Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa
File:                     00681fed-7421-32cb-94ff-8ca143932bd9.roa (raw, json)
Hash identifier:          juIj9XPW4p2wmgLgctBP8ZFmCOOLZSV6wW4OMd3uACg=
Subject key identifier:   D8:BB:BC:25:72:B9:42:9E:3F:58:28:6D:A9:9B:42:72:D8:CC:96:EF
Certificate issuer:       /CN=c75c2a49-d4ec-49ef-affc-f07717c14231
Certificate serial:       010D0C9F43285849D594CCFD0C4F85EF3CDEBA80
Authority key identifier: 1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa
Signing time:             Tue 13 May 2025 01:00:47 +0000
ROA not before:           Tue 13 May 2025 01:00:47 +0000
ROA not after:            Mon 11 Aug 2025 01:00:47 +0000
asID:                     13347
IP address blocks:        170.205.4.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d5:94:cc:fd:0c:4f:85:ef:3c:de:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c75c2a49-d4ec-49ef-affc-f07717c14231
        Validity
            Not Before: May 13 01:00:47 2025 GMT
            Not After : Aug 11 01:00:47 2025 GMT
        Subject: CN=041ec1e9-9c23-4d65-9724-44bb63d62911
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:26:0a:5e:f7:25:66:e4:6a:85:4e:37:25:1a:
                    0d:7e:e2:69:c6:8c:40:8d:c4:c9:9a:0e:18:87:00:
                    d7:7d:de:70:73:93:67:2c:18:2c:61:8d:0f:a8:fb:
                    e4:07:09:34:a3:1c:ce:ce:39:b5:38:0f:fd:5c:40:
                    ee:91:93:d0:14:0c:e2:1e:af:e5:89:4d:71:dc:08:
                    5a:3b:c1:39:46:45:01:86:19:67:f1:ae:5d:f3:b4:
                    5b:31:52:d2:4f:db:63:77:d0:b4:25:8f:c3:22:96:
                    75:b0:20:bf:64:2e:b1:ab:ea:41:c4:d1:71:7a:89:
                    61:2e:03:3d:cf:1b:1a:da:36:6e:ee:ca:d4:4e:0d:
                    04:c2:7a:2d:1d:05:06:32:c6:0e:d9:7e:6e:06:77:
                    13:c5:28:ae:17:e7:8a:17:c2:76:b3:e8:2a:fe:16:
                    0c:77:08:4a:e7:1b:6a:b2:c3:08:61:97:64:fe:ce:
                    ad:bd:66:52:4d:b7:2d:de:49:4e:7d:3c:42:fd:f0:
                    e9:79:fa:a4:8b:8c:64:62:34:d3:82:ef:8f:42:ed:
                    90:e0:f5:2b:da:60:fe:69:23:7b:0c:82:8e:0a:fe:
                    87:97:af:b4:9a:b4:99:ef:1b:19:ce:20:ef:84:96:
                    15:92:5f:ac:47:bd:d8:58:c9:01:f7:04:28:9b:82:
                    90:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:BB:BC:25:72:B9:42:9E:3F:58:28:6D:A9:9B:42:72:D8:CC:96:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/00681fed-7421-32cb-94ff-8ca143932bd9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231/c75c2a49-d4ec-49ef-affc-f07717c14231.crl

            X509v3 Authority Key Identifier:
                keyid:1D:AB:A6:60:5B:91:EA:C1:D4:F7:19:D1:23:FC:C0:38:C1:5A:12:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c75c2a49-d4ec-49ef-affc-f07717c14231.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.4.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:2b:16:6a:9f:fd:7d:1e:82:d0:4b:77:b1:da:5d:a2:a8:87:
         72:2d:56:be:93:a2:a2:0f:2a:d5:f6:d2:e3:00:a8:7a:2c:40:
         f1:e9:22:0b:69:ed:dd:7e:48:10:83:82:66:96:05:8a:22:36:
         61:11:fa:46:5b:37:03:2e:91:57:84:48:cc:e3:5b:62:de:8e:
         7b:bf:e1:d6:81:ee:48:39:a5:e1:97:24:42:3f:2f:39:be:a7:
         9d:a2:60:94:87:61:dc:16:53:cd:7f:50:33:34:e5:1c:9e:ae:
         d6:dc:27:0a:d4:1e:30:6f:95:b2:23:ba:73:f2:b7:68:f9:34:
         6f:90:01:6b:93:ae:d5:05:dd:a9:98:e9:34:5b:e4:eb:a8:a8:
         d2:6c:94:ad:be:9c:da:72:cc:9d:3a:c9:54:60:8c:49:df:bf:
         d9:db:28:12:77:fa:25:3f:43:bd:af:5c:f8:15:da:60:3d:19:
         7b:ec:fd:17:54:f6:32:f6:d9:92:f7:76:d6:e2:74:26:fa:b3:
         59:01:33:38:71:36:98:c8:02:2c:a3:0e:6e:f1:75:ca:57:0e:
         74:ef:97:22:f9:c1:7a:20:8d:d9:73:cb:0f:ca:56:0f:4a:ab:
         02:87:af:db:27:2f:15:a0:d9:8f:a1:c7:4e:14:d0:a7:b1:b5:
         2d:c3:07:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:57:18 2025 by rpki-client