Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
File:                     50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa (raw, json)
Hash identifier:          vu6JOSMobOiVkN0BS/A4oDWg61AHdw9wzlBwsM5lFro=
Subject key identifier:   5A:36:B6:25:0D:61:EE:18:4A:4A:64:9A:26:3F:47:49:FB:42:90:1D
Certificate issuer:       /CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
Certificate serial:       010D0C9F432858496A199D0EF3299E9499798E80
Authority key identifier: E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        45.95.209.0/24 maxlen: 24
                          141.193.71.0/24 maxlen: 24
                          203.57.88.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:9d:0e:f3:29:9e:94:99:79:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb3f9cae-c3ca-43a8-b103-4f2e03730626
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=bb0f0ff6-c744-4c0d-8af0-21ece05c61d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:44:ad:ca:86:60:46:1a:dc:d3:2b:bb:0d:0c:
                    39:55:e7:fa:ff:82:ec:90:75:5b:51:20:e4:2b:c4:
                    79:10:2a:97:99:78:c6:c7:1f:dd:07:a5:77:64:fa:
                    61:7d:1b:73:7b:09:8f:44:4f:6d:0b:f8:41:c2:52:
                    7d:d6:35:3e:c9:ac:76:aa:67:21:8f:cc:74:48:c4:
                    19:5b:17:eb:aa:da:5c:43:89:f9:4d:b3:56:36:54:
                    95:28:21:fa:8f:e9:8a:5f:bb:d4:57:85:ac:ff:ef:
                    90:04:76:66:5f:19:78:7b:31:2f:b1:a2:12:c4:2b:
                    6f:60:72:f1:1e:a6:b1:b7:df:39:13:e8:6e:b0:21:
                    a4:f4:61:0b:b0:20:6a:06:a0:ea:cb:29:2f:e3:dc:
                    8f:65:cb:4a:80:fa:89:6c:8d:d3:99:37:3f:c0:63:
                    fe:43:5a:cf:bf:18:d8:9d:ec:59:79:64:c6:f2:82:
                    e6:a3:bf:d1:e4:d3:ae:c1:88:05:06:97:ac:8b:0e:
                    ac:86:af:ee:c6:b0:26:74:a8:f1:44:3b:75:a2:2e:
                    c8:25:2c:5f:b4:cc:55:95:e9:f1:9d:04:ee:96:77:
                    e9:82:a1:48:d4:7c:ab:40:92:ab:92:71:f7:06:c6:
                    93:7d:28:63:b8:75:3f:ae:95:08:8b:45:69:21:e0:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:36:B6:25:0D:61:EE:18:4A:4A:64:9A:26:3F:47:49:FB:42:90:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/50101c89-1f20-33a5-ae9d-1a9a92d4acd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626/fb3f9cae-c3ca-43a8-b103-4f2e03730626.crl

            X509v3 Authority Key Identifier:
                keyid:E2:78:AB:85:FC:AE:54:2E:B1:AF:F2:8B:02:5E:E7:E9:D5:53:FF:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/fb3f9cae-c3ca-43a8-b103-4f2e03730626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.95.209.0/24
                  141.193.71.0/24
                  203.57.88.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:0e:ff:6d:34:b8:92:2e:8f:09:82:39:f6:f9:fa:68:f3:
         60:f4:fb:52:db:0d:8a:d7:e3:3e:47:27:4d:cc:48:3a:82:a0:
         51:df:85:1d:1a:70:45:a8:d9:95:9c:6f:2e:7e:37:92:fe:fc:
         56:3e:11:6f:37:87:8d:ac:8f:7f:ba:96:3d:85:f9:ae:04:77:
         59:b4:e7:87:00:2d:5c:3f:4f:8c:9f:ce:66:65:61:32:fb:e4:
         69:23:5b:f9:6f:3b:ad:de:98:03:b9:1a:fb:03:e8:d7:a8:b9:
         70:0b:a0:b3:49:9f:d4:23:fa:32:1b:8a:0f:57:7f:a0:e3:37:
         b3:90:2e:a4:f6:90:e6:8a:24:9a:54:72:76:40:4c:4d:0e:e3:
         0e:19:c9:6f:e8:e7:74:8c:f5:b6:e6:31:62:1a:c6:c1:aa:d8:
         cb:42:43:f5:ed:48:2b:1f:09:aa:77:64:83:d0:d1:22:49:37:
         3b:e3:a1:a9:b0:e2:05:84:f3:83:73:a4:bb:91:71:34:19:41:
         a5:51:0c:7f:ec:4f:e0:d4:7c:7c:29:5c:a3:1f:ec:39:b3:17:
         e5:82:bb:94:f3:d1:6a:cd:26:89:d4:a4:38:40:ef:71:36:8b:
         bb:9c:e7:e5:8e:6c:46:39:67:b0:37:a6:3c:64:70:98:08:9b:
         26:0f:0d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:03:22 2025 by rpki-client