
IP address blocks:        159.18.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c8:16:9b:85:68:6b:2b:91:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=eec078fe-6256-458c-a7ad-1de8c8a45dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:95:f1:fc:6a:dc:a4:b3:ad:fa:7f:a8:c9:54:
                    89:3b:a0:8c:b4:27:e0:c2:a2:44:79:d3:ad:39:39:
                    c8:63:49:40:77:2d:0f:76:92:fc:87:22:2d:63:70:
                    0b:63:10:71:bc:d4:23:42:13:a8:4c:42:58:e9:01:
                    93:f5:d0:62:70:15:0d:f4:e3:63:6f:d3:92:31:a7:
                    48:d3:85:71:b1:d9:c7:4f:a5:4a:0c:01:8b:a8:5f:
                    63:34:41:51:76:e2:fd:bf:65:01:c9:f5:b4:b3:cf:
                    e9:89:bd:82:1a:d1:15:77:d3:77:83:59:19:5f:c2:
                    3d:b0:13:d2:bb:6c:da:a0:e3:ce:48:94:94:23:08:
                    cb:6c:8d:92:fc:85:e7:77:55:9a:df:cf:26:7c:4a:
                    7d:d3:92:36:55:4d:43:ea:3a:c8:74:38:b7:76:2b:
                    aa:c4:c7:3a:4d:73:f6:a6:e1:34:b1:f8:fd:f1:bf:
                    0b:42:e6:5b:53:84:18:10:7e:ea:f3:70:a1:27:d3:
                    b7:a0:b3:9e:cc:8c:b1:3c:63:e0:a0:3f:59:16:4f:
                    79:48:33:51:e4:53:4f:d5:9f:0b:66:96:b3:b9:63:
                    89:ed:d1:7b:be:49:46:43:0d:f5:de:23:5a:7c:d7:
                    cd:b6:89:aa:fd:cb:fb:ae:05:5f:96:b0:a8:b5:48:
                    2e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:20:0E:1C:1D:72:0F:5E:C5:32:AB:E2:02:1E:66:0E:68:BE:50:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a03db81e-4e1b-3802-b95c-a47c09b9a421.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:73:1e:1b:bd:87:3a:8d:d7:57:c4:60:40:d3:ad:c5:91:d5:
         71:25:4c:6f:cc:e4:34:1b:3c:e0:da:95:51:7c:9b:62:ee:94:
         db:f3:c1:b7:44:e2:9f:b4:30:b6:99:15:56:29:d7:30:de:47:
         82:45:30:b1:c5:01:d6:c0:35:ef:ba:db:da:35:53:de:23:5c:
         be:40:a0:92:d1:5a:23:39:5c:e0:91:fb:b6:f7:0d:f0:7a:97:
         d4:5c:77:02:5a:26:f8:db:bc:08:df:3e:d4:66:91:73:cf:3a:
         46:d8:9b:57:11:6e:5f:b6:93:ce:62:44:16:a7:11:1b:77:a7:
         0b:7a:8c:ae:62:1b:2e:42:20:cc:96:eb:7c:b2:64:7d:5d:66:
         16:d8:35:00:49:85:ec:fb:bf:0d:f9:ab:84:8e:0d:e4:ee:9b:
         d9:0b:81:2c:c4:71:d9:7c:fc:ef:d6:2a:4b:63:b7:01:c8:88:
         dd:03:d1:9e:68:ce:cd:06:e1:a6:4a:f2:d0:c3:69:b0:7e:68:
         40:e9:b5:b8:a7:a0:22:c3:94:8c:81:39:e2:f0:14:65:58:92:
         a4:e8:11:a2:79:f0:2d:46:80:03:2e:f6:04:c6:bf:28:39:f7:
         4a:86:ba:5a:e4:7e:a4:6b:fd:56:cd:a3:ca:47:2a:bf:2f:d7:
         34:de:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 03:47:16 2025 by rpki-client