Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/19e715da-3f2d-3467-89ea-2635bc17869e.roa
File:                     19e715da-3f2d-3467-89ea-2635bc17869e.roa (raw, json)
Hash identifier:          XsZ5OwNLkLTLKV7eaVm84tFn1Bsy1I1vJ/XXIKKnxSk=
Subject key identifier:   6C:EE:64:4C:4B:00:23:5F:B1:57:BB:3F:02:C3:D1:B6:79:3A:0C:53
Certificate issuer:       /CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
Certificate serial:       010D0C9F4328584A20F54C9ED18E9E2488310F80
Authority key identifier: 92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/19e715da-3f2d-3467-89ea-2635bc17869e.roa
Signing time:             Mon 09 Jun 2025 01:00:50 +0000
ROA not before:           Mon 09 Jun 2025 01:00:50 +0000
ROA not after:            Sun 07 Sep 2025 01:00:50 +0000
asID:                     18659
IP address blocks:        64.57.153.0/24 maxlen: 24
                          64.57.154.0/24 maxlen: 24
                          74.120.157.0/24 maxlen: 24
                          208.70.178.0/24 maxlen: 24
                          208.74.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:20:f5:4c:9e:d1:8e:9e:24:88:31:0f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44b4119f-34fc-4fce-8dbf-b69ae33a493a
        Validity
            Not Before: Jun  9 01:00:50 2025 GMT
            Not After : Sep  7 01:00:50 2025 GMT
        Subject: CN=227ab2de-da19-445a-9cf4-c344c3b74371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:e0:cb:9e:58:d0:54:b9:8e:44:14:e6:68:62:
                    e2:39:f3:a2:f4:84:9e:00:78:a1:53:81:77:0d:41:
                    f5:89:1d:be:e0:2e:c7:d2:d2:cf:fe:6f:8f:80:0f:
                    31:eb:96:b8:2d:eb:f7:37:87:3c:42:e0:29:02:a7:
                    7d:2e:b1:59:fe:a1:72:a6:1d:69:57:17:40:a4:ab:
                    3a:29:7b:b5:6b:6e:3a:0d:93:d5:2a:07:ea:f3:85:
                    3b:e2:9b:2e:52:99:3a:9b:fc:4a:fa:e7:6a:fd:23:
                    95:35:e0:d1:eb:16:32:de:09:cf:8b:48:e1:38:3f:
                    25:94:87:ce:cd:b8:2c:af:86:28:02:6d:3b:9d:77:
                    66:55:62:5a:2e:1e:e0:03:b3:55:05:9e:c5:fc:69:
                    09:95:06:6c:6d:cc:65:17:2f:17:81:e3:fb:69:cd:
                    d0:df:98:34:b7:4b:0f:42:6b:26:f1:cd:8b:f3:97:
                    2b:7b:07:eb:3f:50:56:4d:29:46:ac:a9:45:d1:e7:
                    7f:af:6a:aa:48:bd:19:99:87:18:eb:54:8e:fc:bc:
                    d9:f1:47:ad:84:20:11:4a:c8:92:18:6d:41:51:7d:
                    74:26:04:13:e0:c9:05:b1:1e:fa:4e:44:42:77:4a:
                    65:3c:8f:01:cf:5d:20:66:d8:7d:50:90:19:e6:c7:
                    bc:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:EE:64:4C:4B:00:23:5F:B1:57:BB:3F:02:C3:D1:B6:79:3A:0C:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/19e715da-3f2d-3467-89ea-2635bc17869e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a/44b4119f-34fc-4fce-8dbf-b69ae33a493a.crl

            X509v3 Authority Key Identifier:
                keyid:92:1C:D0:0D:FE:07:3C:69:E7:56:03:52:BD:6C:5D:11:29:A5:13:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/44b4119f-34fc-4fce-8dbf-b69ae33a493a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.153.0-64.57.154.255
                  74.120.157.0/24
                  208.70.178.0/24
                  208.74.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:ba:5b:26:9a:1d:41:d1:0b:77:13:7c:8a:71:6b:b3:4a:4c:
         5e:92:67:da:1f:54:bf:cc:e7:6b:24:08:3e:7c:5f:b6:61:d8:
         00:d4:78:62:b7:cd:d4:06:95:43:48:fe:11:a5:29:40:03:fa:
         15:32:5f:72:d7:6f:07:52:f5:92:7e:99:07:bd:3c:73:5b:0b:
         07:14:64:a0:37:ff:19:a1:3b:e4:a0:5e:d9:14:61:5c:13:ff:
         ee:78:ef:c2:01:2e:4c:45:e6:90:46:18:4c:f6:f9:40:39:2f:
         16:be:c8:76:35:50:b3:d6:d9:35:42:78:c9:f0:29:13:85:b4:
         e1:e8:19:23:2d:16:37:3b:7b:59:b5:e2:09:dc:31:d4:88:81:
         be:00:e5:27:79:16:49:cb:a6:d2:4b:a1:fa:1c:47:d5:e0:78:
         4a:0f:f5:83:5a:b7:2a:22:8f:78:c6:ce:e9:d5:2e:67:85:10:
         29:40:b7:4a:97:2a:85:c5:95:72:3a:3d:84:3f:c1:c1:4b:98:
         dd:e8:a5:8c:1e:df:07:ff:a8:d9:eb:7b:f3:94:7d:da:c9:fd:
         ed:f2:46:da:81:24:d1:23:c8:4b:3b:56:7e:cb:1c:ae:2f:7f:
         ef:cc:f8:6d:50:40:e4:00:ca:12:26:69:75:3b:69:e1:62:f8:
         af:d2:c1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 06:02:48 2025 by rpki-client