Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13cb4d2a-8aad-3294-8d3b-e7e88cf9b651.roa
File:                     13cb4d2a-8aad-3294-8d3b-e7e88cf9b651.roa (raw, json)
Hash identifier:          Jgh4lfTQ9W8JH6SBltxpPYhfVFQzcZk1M7X+5VIJ1qY=
Subject key identifier:   4D:53:3E:E1:DD:7F:82:51:04:1C:C6:9F:A3:95:55:82:A5:A1:5D:40
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134413ABA328F26C05CF980
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13cb4d2a-8aad-3294-8d3b-e7e88cf9b651.roa
Signing time:             Sun 09 Mar 2025 10:20:47 +0000
ROA not before:           Sun 09 Mar 2025 10:20:47 +0000
ROA not after:            Sat 07 Jun 2025 10:20:47 +0000
asID:                     10264
IP address blocks:        204.101.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:41:3a:ba:32:8f:26:c0:5c:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:47 2025 GMT
            Not After : Jun  7 10:20:47 2025 GMT
        Subject: CN=df39252d-a7b7-4917-97f2-e6fdf1c363f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:96:c8:39:a6:8c:73:d6:8e:a2:ec:1e:01:f8:
                    f0:68:1c:53:21:27:79:80:f9:48:0e:f5:af:fb:75:
                    c3:f3:78:1c:59:b5:88:d1:b7:0f:15:c6:94:16:30:
                    63:15:b1:d2:35:3b:e6:02:ec:a6:ab:f8:1e:39:7d:
                    2f:e7:4a:80:9c:00:d3:42:43:4c:9f:2e:b1:a4:17:
                    06:71:06:38:7e:5f:46:ce:6d:b9:af:3c:2d:c2:6f:
                    64:47:6e:57:56:1d:42:bd:38:4c:85:b5:db:f2:db:
                    20:a2:b1:11:ec:6c:06:40:ba:85:a3:8a:54:6a:6c:
                    da:b5:56:5f:d7:9f:57:8b:7f:d9:eb:86:28:a7:20:
                    80:31:e0:3b:bf:7f:21:51:2d:24:d6:4c:cf:a3:49:
                    09:5b:93:6b:40:95:0d:2a:05:4d:b6:04:ae:48:b0:
                    5c:72:9b:f4:c9:ec:32:6c:97:18:70:02:8e:04:96:
                    a2:f7:4e:46:50:ca:d0:be:75:34:5b:13:50:68:97:
                    c5:e4:20:ac:cb:dd:21:00:31:b4:cc:71:3b:c3:51:
                    4b:ed:ff:86:b3:45:5a:89:01:60:fa:c8:6e:33:a1:
                    71:ae:82:57:ad:1f:ae:88:a0:23:f6:4a:e1:ce:44:
                    33:64:3f:70:93:42:bc:6d:82:52:0d:96:26:9f:d2:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:53:3E:E1:DD:7F:82:51:04:1C:C6:9F:A3:95:55:82:A5:A1:5D:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/13cb4d2a-8aad-3294-8d3b-e7e88cf9b651.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e6:45:e7:42:2e:cb:78:c6:03:44:3f:9c:51:5c:57:7f:b2:
         bf:49:d6:2c:eb:1b:44:db:3b:c8:16:2a:37:c6:26:18:6d:37:
         1c:f3:86:a3:65:3d:bc:c3:12:75:95:59:cf:24:56:3e:fb:8c:
         f1:8e:57:e1:4a:ef:13:16:13:1e:6a:2b:73:00:65:7b:6a:63:
         f0:5e:25:46:81:e2:e1:b5:c1:3b:21:90:1c:28:04:48:f9:fa:
         3b:d3:03:62:12:6b:02:63:cb:90:c6:33:9a:4b:4e:6f:71:cd:
         bb:d7:68:37:1b:4c:81:8e:b9:21:d3:23:29:29:e4:ba:db:fb:
         08:12:5e:1b:bb:bc:db:f4:5c:e5:95:54:bb:4d:5f:64:43:c9:
         dc:15:ed:22:ac:03:cc:6b:96:e5:f8:b9:61:4a:3d:1c:20:e2:
         98:7c:4a:d7:19:14:a6:7a:33:70:2d:52:f1:54:d1:8e:98:8c:
         80:8d:cd:01:11:17:6c:c8:45:3f:b1:f9:c7:a8:fa:e0:60:8b:
         c0:2a:ce:4e:4b:43:a1:7c:57:01:94:62:39:d6:35:9f:1f:b2:
         63:42:0c:4c:a5:5a:da:c4:91:c0:bb:4c:a0:2f:12:b9:4b:b7:
         0b:35:89:f6:6c:a9:6f:cb:be:aa:02:0f:d1:5b:37:b7:f6:25:
         e2:59:30:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:56:42 2025 by rpki-client