Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f55b2f3-3b05-30ad-9fba-0a93eaaa5d6e.roa
File:                     9f55b2f3-3b05-30ad-9fba-0a93eaaa5d6e.roa (raw, json)
Hash identifier:          kEP0vBD44t2MmjzwDvmWMO3+6KgzVea13dg+sccgGlk=
Subject key identifier:   BB:E1:44:CB:55:31:0D:66:9F:BC:29:2B:8C:8A:25:0F:4E:7F:10:FB
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F43285849FCAA879E498E2F1B18D001C0
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f55b2f3-3b05-30ad-9fba-0a93eaaa5d6e.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19901
IP address blocks:        143.103.64.0/19 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:87:9e:49:8e:2f:1b:18:d0:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=322650a3-96bd-4282-8f63-d041c86b346c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:22:b3:24:66:4b:8f:cd:54:72:c8:2a:73:12:
                    20:fe:66:bc:e3:99:4b:9a:c6:e1:9c:eb:8c:43:61:
                    59:17:af:87:dd:ae:ad:f2:04:79:b3:eb:a7:2d:f2:
                    96:7b:88:1a:3e:cb:7b:74:df:1e:79:61:9a:50:71:
                    97:46:f6:d6:06:56:0f:85:a6:3d:48:d4:ef:d1:a3:
                    f0:ea:09:79:e6:7a:4f:82:76:31:cf:96:13:79:79:
                    9a:60:50:4a:0c:07:fd:96:d5:5c:4b:4f:c4:00:30:
                    19:c5:ca:d7:ac:f3:80:83:cd:6a:17:a8:b8:81:b7:
                    65:32:71:a6:6e:00:df:c7:c2:be:a7:b6:82:f3:58:
                    1f:f7:17:2b:96:9f:4d:c9:ed:71:28:45:46:43:86:
                    27:ae:8b:34:05:e3:66:e9:32:61:9c:4a:ac:34:82:
                    f7:2d:e7:15:02:b8:00:34:e0:e4:c6:b1:f3:3f:10:
                    bf:40:1b:3a:47:aa:37:f1:9f:52:ac:54:f8:5b:d4:
                    25:ff:35:ee:26:7d:dc:c2:3c:f8:60:4a:3c:a7:2f:
                    2a:3c:f1:aa:2f:1b:cd:cf:39:13:33:65:2b:04:65:
                    65:36:21:19:4f:f9:88:38:f6:3d:fe:e4:47:92:ac:
                    25:ae:bd:ec:73:d5:e3:cb:f3:58:da:be:c4:4d:7a:
                    bf:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E1:44:CB:55:31:0D:66:9F:BC:29:2B:8C:8A:25:0F:4E:7F:10:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/9f55b2f3-3b05-30ad-9fba-0a93eaaa5d6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.103.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:dc:10:61:72:a3:97:5e:05:de:ea:b8:a6:42:f7:91:e6:24:
         fe:fa:83:bb:eb:5a:f1:1a:e3:7f:b4:78:5a:22:ba:f9:ee:90:
         43:3e:74:e4:a1:3c:64:7d:a3:33:8a:62:2b:ee:e5:d8:8a:34:
         d2:9e:e0:20:11:d8:85:8a:3a:ce:04:d8:d1:8e:76:72:94:6f:
         df:8a:1c:8c:fa:da:73:46:21:98:ff:df:90:e9:44:da:ff:46:
         a4:f7:9a:ec:17:09:17:b7:25:d9:eb:29:9f:29:37:15:e2:cb:
         dd:36:74:2a:e2:55:7e:67:5c:86:98:84:f4:47:ab:62:8e:67:
         f1:a8:81:ce:91:b8:86:c3:6f:d1:92:24:d9:35:2e:fe:21:ef:
         0d:00:50:bb:3b:a6:41:f7:87:64:4e:56:7d:23:f1:94:2b:2a:
         40:49:0a:fd:60:4f:38:24:74:59:8f:37:21:27:0b:45:c4:bc:
         55:81:00:19:e2:9c:62:34:96:52:9b:b8:bf:ea:8e:4a:e7:94:
         53:37:7e:68:47:bb:32:bb:21:db:b3:98:29:4d:7d:8c:94:88:
         b8:8e:3b:a8:9f:ce:82:56:79:e9:a6:36:c8:ac:1b:4b:e7:7c:
         c3:c1:ce:05:ac:84:45:e5:ac:0b:76:22:8e:65:35:0f:a6:eb:
         72:9a:61:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:50 2025 by rpki-client