Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa
File:                     7aced7d7-c382-376c-972a-1af5b443821b.roa (raw, json)
Hash identifier:          J+ZNL8FIR4NH2PxwDWCyDBYv5lynnyG25zKZ9lS7atA=
Subject key identifier:   04:05:03:7F:C8:27:94:5A:05:F0:B7:31:3A:8E:6A:5A:EE:FA:68:EF
Certificate issuer:       /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial:       010D0C9F432858489340A34DDF8805D39EE3C300
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     6621
IP address blocks:        184.52.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a3:4d:df:88:05:d3:9e:e3:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=3b3e1b0c-11d2-4e2d-8461-c1366f43ec7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:13:32:14:cf:ac:ac:0c:8f:6e:60:8b:e5:
                    31:38:72:78:1c:e1:68:ba:69:b2:63:46:7c:11:1e:
                    89:2d:f5:d0:0b:1c:1e:e1:ab:1f:e1:6a:3f:82:24:
                    78:2c:a3:8e:07:f2:23:b4:e0:d9:20:74:3b:4e:3f:
                    02:ae:e0:f2:5e:3f:d9:41:93:05:92:a7:5a:24:b1:
                    f1:a7:4c:f8:e6:96:05:b2:dc:8f:52:3b:f5:71:45:
                    f8:79:a5:15:e7:81:b4:05:c7:05:c7:05:5b:f0:0f:
                    6d:36:bb:a5:40:d2:df:10:5e:25:2c:a4:9b:f0:8d:
                    fc:ca:df:f2:90:bd:31:22:22:14:d6:68:84:5a:3c:
                    24:bf:4e:9f:d6:6f:1e:f4:6f:36:d7:22:00:3b:60:
                    6a:28:da:ac:52:93:28:e8:4d:cb:43:f9:65:cb:20:
                    0b:9c:b9:68:41:6b:47:25:ba:13:3f:14:5a:d2:29:
                    9a:87:be:f1:7c:1c:3b:51:73:e7:73:be:ea:05:44:
                    4e:df:23:6c:14:d1:ae:f3:9c:a5:da:bd:8a:e4:27:
                    fa:a5:b3:27:88:d9:76:4d:41:ac:3f:19:6a:37:33:
                    41:aa:1a:0f:df:40:c9:6a:74:39:eb:2d:90:3b:38:
                    b4:37:f4:93:43:bf:9d:e9:98:5d:a4:42:61:08:ea:
                    16:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:05:03:7F:C8:27:94:5A:05:F0:B7:31:3A:8E:6A:5A:EE:FA:68:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/7aced7d7-c382-376c-972a-1af5b443821b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl

            X509v3 Authority Key Identifier:
                keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.52.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a0:b0:58:57:36:bd:f9:17:24:66:5b:5f:64:c4:34:5f:7c:
         0c:25:fe:01:18:aa:8c:bb:75:0e:75:b6:c5:e9:2b:ce:38:ef:
         cb:49:a7:a7:d9:38:5e:f0:64:cb:c6:ff:76:e0:3e:41:07:55:
         45:21:55:85:77:dc:c8:23:01:81:df:c8:12:5d:1a:6b:fd:8c:
         7b:f9:59:77:26:d1:40:5e:6f:7b:f1:d7:db:5e:71:ea:de:18:
         6b:a9:94:90:b9:5d:86:76:39:f8:e5:de:87:c3:e6:90:49:d6:
         64:87:5a:08:6a:f9:fb:4d:02:3f:e2:c3:dc:7c:38:71:a7:71:
         7e:6b:f9:a7:cb:b9:bc:9d:91:51:77:ea:5a:57:dd:1c:e0:38:
         df:40:36:8a:6d:1a:7b:90:b6:af:7b:af:09:e9:20:06:a9:8d:
         f7:77:ef:6b:a4:1c:c4:eb:3e:5b:91:58:fe:57:4f:df:ba:ee:
         9f:cb:d1:0b:44:6b:c3:c4:7a:a6:c3:6c:2b:04:e1:e4:29:40:
         a9:3b:1b:7f:10:3d:50:07:be:07:93:e9:68:28:a8:3a:e5:64:
         2c:a1:02:cc:f7:b6:ff:0a:63:9b:20:dc:d3:9c:cc:61:d4:cb:
         4c:23:f5:f2:83:53:51:42:1a:31:61:ab:0b:4d:a7:9a:36:92:
         5d:6d:76:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:10:37 2025 by rpki-client