Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/615f93db-9378-3236-afd9-e3ff48619c3c.roa
File:                     615f93db-9378-3236-afd9-e3ff48619c3c.roa (raw, json)
Hash identifier:          8LBntkRFXQFaLEVx7TUPII99FeaUHSiGKbosqPRqRxg=
Subject key identifier:   8A:2B:63:E8:9C:76:99:11:DE:0F:D6:BD:70:F2:02:54:09:37:2E:36
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343DBF84FD4EBA52CEBA80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/615f93db-9378-3236-afd9-e3ff48619c3c.roa
Signing time:             Sun 09 Mar 2025 10:20:46 +0000
ROA not before:           Sun 09 Mar 2025 10:20:46 +0000
ROA not after:            Sat 07 Jun 2025 10:20:46 +0000
asID:                     21723
IP address blocks:        204.101.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:3d:bf:84:fd:4e:ba:52:ce:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:46 2025 GMT
            Not After : Jun  7 10:20:46 2025 GMT
        Subject: CN=9e957267-3759-4430-a50c-68fe8abfc717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:0c:88:95:ea:25:cb:3c:4a:b1:fc:65:55:
                    fe:ee:af:ca:17:73:f3:e3:12:88:e4:22:4a:ed:38:
                    f7:df:b4:d9:01:a8:77:95:e3:65:fa:6b:d5:7f:b1:
                    77:99:47:83:87:f8:86:e6:31:bf:94:1b:27:bb:06:
                    96:d4:04:fb:0e:00:08:69:86:96:01:e4:fc:4f:a1:
                    74:fb:be:d4:00:77:1e:21:ec:55:80:27:c0:c3:ed:
                    33:9f:94:9f:5a:58:da:a4:0c:e7:a7:cb:b4:07:aa:
                    17:c2:e7:07:fa:f1:40:94:70:2f:db:67:a5:58:af:
                    74:40:55:f8:9b:7d:a3:3b:3c:98:82:35:b0:4d:5a:
                    27:8d:ad:0b:18:38:17:fd:3f:75:13:1b:10:12:eb:
                    68:53:f5:cb:9b:54:8a:3c:73:a7:ec:93:9d:f7:c5:
                    a0:0e:b6:1c:2f:6a:d6:55:28:af:48:30:00:f9:d0:
                    ac:34:3f:69:d6:11:eb:d0:dc:df:2d:3d:eb:05:14:
                    f6:d3:c3:de:4c:fd:43:e3:10:d7:a3:ac:c6:f4:5f:
                    23:86:1b:e3:ff:bd:ec:61:78:20:1d:ff:21:ce:ae:
                    df:dc:72:f6:ce:4d:05:db:62:93:59:fe:f8:45:d3:
                    0d:93:1b:af:04:d6:09:e3:b2:88:9e:4f:fe:b3:e5:
                    13:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2B:63:E8:9C:76:99:11:DE:0F:D6:BD:70:F2:02:54:09:37:2E:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/615f93db-9378-3236-afd9-e3ff48619c3c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.101.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:ac:18:d4:dc:25:e2:c7:af:af:4f:80:88:b8:63:b8:aa:41:
         cb:b2:09:2c:24:c4:b1:48:2e:dc:41:50:5d:4d:e5:33:ca:7a:
         d9:2c:f3:aa:f0:2d:67:5a:87:a5:ee:0d:2a:25:03:1f:26:10:
         9f:fd:e6:c2:bd:80:fe:9a:a2:65:2b:a9:91:6b:d1:ba:60:74:
         78:7c:4d:af:2c:3e:24:73:e2:3e:eb:64:be:07:8d:c6:44:4e:
         f3:81:75:78:2a:04:ee:ec:b1:2c:52:77:de:a8:77:1e:5f:d5:
         2d:39:dc:78:c8:a6:67:db:c5:3e:41:bc:71:9e:f5:60:71:0c:
         71:8e:a2:7c:37:74:d8:54:22:d7:94:c0:ce:eb:f6:3f:0d:cd:
         8e:e0:5c:f6:3a:d1:65:41:fb:38:7d:23:9d:59:37:9a:33:57:
         99:0f:8d:15:e1:a5:34:1b:a1:3f:c1:37:b8:e8:3b:0d:f2:ea:
         a5:bb:e8:08:11:1b:2a:3b:54:2e:ce:cd:2e:38:a9:4f:b8:9c:
         9a:a3:b9:45:46:65:b4:70:94:1c:98:57:be:01:46:fb:c8:0f:
         d6:e7:36:08:ee:a8:89:06:f7:50:e6:6b:76:76:46:84:52:0f:
         46:0a:11:22:fd:7d:d2:73:27:51:60:a1:d0:0c:56:38:cb:8f:
         73:1b:a0:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:30 2025 by rpki-client