Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa
File:                     c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa (raw, json)
Hash identifier:          4OTP5Mqd2nPmk49hTW6BomO030b0daXS4PvuFq3wl2Y=
Subject key identifier:   00:50:9A:80:DE:BD:58:BD:01:EE:DB:73:5B:26:C2:06:64:0D:E0:1B
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F43285849F9DFD9B3D22720EA95E66A80
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     15290
IP address blocks:        71.19.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d9:b3:d2:27:20:ea:95:e6:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=02f662fd-ec3c-432a-b356-a5c4115b4eb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:51:e0:66:87:55:fe:17:08:27:cd:48:51:d8:
                    ec:30:91:c7:8b:2c:b6:87:31:c4:bb:f4:12:d8:94:
                    d0:91:5e:ac:b8:03:18:4b:b0:86:c4:e3:b8:c9:93:
                    e1:66:b2:b6:f5:92:b3:14:ee:5c:92:5f:da:85:38:
                    20:aa:74:c2:19:e1:c9:d0:47:13:71:ae:2c:f1:4c:
                    73:84:4e:d0:26:0c:21:54:d9:5c:93:9a:0e:cf:7c:
                    45:c9:34:af:4f:7e:5a:97:41:1c:39:d8:cd:4f:87:
                    16:20:92:be:38:f3:62:8a:40:eb:12:fd:4f:0e:f4:
                    96:af:bf:21:5c:fb:b8:d7:08:05:f9:ab:3d:b3:8f:
                    3f:97:fe:c7:55:70:2f:3b:68:0f:40:f2:5e:31:50:
                    5b:46:22:a8:f7:54:28:e9:f8:0f:79:2b:a8:06:cf:
                    2f:57:ab:86:44:47:66:1a:e8:aa:b7:fc:2a:e8:30:
                    90:20:2c:17:36:df:cc:ab:bc:29:77:88:93:63:a7:
                    2f:00:37:fb:4f:a1:33:92:99:c2:0a:12:3a:12:0b:
                    5b:dc:10:bf:f6:bd:19:5d:3f:2f:de:97:a8:28:85:
                    19:d3:eb:7c:fd:f9:2f:37:f5:73:99:f4:df:da:03:
                    8d:77:a5:40:6f:83:72:d4:29:1c:3e:9a:8e:82:e9:
                    be:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:50:9A:80:DE:BD:58:BD:01:EE:DB:73:5B:26:C2:06:64:0D:E0:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/c90209e1-10e1-3eaa-b6dc-6f9cf4d719d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.19.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a1:82:ce:12:60:d6:3b:59:c1:3b:ae:2a:4f:74:b7:a5:ef:
         70:37:63:1e:96:25:83:6c:41:4f:79:0f:9d:31:5a:a8:b2:fe:
         61:86:8d:c6:b5:64:0a:38:28:f6:2d:07:e9:00:73:9e:66:30:
         d6:51:f9:2e:ae:0b:e1:c1:f1:91:bc:5b:ba:d0:ec:82:07:85:
         5b:aa:e5:b1:61:a5:e1:4d:b6:b3:14:18:4c:5c:c4:1c:8b:43:
         e1:1c:74:24:b5:fb:74:b3:4d:86:90:f2:95:82:4a:bd:d2:1c:
         a0:92:79:8d:6f:8f:9c:ec:03:a2:66:fe:c1:ef:fe:15:34:9b:
         0f:b2:df:c9:0d:48:b9:bb:ac:86:b2:aa:33:b8:69:6e:33:40:
         03:8b:09:bf:c9:9f:d0:41:d7:fd:14:9c:03:6c:f7:7b:3b:ac:
         70:9f:9a:d5:7f:a7:55:a8:4b:e8:a2:ad:83:a7:44:35:df:22:
         70:7f:4d:b7:13:3a:37:c1:6f:f5:91:8d:7a:eb:bc:9b:d8:99:
         c2:df:14:59:99:7e:10:6e:db:0b:95:7c:1f:1f:2a:57:90:98:
         31:02:d2:aa:dd:5b:1e:49:9a:b8:c5:d6:d5:5e:04:84:a6:20:
         e8:ff:1f:65:c9:7e:42:04:37:06:30:06:a2:3c:eb:88:0f:a5:
         f2:39:e8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:16:53 2025 by rpki-client