Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46fbb9c2-3a58-3c01-907f-00c1e0464c5b.roa
File:                     46fbb9c2-3a58-3c01-907f-00c1e0464c5b.roa (raw, json)
Hash identifier:          31CIpvFvKmYKkElKnltPvgiy1Wjzmp/Tc1FKZ2M8JxA=
Subject key identifier:   EE:FB:53:30:B9:36:FB:78:52:30:B0:9C:BB:05:92:2F:4E:53:9D:94
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343D2C0860170C683903BC
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46fbb9c2-3a58-3c01-907f-00c1e0464c5b.roa
Signing time:             Sun 09 Mar 2025 10:20:45 +0000
ROA not before:           Sun 09 Mar 2025 10:20:45 +0000
ROA not after:            Sat 07 Jun 2025 10:20:45 +0000
asID:                     36522
IP address blocks:        204.101.29.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3d:2c:08:60:17:0c:68:39:03:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:45 2025 GMT
            Not After : Jun  7 10:20:45 2025 GMT
        Subject: CN=0e736275-91f3-45dd-8300-b81324305614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:be:5b:f1:de:c3:5a:93:85:77:39:bb:9c:18:
                    d8:ca:28:fe:f1:a7:ed:a3:ce:55:89:54:00:df:73:
                    3f:52:f1:a7:1d:42:e7:7f:b7:e5:76:97:10:bd:43:
                    c4:68:ef:ed:39:a0:0f:76:cc:87:bd:85:48:19:a5:
                    c8:7e:b2:2b:3c:62:d2:81:b8:00:28:29:5b:65:b7:
                    31:23:fd:07:5c:cc:0c:0e:91:85:0c:66:3a:ca:fd:
                    f3:67:c2:bd:a2:06:a4:3e:ad:9b:38:55:c9:9c:8f:
                    d5:ff:86:19:ed:93:a1:e4:62:dd:8c:8c:b8:07:7c:
                    34:6c:ba:41:93:a1:ae:38:20:32:06:db:c8:f1:6f:
                    11:cc:90:dd:41:0f:45:a0:1c:29:9a:db:e2:ca:2a:
                    9d:d3:ff:61:34:c1:16:be:7e:7e:73:d3:01:73:16:
                    36:60:5e:7d:71:2b:e0:fd:c6:ea:78:d6:22:a1:1e:
                    58:9b:ea:ff:99:40:df:fe:ea:1b:e8:72:01:ae:9f:
                    10:de:6b:08:8e:8b:37:38:d2:c8:82:78:07:11:3b:
                    5f:59:8c:a7:cd:b5:0f:30:ae:8f:00:82:ad:5d:53:
                    07:fd:a3:a2:ae:46:b3:f9:9a:9e:ac:7e:97:eb:af:
                    1e:b6:79:2e:29:d1:cd:50:44:ec:32:62:83:7f:21:
                    15:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FB:53:30:B9:36:FB:78:52:30:B0:9C:BB:05:92:2F:4E:53:9D:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/46fbb9c2-3a58-3c01-907f-00c1e0464c5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.29.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:c5:11:8f:29:4a:b9:00:dc:24:49:a4:29:b7:27:65:b0:f5:
         38:50:48:6d:50:41:13:ac:bd:98:3b:a6:d1:c7:0e:5f:59:22:
         c1:c7:b5:b4:14:f0:2d:ed:bf:35:60:fc:2b:35:67:b9:e7:d1:
         47:e7:b1:9d:4c:aa:bc:0a:4c:fa:45:f8:52:65:34:f6:f3:29:
         05:3e:b8:b1:45:60:89:7f:c7:c4:d0:fd:58:97:a4:8c:f0:a2:
         6d:6b:25:28:a0:7a:55:3d:69:3f:9c:3b:d3:8c:d8:db:7a:0e:
         0c:13:2e:7a:24:38:44:fc:48:20:e0:42:c2:ee:cd:0e:d1:63:
         58:79:fe:ef:d1:23:0d:36:d3:7a:20:6a:f3:42:18:dd:31:f4:
         67:a8:31:94:ab:a6:9f:b7:fc:75:a5:e7:31:d2:b9:9b:d2:fb:
         a6:9c:ce:73:75:de:18:f5:47:ad:40:d5:85:70:7d:d3:2d:bc:
         4d:fa:3a:b7:ca:93:42:d5:77:0d:14:aa:7e:75:7e:a1:32:83:
         89:70:a3:f3:90:ae:39:fd:70:b9:cf:67:f5:ea:a7:71:51:97:
         95:68:92:fc:94:d8:ca:90:7e:c5:fe:cb:49:da:a6:78:3a:b2:
         f1:32:ee:ce:08:2e:34:51:5d:2f:d8:09:9f:53:0b:19:9a:a8:
         dd:69:76:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:33 2025 by rpki-client