Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
File:                     95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa (raw, json)
Hash identifier:          CVLLFUBBRONcT7+qrbNbHXuJgEx3gqZVKg9/uTNZVrU=
Subject key identifier:   89:C4:E8:F2:5F:CD:DC:FF:55:56:52:CB:ED:BA:A0:3D:4F:BA:C3:43
Certificate issuer:       /CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
Certificate serial:       010D0C9F4328584A18954043801B38CA8A162940
Authority key identifier: 4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     36329
IP address blocks:        155.254.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:40:43:80:1b:38:ca:8a:16:29:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95e29289-6f1c-4c2f-84f4-c944e9e54940
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=a831f7d7-392b-4454-add7-c11c765e1523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:97:da:ee:68:d5:28:3f:c9:2d:4a:d0:b1:
                    fe:69:d8:9b:52:33:dc:59:c5:c9:37:0d:fe:63:49:
                    41:95:72:0f:25:23:a1:16:f3:42:0a:db:d0:da:a3:
                    d3:06:b6:d3:b0:7e:d3:27:37:c3:bf:8b:60:6b:c2:
                    34:c8:32:93:ff:bb:2e:89:76:de:ee:13:1a:2d:ef:
                    94:6e:56:e0:b2:82:6c:69:eb:91:3c:e0:7c:4b:06:
                    96:3e:d5:89:e3:b8:2b:bd:b0:ea:5f:02:80:55:72:
                    5c:a2:ad:8f:67:36:65:ac:94:dd:07:e4:91:40:9f:
                    10:a4:8b:a7:71:c8:7b:74:ab:94:86:7a:d1:74:1e:
                    51:77:45:de:e1:d3:d1:67:f5:86:57:10:1e:c7:35:
                    5e:d3:43:a3:c5:b8:8b:45:61:ce:ab:d6:71:0a:36:
                    ca:b3:4a:28:eb:6f:a2:f8:f3:7e:20:ec:8f:52:f7:
                    e2:aa:fd:8e:4f:cf:23:2a:7c:a3:5e:b0:5f:03:61:
                    0d:8a:be:01:14:d4:0a:ec:a5:09:6b:b4:f1:95:e5:
                    ce:78:45:8d:c7:54:52:72:45:73:2d:a2:9e:19:84:
                    9e:4e:cd:ae:41:5e:14:73:b0:91:f0:28:b3:61:c8:
                    84:6e:24:e0:93:99:0f:26:b9:44:11:c4:41:d5:58:
                    ce:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:C4:E8:F2:5F:CD:DC:FF:55:56:52:CB:ED:BA:A0:3D:4F:BA:C3:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95dd5242-3b5c-376f-81d5-8ede1c2277b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940/95e29289-6f1c-4c2f-84f4-c944e9e54940.crl

            X509v3 Authority Key Identifier:
                keyid:4D:BA:45:AA:AB:B9:87:63:A5:E6:6F:B3:09:C5:6E:97:30:94:9A:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/95e29289-6f1c-4c2f-84f4-c944e9e54940.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.254.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:26:8c:42:3d:7c:88:df:29:7d:ac:42:00:58:c5:10:88:
         13:9c:93:c8:8f:ab:ca:aa:93:36:95:55:ea:af:02:1a:21:86:
         19:54:68:54:9d:86:37:66:e3:cc:df:3e:3e:b9:a0:6a:0e:a8:
         3b:01:f1:6e:26:b0:df:d4:d8:9a:3c:a7:e6:b2:95:f4:fc:50:
         ad:08:5f:dd:de:df:fa:d3:e8:4a:2f:ae:4e:31:d8:f2:ee:f2:
         78:9d:12:38:a6:2d:32:7a:80:19:ca:c5:fe:49:7d:64:af:ee:
         d7:b7:fb:72:17:11:0b:fa:03:b4:68:43:2a:9d:17:b0:04:c7:
         b0:2c:fe:3c:9f:6a:4e:19:a8:1f:cd:0e:3a:4b:ba:27:92:85:
         bf:c0:57:60:98:12:a1:bc:cf:73:32:50:82:40:c4:b6:11:c3:
         6e:6e:f9:53:04:fc:c5:67:02:4b:df:20:d8:c7:7b:9b:6c:25:
         10:b1:f3:35:4b:7c:41:dc:d1:1a:bf:88:4e:88:5c:5b:1d:06:
         9a:e1:d1:61:0c:ab:d0:ec:cf:09:ab:2c:88:88:cf:a3:6a:64:
         81:fe:66:46:9d:f0:ab:34:e5:94:9b:5d:32:bc:17:d5:ef:3a:
         b4:80:25:1c:ed:6d:48:f8:9b:44:bf:d0:ea:69:6f:75:c3:f8:
         72:33:9d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:07 2025 by rpki-client