Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/afcf9064-9878-3ea2-9c9f-ee6f8bee3061.roa
File:                     afcf9064-9878-3ea2-9c9f-ee6f8bee3061.roa (raw, json)
Hash identifier:          DFkxg+CvxVsKLJQrWHBFZGd6pqSp179Cg5YpHn6qbvA=
Subject key identifier:   FC:39:6A:48:10:68:0D:D1:59:97:43:3B:14:9B:77:5E:34:5D:F3:D1
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213432D1B7AD3DDE0DA9A8C0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/afcf9064-9878-3ea2-9c9f-ee6f8bee3061.roa
Signing time:             Sun 09 Mar 2025 10:20:40 +0000
ROA not before:           Sun 09 Mar 2025 10:20:40 +0000
ROA not after:            Sat 07 Jun 2025 10:20:40 +0000
asID:                     855
IP address blocks:        142.134.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:32:d1:b7:ad:3d:de:0d:a9:a8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:40 2025 GMT
            Not After : Jun  7 10:20:40 2025 GMT
        Subject: CN=20094a7b-5050-4a04-8186-0f9e72647dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d4:f4:b4:14:e9:2d:c7:23:9d:01:20:37:b2:
                    b3:9c:59:98:9f:8e:bc:4a:07:9a:9d:c6:71:63:a5:
                    0a:e9:ae:76:86:b0:39:63:ef:0a:ad:ae:3d:00:27:
                    77:c7:0c:1b:08:76:5f:72:1a:68:03:13:8a:9e:99:
                    55:cf:98:87:48:de:98:bf:b0:81:2a:35:c0:b7:5b:
                    84:4e:92:22:32:70:ef:bd:72:39:0a:23:c0:75:e2:
                    b6:3e:42:7b:ff:35:e3:53:f2:ff:b2:19:9e:3f:dd:
                    62:d6:56:c9:a5:7e:38:17:ec:69:59:3b:35:96:7a:
                    8e:30:b7:02:f0:d1:97:0f:5a:69:a6:f8:f8:36:26:
                    9b:f7:c5:f3:3d:1e:3c:60:2c:d7:c0:0d:c6:ab:0d:
                    fc:01:74:54:3a:dc:8a:df:bb:d1:e3:26:93:76:5f:
                    8a:3b:9e:51:ba:be:39:4e:b3:cc:a4:ff:33:d5:67:
                    e0:4c:17:76:ea:36:33:f4:d6:af:46:54:50:e8:86:
                    2a:a9:1f:b5:ea:cf:62:79:25:00:62:c2:7a:0f:b4:
                    89:ce:65:25:48:3e:f0:5b:5b:0b:c5:f1:37:42:f2:
                    2f:35:d2:db:06:5f:9c:69:0a:8e:1d:8b:26:d3:0f:
                    aa:e0:73:a6:e5:19:00:88:b8:a9:f1:c8:7a:c6:1f:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:39:6A:48:10:68:0D:D1:59:97:43:3B:14:9B:77:5E:34:5D:F3:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/afcf9064-9878-3ea2-9c9f-ee6f8bee3061.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.134.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:d9:30:f7:b2:8c:83:3d:70:d0:63:60:5b:f8:5a:f2:22:ab:
         c3:01:83:96:05:21:00:e3:4e:30:33:36:3d:c7:60:a6:39:39:
         42:ff:68:0a:85:60:51:35:f8:a5:1e:94:a6:87:d7:0d:b2:b5:
         26:fb:9a:8c:d8:46:60:ba:51:d7:b4:19:b7:1a:08:a0:cd:dd:
         9e:25:1b:35:93:58:35:ff:0a:fe:5e:5d:db:5d:f3:9d:1e:c2:
         0f:44:56:1a:74:f5:5a:50:ba:71:a6:e1:ac:f1:49:02:78:6b:
         37:62:5d:f3:ec:e6:b3:c3:b1:e1:34:ed:7d:a9:17:4d:73:a4:
         8a:5b:ae:2a:10:ad:2e:2e:17:95:8c:03:61:bb:3d:aa:1b:07:
         30:f4:74:ed:43:2c:65:ec:43:ee:13:79:ee:97:82:3c:a1:c5:
         18:8b:c7:54:59:23:be:1f:a6:93:98:6e:ff:66:1e:a4:f7:98:
         e7:34:ff:40:b0:27:35:61:57:00:05:95:74:dd:35:da:13:96:
         68:c1:78:04:26:32:d1:c4:4f:d5:a0:f8:7a:fa:45:ac:6f:06:
         7f:16:2e:52:da:ba:26:1a:8f:26:d3:58:b3:d4:fc:45:d1:3d:
         fd:73:64:86:0a:f5:9b:30:0a:49:f3:86:2e:a9:a9:f9:6c:09:
         06:f2:89:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:54:35 2025 by rpki-client