Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa
File:                     87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa (raw, json)
Hash identifier:          WCme9xgAmJ5T0DM39vrUd7KNnHfYeWW+aLKrNgAduWg=
Subject key identifier:   42:E8:28:0A:7F:4B:35:E9:B6:22:80:C6:C7:64:BD:D7:D7:CA:E7:AA
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849E225293E71D748D244F0A940
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        134.224.152.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:29:3e:71:d7:48:d2:44:f0:a9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=f7d959be-f248-4eb9-a293-b89dc4335872
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:64:00:7c:52:ac:ba:75:be:3a:07:a2:bc:c6:
                    5e:72:36:79:42:88:d5:a4:85:ed:94:65:ad:e5:26:
                    a2:be:4f:5e:d0:0f:00:52:ec:9e:9a:3f:70:73:3e:
                    5c:3a:02:34:77:14:c1:8b:69:47:24:09:a2:f1:2b:
                    92:ba:41:7a:95:4a:77:2a:16:48:31:80:63:50:e7:
                    19:89:81:5c:ba:0e:54:51:1f:f4:53:a1:73:20:a1:
                    90:c7:3e:d9:56:1c:b2:dd:6c:2c:31:9b:83:2e:f9:
                    98:31:72:8b:55:f6:08:a1:2f:cb:ce:9e:9f:b9:c6:
                    11:96:80:dd:1a:15:2a:30:04:35:79:b4:ef:9a:0f:
                    44:29:25:e2:f3:e0:e5:eb:34:56:b0:7d:f8:35:30:
                    14:a6:ca:36:5e:c3:7a:02:ac:14:8e:63:3d:56:46:
                    35:94:ff:16:15:53:80:fb:cd:7b:ee:ae:6a:e0:29:
                    81:b6:74:27:2a:ae:ca:c4:97:4c:b7:a9:6e:6c:6f:
                    7d:c9:cf:29:3c:6c:ec:ca:7c:c6:01:8d:23:31:a8:
                    bd:b1:1c:2e:77:92:ca:ea:4f:57:46:1e:53:b8:f7:
                    1a:3b:81:31:e5:cb:12:9c:a9:4b:43:02:79:8d:32:
                    bc:a8:9c:44:f9:a2:c9:c6:41:c7:d5:39:c3:fb:1a:
                    b7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E8:28:0A:7F:4B:35:E9:B6:22:80:C6:C7:64:BD:D7:D7:CA:E7:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/87aa9efd-8b0c-31c1-8e52-d8bd22d0a574.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.224.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:dc:e7:f3:f4:5b:a4:49:82:d1:26:c8:cb:a6:06:0b:7e:24:
         2c:0c:d4:fb:f8:be:b7:6b:97:d6:39:92:ee:9f:f2:3a:b5:0a:
         f1:0a:7b:30:7d:8d:4f:80:53:02:40:bc:59:38:96:1d:f2:d4:
         ca:52:f7:2e:38:df:2a:f8:c2:60:fc:78:1c:c2:76:42:30:f1:
         db:ed:16:ae:f6:6d:b7:39:d7:0e:80:aa:d0:d2:34:04:df:1b:
         c4:76:83:0d:8a:fe:5d:d3:f4:47:d4:d8:c5:c0:21:f1:df:b5:
         2f:6d:f7:c1:05:7b:f6:8a:31:05:09:61:d1:65:48:e9:53:39:
         27:b6:1e:30:7d:c3:d4:cd:fe:76:7b:b5:6a:1f:d2:e5:b4:49:
         51:fd:32:98:fe:bd:92:fe:5f:eb:f9:0c:34:27:75:dd:f0:65:
         af:be:53:06:e3:c2:3f:2d:8a:21:b4:6d:2e:0b:9d:07:06:cb:
         10:e9:fd:78:2d:16:d1:26:9e:1b:87:f1:b6:25:96:84:9a:e5:
         c9:c8:73:6e:e9:07:b9:e6:9b:b2:21:1f:06:88:92:1f:ba:1f:
         4e:c7:cb:f9:9f:e9:d5:f8:99:40:ca:a8:79:33:fe:a3:93:23:
         65:66:13:e1:54:85:dc:0c:66:6f:ab:59:41:c8:b9:47:a4:2a:
         f2:e3:13:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 04:27:06 2025 by rpki-client