Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa
File:                     376ad722-4646-3888-9a2c-ace0bdfa2b21.roa (raw, json)
Hash identifier:          f7XxjIRu4UF6/eyNCo9zZzSWKE696Avs4Yt1+9zSzdI=
Subject key identifier:   66:59:5E:C6:A9:C5:4E:5E:90:80:54:58:EC:FE:AC:DC:03:94:17:05
Certificate issuer:       /CN=d6b690dc-d325-42b2-9834-06e4a779b209
Certificate serial:       010D0C9F43285848C150D3F5FEF0D9AD4211B100
Authority key identifier: ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     32746
IP address blocks:        204.152.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:d3:f5:fe:f0:d9:ad:42:11:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6b690dc-d325-42b2-9834-06e4a779b209
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=9880c511-1452-49cf-b601-f0bdf8d44dce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:64:4c:78:8e:2d:78:38:b2:1d:0c:7f:72:70:
                    e9:0e:44:db:39:79:6e:31:37:2f:1b:e8:65:19:b1:
                    00:0b:41:5a:fa:47:19:85:da:a3:f6:8f:7c:52:c7:
                    83:8d:74:ae:78:15:c8:fb:28:a4:e5:ed:72:ce:20:
                    2b:ad:8b:95:85:da:cc:46:ba:a4:21:75:3a:73:40:
                    9a:71:db:94:10:14:34:79:64:2c:f6:1a:81:ed:4a:
                    af:df:0d:08:68:1d:cf:61:68:c9:c0:6f:a4:3b:34:
                    83:d5:09:ed:eb:a0:41:f0:b7:71:6c:1e:34:9d:a5:
                    08:39:38:85:8e:d2:4c:b5:ae:c0:8c:6e:de:45:85:
                    43:2f:ad:41:2d:6d:05:19:d8:d3:44:48:e6:79:99:
                    c9:b9:d2:15:ef:fc:ac:bd:cf:a3:6a:ac:50:a0:c9:
                    0a:77:eb:e6:6d:84:ad:ad:01:5d:cb:69:d0:3b:87:
                    cc:40:6e:61:c7:9e:1b:2c:7c:c0:df:d8:da:a3:fe:
                    19:51:9f:fb:9d:85:54:12:6c:31:5f:5f:c8:7e:24:
                    d4:f7:cc:60:f6:a1:db:0d:5d:04:64:65:b2:9f:72:
                    ef:09:14:08:38:40:b9:12:1e:eb:87:01:b1:12:5e:
                    68:18:cb:e5:fa:e4:61:27:fb:32:55:aa:6c:a4:e9:
                    9c:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:59:5E:C6:A9:C5:4E:5E:90:80:54:58:EC:FE:AC:DC:03:94:17:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/376ad722-4646-3888-9a2c-ace0bdfa2b21.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209/d6b690dc-d325-42b2-9834-06e4a779b209.crl

            X509v3 Authority Key Identifier:
                keyid:ED:44:13:86:A1:CB:9D:F3:26:B2:37:C2:5B:BF:98:C4:EF:D2:5F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d6b690dc-d325-42b2-9834-06e4a779b209.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:27:c0:50:13:58:75:34:57:58:27:46:ff:df:bd:75:87:25:
         35:14:48:15:ca:3a:75:22:99:cb:cc:95:19:ed:c2:24:22:8e:
         4e:6a:69:d5:91:53:68:c8:a8:86:86:10:07:2d:7e:51:89:11:
         82:53:03:b1:49:0c:cb:88:95:2d:58:ba:a5:8e:12:05:20:f7:
         7c:6c:53:9e:75:5f:c2:50:4e:9e:46:f2:69:32:84:69:a0:9a:
         12:da:ae:fa:e7:6c:9b:ca:6c:49:32:97:a6:ea:3e:5b:93:5b:
         e8:d3:5c:34:7d:f3:73:bc:07:43:09:c0:bf:6e:9d:ea:5a:86:
         bf:15:4c:7e:fd:a7:4a:9c:da:19:78:47:1a:de:94:c9:0b:e2:
         e5:2d:84:07:8c:22:8e:23:af:ca:3a:30:de:26:1e:cd:7b:8c:
         9b:a1:3c:ae:31:6b:74:5a:f6:85:f2:9e:a4:d0:77:6c:6c:21:
         df:77:95:8b:d1:d4:4c:51:bd:38:c7:75:cf:b4:e6:7f:f4:31:
         6d:1f:7c:0e:0e:c9:e8:f6:70:fd:ff:cd:7a:51:27:d5:97:f5:
         75:a9:9c:68:01:f0:9c:eb:75:c9:a6:39:68:be:92:ee:60:ec:
         61:30:84:d3:68:8b:f6:2b:c9:9e:84:28:28:45:6b:22:a2:81:
         bd:72:64:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 16:11:25 2025 by rpki-client