Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa
File:                     be60be4d-47c3-3ffc-824b-5141972a9289.roa (raw, json)
Hash identifier:          t6i/OA+UHWEzQb8knjUStFlhmolKpSuXYIKYi05SYL4=
Subject key identifier:   55:26:78:CE:61:86:A7:9C:04:F5:0F:96:73:0C:89:05:4C:CA:16:52
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849FCAA765D43449D83257FA080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     6461
IP address blocks:        71.19.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:76:5d:43:44:9d:83:25:7f:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=1309e26f-ad54-4581-abfe-c49121e98116
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:90:f8:28:0d:f1:28:70:8f:32:c5:ea:ba:92:
                    af:3c:9c:40:c9:be:3d:f3:f5:9e:00:95:50:9d:58:
                    bb:6e:f3:46:ff:9c:d1:17:65:fe:e9:40:9a:3f:0d:
                    57:72:8b:76:94:60:51:4b:e2:bb:c3:ef:ee:ae:22:
                    8b:d3:91:56:25:be:7a:f1:43:d6:b0:69:d8:7a:59:
                    7e:9f:dd:09:ee:30:de:90:d1:9d:87:68:33:91:9f:
                    9a:b0:76:0d:2f:5c:00:e1:57:ea:1b:cd:75:26:0e:
                    7d:fc:dd:39:8e:a9:7e:2a:d9:13:23:b6:9a:b6:b4:
                    b5:a1:a8:31:61:57:e8:71:7d:dd:0f:02:94:c1:27:
                    1d:16:6d:34:fa:d6:59:e1:42:43:38:87:80:ec:6a:
                    42:1a:33:8f:c4:1b:b5:8b:39:cd:69:88:5e:17:d8:
                    0e:a8:34:08:3e:c6:58:be:1c:70:2d:bb:3f:c1:56:
                    04:ad:5e:90:8d:6f:ed:09:18:a8:cf:a9:24:00:6c:
                    81:6e:53:0b:0e:5e:ca:03:da:3c:6d:58:6e:5c:96:
                    95:47:9d:5c:c7:14:d8:e1:79:b0:60:05:3e:d5:a0:
                    00:11:ef:e3:26:d2:e8:2f:e1:ee:66:7c:b7:07:35:
                    0c:a8:20:cc:84:dc:7b:5e:7f:0c:80:13:d9:22:32:
                    f0:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:26:78:CE:61:86:A7:9C:04:F5:0F:96:73:0C:89:05:4C:CA:16:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/be60be4d-47c3-3ffc-824b-5141972a9289.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.19.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:16:38:b8:b1:d1:f7:2e:1a:45:d0:73:de:64:61:f6:72:ff:
         78:22:92:3f:41:7b:f7:5b:1d:a3:14:60:4f:f9:76:8e:60:72:
         fe:b8:64:9f:26:10:e1:52:ab:37:49:c5:78:bb:2e:54:f9:ac:
         67:ff:ec:fb:27:c4:a5:7f:12:bd:af:0c:01:dc:00:9a:19:9b:
         55:e2:3f:b9:36:fa:da:35:15:58:25:87:79:78:58:8a:24:51:
         fb:ba:31:8e:37:5f:d1:17:6c:9d:c9:20:b0:82:67:b7:3b:c3:
         15:4a:a8:13:57:60:ba:7d:0a:e5:96:ce:93:c4:69:05:f6:e8:
         d3:d8:41:7f:ef:f2:07:38:fc:f3:f4:3b:4c:88:ed:1a:47:9b:
         29:18:b3:5e:4a:d6:2c:e4:db:b6:fb:47:c6:9b:e2:88:e1:9c:
         34:71:a2:f3:1c:c2:b7:ca:5b:a8:a1:5b:ac:ad:57:54:d2:4f:
         78:c9:c3:16:22:ce:38:d3:02:e3:a0:56:28:10:6b:57:f9:fd:
         11:52:c9:3c:c8:06:12:ce:1b:e0:85:e6:71:25:99:ef:fe:1f:
         93:e0:22:9d:7d:d9:35:1e:39:4e:30:47:ce:9a:89:6b:5c:01:
         21:87:11:6e:4f:29:96:13:09:45:1b:77:02:88:9b:4b:14:60:
         22:2f:c9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 17:25:45 2025 by rpki-client