Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e23f879-73ff-31f3-9ba3-f5fed3dbb7ad.roa
File:                     2e23f879-73ff-31f3-9ba3-f5fed3dbb7ad.roa (raw, json)
Hash identifier:          e1HyShvBWGgQe6LJoTgb9q4AiGjWr0rmEcs+GYGB0u4=
Subject key identifier:   51:CA:64:52:F1:53:81:90:1F:4B:4C:67:2B:AE:BD:FE:B6:28:54:F2
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285849EEB50C4FE90BC825556C2749
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e23f879-73ff-31f3-9ba3-f5fed3dbb7ad.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     18779
IP address blocks:        216.172.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:0c:4f:e9:0b:c8:25:55:6c:27:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=1d2d48fd-f55e-4355-bb38-05c47fb9579a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c3:ac:b3:35:8a:a8:7b:46:5b:44:a9:12:2a:
                    27:4b:70:78:c5:8e:95:7a:fa:26:1d:39:e3:04:e1:
                    57:8a:b2:81:9a:20:c2:8b:f2:53:56:82:38:01:7b:
                    23:39:d5:ef:6a:49:8e:c2:05:de:3d:18:d2:ab:d5:
                    66:9d:71:c0:92:f6:d3:bf:ed:79:6a:a3:68:d0:1a:
                    14:73:e8:c2:dc:ba:b1:0d:0d:73:76:8e:31:1c:5c:
                    01:d9:83:43:88:b8:f5:9b:bf:f6:a8:3f:d1:7a:36:
                    12:6d:2a:cf:bb:5d:a8:7d:19:3f:b6:be:2f:9b:9b:
                    45:8c:5b:73:4a:49:d4:8d:19:3c:77:56:ff:aa:23:
                    13:c8:fe:da:f2:4f:c5:53:69:81:25:ae:29:6c:25:
                    d9:01:59:97:ef:42:74:7c:1d:1e:64:3f:40:e2:bf:
                    8b:10:0e:c1:e1:7b:cd:3e:5f:d5:15:9f:89:f6:16:
                    a2:95:aa:d4:ae:06:12:2d:73:37:d5:34:c5:f3:ca:
                    22:d0:a6:e2:8e:60:c9:d0:11:12:b8:42:61:da:4c:
                    9a:aa:0d:e7:34:6d:e7:99:65:f8:e8:df:17:10:f6:
                    59:41:07:cc:26:3b:35:31:f2:c8:00:1f:e6:61:3a:
                    3a:d5:da:ac:22:50:ff:a7:de:ad:84:8e:e4:4a:fd:
                    b7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:CA:64:52:F1:53:81:90:1F:4B:4C:67:2B:AE:BD:FE:B6:28:54:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/2e23f879-73ff-31f3-9ba3-f5fed3dbb7ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.172.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:76:e8:d3:7f:30:e4:87:be:5b:0c:57:30:99:bb:65:ec:82:
         3a:80:d2:65:5d:0e:9a:3f:d3:04:1a:67:26:aa:5e:69:fa:5d:
         ff:2e:31:db:15:a6:43:7b:a2:2b:c9:63:8d:07:f3:92:07:0d:
         bb:da:d7:99:3d:83:6e:e6:2e:ae:94:ee:8a:3c:6d:14:17:41:
         b8:c1:da:b1:68:d1:e0:4e:8a:a6:b4:df:fd:5d:9d:55:e1:6a:
         aa:b5:30:f0:46:1a:00:7a:23:d2:23:db:76:9c:0f:41:e7:f7:
         9b:fe:26:e7:02:86:9a:74:a9:fe:02:5a:98:3a:90:47:1a:70:
         c0:21:ec:ff:66:75:a6:00:5c:b7:37:81:71:07:7d:15:3d:71:
         c8:9b:aa:cb:e9:be:44:d5:ea:70:5c:62:af:7f:14:05:60:bc:
         06:01:f9:36:0a:bf:ac:ad:f1:fd:56:00:f2:29:b5:d9:be:5a:
         b2:1a:f1:b9:e5:35:77:f2:af:1f:6d:75:2b:e8:12:38:31:96:
         d1:ea:b3:cc:8a:f3:8f:7b:7e:41:9a:8d:41:54:75:28:bb:d1:
         25:36:1e:56:49:5b:df:2a:20:a1:df:a5:82:c3:c5:cd:6d:0c:
         1e:47:cd:e0:a8:b8:05:c4:62:f4:76:79:b4:66:d9:d7:e3:d8:
         b8:2a:4c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:22:26 2025 by rpki-client