Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa
File:                     f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa (raw, json)
Hash identifier:          CkJAmLUHHVD1fK1V2HEWLqSrz0M/sczeTEa0pQdmEdc=
Subject key identifier:   78:42:AA:D4:D4:DF:E0:B9:7A:CB:A5:4B:62:67:F0:44:0A:48:52:C3
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F432858491D71703FC2EBDE8BC8F3FF00
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     7979
IP address blocks:        172.84.181.0/24 maxlen: 24
                          172.84.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:70:3f:c2:eb:de:8b:c8:f3:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=1720d2b3-7ebe-437d-a6de-13fe8db85713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:90:ed:fd:7a:79:2d:d2:70:f4:84:6d:c2:76:
                    75:23:16:2f:d0:4e:b8:53:a4:19:11:45:c9:8d:41:
                    77:ab:1c:2e:9a:30:b9:69:4b:07:c2:3e:f3:f4:7a:
                    f6:60:19:b0:59:97:d8:2f:c6:35:2f:8d:b4:9b:6a:
                    ed:4c:74:70:e5:a9:bc:38:2d:6c:b0:4a:73:4e:46:
                    20:0c:be:79:a9:d3:3c:0e:cf:db:47:04:a8:28:3c:
                    48:46:62:1a:fb:82:87:9e:12:00:f0:81:1a:00:42:
                    bf:e4:ba:90:43:30:a4:6d:40:28:8b:5b:61:e4:72:
                    35:31:82:75:7d:84:96:00:bb:0b:3b:b0:c5:db:56:
                    3f:70:d2:e9:b9:10:f4:b3:e8:2a:02:b2:e8:40:aa:
                    2d:99:a5:33:2b:d5:de:20:91:b9:45:66:df:04:9d:
                    ce:20:de:fd:36:0f:93:f5:53:6d:8f:81:4c:97:db:
                    57:67:78:37:32:50:d6:25:5f:9a:e7:de:e4:51:0a:
                    5f:f3:45:29:a8:9a:a4:4b:a9:bd:0b:ab:54:b4:bf:
                    83:b1:02:d9:03:30:70:d2:6c:7e:9b:bd:aa:19:ab:
                    c1:28:dc:03:8f:2b:0e:63:de:64:a6:9d:92:1d:ea:
                    ac:ea:bd:04:c6:f4:40:6a:0b:26:35:38:40:4d:25:
                    62:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:42:AA:D4:D4:DF:E0:B9:7A:CB:A5:4B:62:67:F0:44:0A:48:52:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/f5e36dbb-98c8-3e27-879e-1b7b6e55e171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.181.0/24
                  172.84.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:2d:0e:77:3c:56:5e:28:72:16:5e:2f:ec:cf:32:bc:b8:a7:
         53:d0:a1:7a:6d:05:11:1f:fd:bf:4e:ff:6e:2f:48:91:48:83:
         07:48:31:f9:1f:87:05:99:3d:71:05:d5:95:ec:21:09:b7:2e:
         5c:ca:f0:27:9e:f9:da:ee:ce:d0:bc:51:71:aa:35:07:7d:a5:
         7c:b1:84:08:62:01:ae:86:11:44:fc:33:0a:00:6c:1c:71:23:
         fb:b8:d4:06:6a:3b:1a:bd:e0:68:84:cb:bf:35:ce:14:5e:d2:
         06:2a:a9:9a:60:eb:8f:11:81:82:e3:a3:6f:cb:3b:c0:2a:e5:
         7d:08:0c:51:f2:48:76:7e:e4:81:7c:a6:c2:1a:c0:65:11:86:
         a4:e4:79:f1:fd:39:86:0d:d4:11:d2:22:52:cf:5e:dd:ba:dc:
         73:69:e0:a1:0c:e1:8f:7a:34:dc:22:ed:87:3b:18:f5:4a:81:
         11:ff:7f:b5:6b:52:6a:2e:0d:fb:37:cf:24:5e:3c:f9:c7:c8:
         2e:00:a7:fd:9f:60:38:7d:64:3b:24:cb:3d:53:0d:fb:e9:73:
         67:83:37:8c:3d:7d:6e:5f:59:58:ce:a4:85:95:a6:17:2a:a0:
         d7:d8:dd:a0:fe:5a:ce:bc:e2:57:18:a3:99:b5:2d:36:0c:39:
         5c:a1:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:01 2025 by rpki-client