Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa
File:                     a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa (raw, json)
Hash identifier:          B+INEzVTYrjw/8AqR9G+wSC3BhCklU8GWYOviu+56c0=
Subject key identifier:   6C:D5:F5:87:26:D3:F7:BF:45:AF:D2:D1:E0:72:01:C7:EC:3C:66:88
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFC9F066BCAA3449756CA0
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     40934
IP address blocks:        184.94.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:c9:f0:66:bc:aa:34:49:75:6c:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=515e6b05-0583-4137-b763-1aae0b08bfa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9f:42:b7:0b:de:ac:d1:6f:54:f2:c3:6e:05:
                    1d:87:d4:b9:05:4c:69:be:3f:f6:64:47:47:c7:73:
                    f9:57:32:c2:4e:1a:1f:7f:2f:52:e2:b6:b5:df:26:
                    a0:54:fb:b6:b4:1c:79:69:02:03:e0:df:80:89:66:
                    e9:f9:33:a6:2f:de:c7:3e:29:68:c1:40:74:6c:0c:
                    7d:2b:f5:56:72:f2:4c:ec:17:cb:7a:28:27:53:10:
                    b0:16:1e:82:84:d9:95:63:07:85:7b:e8:b2:6e:cf:
                    1a:b5:e7:75:71:c6:4e:95:6a:68:e3:9d:a6:c1:61:
                    e3:51:7c:ff:bd:49:7c:23:c0:89:e5:85:91:94:6a:
                    55:1f:c5:c5:c1:70:f0:18:ca:ea:6e:b4:9f:dd:0d:
                    00:30:6a:32:cf:e0:cd:ac:9d:09:a3:dc:9d:be:ec:
                    58:e5:14:27:4a:62:28:29:25:67:74:10:99:a6:78:
                    fd:2b:79:e7:3a:bd:48:9d:89:4a:32:3b:51:de:03:
                    a7:37:e4:29:5c:0b:8e:00:d8:c8:04:b8:c2:54:4a:
                    ea:52:a6:85:ab:02:44:ad:ab:ed:94:2d:e8:2e:8f:
                    5b:05:52:fe:2c:4c:94:82:40:b3:f0:4c:3e:e8:4c:
                    63:73:b7:f5:37:f4:ee:b9:5b:8f:57:8d:c6:02:4c:
                    d3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D5:F5:87:26:D3:F7:BF:45:AF:D2:D1:E0:72:01:C7:EC:3C:66:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/a08a2c0d-d1ec-3553-842e-05e4bbc8991c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.94.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:31:09:26:18:af:a0:15:f1:81:6c:64:d3:a1:27:df:73:ec:
         6a:e8:f7:b5:a3:38:7a:19:be:38:6a:4b:24:82:a1:a0:ca:0c:
         e1:1c:80:1d:28:68:31:87:6f:b2:0e:a0:3a:b3:ea:3f:50:a1:
         b0:02:d0:72:87:56:05:a8:ee:93:25:fe:ab:15:07:bb:41:4a:
         35:6c:f0:51:7f:4d:ae:63:41:73:b9:1e:f9:b7:45:0e:18:05:
         07:17:b3:48:c6:07:5a:68:0c:60:df:4c:ee:3b:86:31:34:c8:
         c9:f5:2d:af:6d:5f:02:d0:b9:f6:2d:0f:ef:c6:2a:fa:dc:60:
         1b:bc:b1:5d:f9:9e:69:65:9a:ae:48:92:e3:87:33:71:0d:f9:
         2b:52:57:f0:49:7c:1b:99:c4:c2:08:d2:b2:d1:58:30:b0:32:
         51:21:fd:af:f2:a2:1a:c5:a8:09:63:2a:ca:f4:c0:e4:84:3b:
         a5:0b:c6:72:62:35:cd:52:11:69:65:07:db:22:a4:88:30:5a:
         2f:aa:76:bd:29:e2:49:94:10:d3:53:21:36:a7:28:18:92:05:
         65:29:7f:39:64:79:72:22:7b:df:2b:64:04:eb:18:5d:ff:ba:
         33:bf:60:73:65:b3:a7:1c:08:64:9c:6d:b0:66:7d:3a:86:05:
         15:e3:18:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 04:32:03 2025 by rpki-client