Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa
File:                     970cb531-2a50-39b8-9486-6ed2b0b9d958.roa (raw, json)
Hash identifier:          6z0hQxvYBX/aDy+BvtIU07IceU5ld9xCg0PWNmMrkZM=
Subject key identifier:   E7:59:7B:FE:CC:39:15:B8:F5:7D:5C:A0:35:FA:17:98:06:4D:5C:4E
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849C0A4EF499EB853C5C2E6F8C0
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     36183
IP address blocks:        172.225.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ef:49:9e:b8:53:c5:c2:e6:f8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=41f9c5b5-c83b-447d-90bf-148f524b1e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ef:d4:86:38:e8:65:8d:98:f8:1a:ea:9b:03:
                    f9:d2:06:6e:c6:c5:00:a7:4b:72:68:26:01:9c:36:
                    be:35:89:e3:ca:2f:9d:69:65:ef:ea:33:12:8b:cd:
                    e1:63:93:29:b3:c3:34:83:08:88:ac:6a:d4:d7:5f:
                    62:e8:79:31:a9:1c:86:22:17:1a:47:da:0e:4d:01:
                    5b:43:eb:53:f9:f6:9e:58:0f:d4:c6:c2:4d:7a:21:
                    39:7f:ee:e6:96:8f:90:f9:15:65:3f:f5:75:28:21:
                    2f:c1:e9:5c:51:dc:1e:4f:90:44:06:d9:12:78:68:
                    91:be:56:5c:cc:3e:8e:53:32:4d:68:16:12:d6:e9:
                    01:b2:08:6c:18:bf:eb:79:af:13:4e:8c:ba:6f:f3:
                    4b:a9:3b:22:0a:f6:61:0a:27:91:ee:66:e0:45:c1:
                    f1:dc:ce:8d:68:9a:60:2b:e8:c1:af:d2:3c:0f:31:
                    87:d1:5a:41:47:4f:0c:c5:19:fa:2d:4e:64:37:e1:
                    26:d9:d5:48:fc:69:a1:ab:b8:1d:41:04:a4:d2:45:
                    c6:d3:ad:09:f0:39:73:67:0d:14:96:52:b6:54:5b:
                    5a:64:7c:ea:aa:f0:c0:74:81:ee:d6:7e:a9:ba:a0:
                    25:4f:97:c3:74:59:ce:34:8f:ea:bd:7e:18:55:ec:
                    9f:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:59:7B:FE:CC:39:15:B8:F5:7D:5C:A0:35:FA:17:98:06:4D:5C:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/970cb531-2a50-39b8-9486-6ed2b0b9d958.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d4:bd:58:f8:a4:77:4f:b6:1e:85:b1:c3:8c:03:68:82:3b:
         ed:0d:a8:16:78:8b:13:8f:d6:95:0d:1f:6a:fa:01:ac:8d:7d:
         5a:35:5a:fa:4b:c0:a1:73:9a:73:8a:c6:09:b3:d6:1a:7d:42:
         85:4c:c0:2e:9e:24:74:0d:f4:3b:74:0a:8d:ea:89:d6:84:d9:
         6d:70:d8:36:78:71:aa:59:8d:49:e5:6b:81:4c:0f:2f:f9:fc:
         b9:b0:61:f5:a9:d9:2d:24:93:db:6c:2d:24:3e:15:f2:ef:ae:
         6b:96:b7:d0:70:fc:e8:d8:00:45:99:bb:21:ed:2a:92:03:7b:
         f6:29:1b:0f:62:44:ca:fc:08:67:df:7e:9b:bf:93:20:8e:27:
         d5:2e:97:f0:57:eb:1e:2c:37:5d:8d:96:d7:f1:ed:05:9f:27:
         f1:16:60:13:f2:a7:38:83:c4:d7:6f:6c:f2:6a:83:f8:d5:57:
         ba:ee:2c:70:f5:c4:42:e2:33:80:c8:95:ef:2a:c7:8c:fd:c3:
         3b:fc:be:75:1b:a3:be:4e:8a:d6:de:86:24:6c:8d:5c:3e:b9:
         d8:15:3f:9b:f3:28:a8:f8:e0:b8:f4:e1:87:e6:61:60:e2:ad:
         c8:d6:81:0c:c3:32:35:06:10:5b:86:55:fe:7b:c9:dd:df:bd:
         62:77:08:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:35 2025 by rpki-client