Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa
File:                     71601b8f-c699-3d39-9db5-89efd79e5db2.roa (raw, json)
Hash identifier:          0N8B/LzvhBvR20R/kT5TiHE3jccY/jz5d+U0GPULUlQ=
Subject key identifier:   DC:39:3C:A5:F7:8E:69:A6:69:0C:52:EA:62:CF:AB:47:C7:07:B3:1D
Certificate issuer:       /CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
Certificate serial:       010D0C9F4328584919417D8C1595B2CAF86993C0
Authority key identifier: E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        152.130.248.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7d:8c:15:95:b2:ca:f8:69:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f4faf2a-17ff-4827-9bec-c6ffcb2ad092
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=efd89268-1872-4388-910e-1ae7c18dfb0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:87:d9:b0:7a:e8:a4:ea:a8:41:fa:c1:02:dd:
                    b9:25:e4:39:e8:0e:d5:30:55:28:14:67:f6:71:c6:
                    07:cd:6d:4b:19:f1:2d:01:bb:f0:40:de:0c:cb:b3:
                    62:c1:f2:26:06:15:7e:07:86:76:cf:33:e9:cc:83:
                    0a:be:f3:73:56:fb:4f:2f:c5:97:0b:74:5d:9c:07:
                    19:65:b7:69:21:70:16:86:bb:d5:1c:b5:16:26:f9:
                    57:c0:a9:36:22:90:ff:51:0b:84:da:03:ab:45:66:
                    77:e0:1b:0d:a6:73:65:57:61:a2:cb:79:70:74:8a:
                    67:d7:d1:61:00:32:2e:dc:c3:a9:03:57:7e:a1:6e:
                    0e:9b:5d:21:13:83:91:9e:7f:88:c7:72:18:8d:2d:
                    ec:cf:f2:c9:c6:aa:30:78:55:d8:98:4b:9c:a4:a2:
                    dc:c9:32:d6:e5:6a:a8:2b:61:97:3c:bb:57:6b:76:
                    33:4a:1e:00:64:8c:fa:96:a3:6f:b2:3f:71:3d:ac:
                    86:1f:1b:9a:b8:82:58:3f:27:4d:2a:4f:92:b2:99:
                    a2:7e:fb:a8:d2:0a:d9:01:a9:25:ba:19:85:df:ea:
                    6f:95:f7:26:36:f6:10:1f:0c:c3:2e:35:21:cf:ff:
                    0d:ba:9a:b1:aa:ee:1f:94:1d:9e:10:71:b7:50:3b:
                    98:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:39:3C:A5:F7:8E:69:A6:69:0C:52:EA:62:CF:AB:47:C7:07:B3:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/71601b8f-c699-3d39-9db5-89efd79e5db2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.crl

            X509v3 Authority Key Identifier:
                keyid:E0:13:5E:C0:DD:C6:72:A7:38:54:95:87:17:94:16:8E:6D:99:70:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f4faf2a-17ff-4827-9bec-c6ffcb2ad092.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.130.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:20:27:31:13:f4:bc:46:4a:ef:de:24:2c:98:07:26:9a:20:
         9b:7a:22:16:7b:17:34:96:6a:11:ac:68:0f:f3:1f:18:17:36:
         db:93:5f:d1:5d:56:10:4b:2c:1d:b5:a9:0f:f5:13:55:5f:58:
         e2:22:ff:f8:16:c7:fb:d0:c8:a6:71:6a:e1:be:e4:81:27:12:
         bf:c5:b2:dc:99:31:1a:ae:00:a2:74:48:58:63:47:ed:2f:21:
         6e:d9:a5:56:c6:a7:55:e5:a2:0b:c0:4f:20:cb:67:df:0e:73:
         28:9a:71:83:05:c6:38:9e:d2:82:99:a9:4a:9c:ad:ad:c6:a0:
         9b:26:ff:3f:4d:21:f5:c6:50:e2:f2:df:a2:27:c5:c6:54:29:
         8b:59:c2:ea:2e:00:c2:2a:00:6f:16:c4:43:f3:b0:bf:16:0f:
         af:33:00:ec:6e:be:a1:b5:4b:46:53:11:4f:51:bb:d5:46:6e:
         04:aa:c7:21:b2:aa:71:aa:10:56:76:ea:88:a5:cf:19:e0:cd:
         e1:12:89:96:87:32:94:8f:a0:03:db:ac:7e:de:c7:ef:1a:45:
         4f:24:63:fc:22:fc:6d:09:7e:aa:70:5d:6e:4f:0a:ce:78:f0:
         79:0e:7e:b6:7f:50:35:fd:b1:f8:01:b7:cd:c2:35:59:0f:b5:
         af:42:e9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:08:25 2025 by rpki-client