Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
File:                     55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa (raw, json)
Hash identifier:          CSnSarA/IFSogy+AJkc6gNLl+m2ihAMyyQJ8w9DdGZU=
Subject key identifier:   9B:21:3E:51:D5:C2:BA:2F:42:9C:26:B2:D3:03:72:77:6A:7F:CB:DB
Certificate issuer:       /CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
Certificate serial:       010D0C9F43285849D16502E0586FE9007AECACC0
Authority key identifier: CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     62537
IP address blocks:        162.222.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:02:e0:58:6f:e9:00:7a:ec:ac:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7ca79a-f8f5-408a-86fb-472d63ed156f
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=b14d2f46-8abb-407b-8c00-2cf73c8c29e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ec:9f:a7:4f:e9:cb:e3:54:dc:3a:9e:38:51:
                    ee:f5:59:9e:45:a0:73:27:04:a4:18:19:54:20:e7:
                    43:82:7e:dc:49:a2:d5:f0:46:5d:1c:eb:8d:56:c6:
                    bc:47:27:41:10:1d:2b:04:80:9e:e4:45:89:67:40:
                    c4:9b:a4:bb:3e:70:31:f1:fd:dc:1b:cc:51:6b:c6:
                    78:de:bb:58:25:5e:76:3b:81:51:5a:e3:b2:8a:6b:
                    2e:8d:65:60:f4:5d:70:23:91:e4:68:75:b4:cd:e8:
                    15:52:d8:fc:d4:1b:a9:67:f8:96:97:34:6f:40:96:
                    3a:50:05:92:47:58:7a:4c:bb:a5:17:a5:bf:d1:e7:
                    a0:5d:50:12:7f:42:e1:b9:1b:09:c1:c3:cf:d3:80:
                    d5:ef:cc:1f:5a:08:99:52:c3:88:fe:48:dd:98:bd:
                    ce:a1:c3:32:c4:f1:80:58:f2:a3:a9:7e:46:43:24:
                    8a:39:46:6b:65:7e:74:8e:fd:25:46:0b:a5:d0:88:
                    8a:35:9e:7b:f2:3e:d2:73:66:54:9a:36:d2:c2:04:
                    97:f8:5a:67:83:85:8c:7a:85:6c:91:45:1f:3f:21:
                    58:f8:74:e0:81:45:10:de:71:54:2c:5a:54:9e:c8:
                    dc:59:8e:4b:d7:5a:5d:1c:2a:e4:7d:ce:09:0a:23:
                    70:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:21:3E:51:D5:C2:BA:2F:42:9C:26:B2:D3:03:72:77:6A:7F:CB:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/55f6d8a3-1d4f-38a1-9204-56083951ab8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f/df7ca79a-f8f5-408a-86fb-472d63ed156f.crl

            X509v3 Authority Key Identifier:
                keyid:CD:25:D2:1D:B4:E5:3B:C2:CE:4F:45:5C:0F:74:36:4D:CA:A2:45:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df7ca79a-f8f5-408a-86fb-472d63ed156f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:bd:54:fe:06:df:7f:cd:86:8d:e2:b0:57:55:ad:ad:11:79:
         08:27:8b:b3:24:5a:d9:9b:1b:39:9e:c9:1b:58:7d:79:0c:e3:
         0c:cb:0d:72:2a:e0:c1:a8:15:95:c0:63:f7:ca:49:fa:e7:73:
         0b:9f:ea:5e:22:6e:a1:c0:8b:6b:43:e8:cf:a0:55:ad:d8:f7:
         78:d4:a5:b2:98:bc:2d:d9:93:44:ba:c8:88:6c:70:96:4a:86:
         30:3c:3d:ee:0a:12:62:a2:bf:56:7b:52:c7:2d:c7:23:28:9e:
         1f:95:75:5f:87:0c:dd:c6:db:2e:28:39:bb:a8:1b:68:dd:1f:
         29:81:88:da:12:24:27:38:83:93:5c:82:eb:ae:93:bc:24:4d:
         5a:87:01:1c:d5:4c:2e:7f:aa:e6:9d:18:e8:3b:e9:6a:7b:9a:
         11:1a:68:e0:f3:7a:8d:c3:4b:ab:07:99:b8:d0:72:9a:9d:c1:
         2a:be:1b:74:d7:9c:25:09:fa:66:f2:6d:3d:23:a9:37:e5:a4:
         29:66:e7:69:70:2b:ff:73:ab:f1:53:d8:d5:9d:c7:46:ba:ae:
         46:35:85:dc:f7:2a:55:3e:2f:69:de:d3:39:90:de:9e:fc:13:
         cb:74:63:7e:70:56:a7:aa:dc:2c:1f:10:0b:ce:37:fa:b5:38:
         1d:b0:fe:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:45:12 2025 by rpki-client