Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa
File:                     256a31a1-c209-37d9-b60b-1ccbb0d76830.roa (raw, json)
Hash identifier:          aNhlyE/Qwyccu1rxtbuFHPDuGu9QcqbL6zG8jH0yhjs=
Subject key identifier:   39:63:8F:CE:C6:66:DC:E6:7D:5B:6F:16:7A:52:7D:95:4B:4F:34:37
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CF1F233D00C951C277380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        71.228.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:f1:f2:33:d0:0c:95:1c:27:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=fe1c12aa-72e5-4a4a-8032-e6cf9ce48598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7e:a7:b9:f1:a3:0a:3c:bd:d6:18:a1:d8:a5:
                    e9:ee:93:f3:47:a0:a4:89:db:7a:82:2f:e1:43:3f:
                    46:6e:41:ab:8a:3d:65:1d:f9:19:b1:b3:f5:91:a3:
                    63:7b:2d:e6:32:13:db:08:64:af:4d:e2:50:21:bf:
                    8b:e6:fe:5a:33:1b:ad:4a:31:5c:c0:11:a9:17:c7:
                    63:52:77:2e:4a:3a:b6:a3:b8:d4:7c:18:d3:07:96:
                    db:5b:54:62:4f:b2:6f:a6:94:64:bf:52:8a:ea:1e:
                    2f:48:5d:6d:14:e4:c7:3f:91:68:d2:0f:d7:ef:10:
                    79:6a:04:dc:dd:89:f4:54:72:2d:e2:98:16:3e:74:
                    5b:20:36:9a:df:1b:06:9a:fc:50:cd:a5:dd:ac:3f:
                    1f:72:92:b6:19:c5:c5:4b:b7:0c:c8:e3:ae:e5:e7:
                    95:25:0a:8d:0c:1f:59:87:e2:df:67:57:92:a0:64:
                    29:3b:14:a2:24:27:05:7c:ac:03:a9:ad:bf:80:52:
                    f0:c7:50:3e:bd:fd:e8:f9:fb:f6:8e:86:ea:08:dd:
                    33:86:79:66:06:88:1c:a9:f2:a8:7b:bf:a1:b9:0d:
                    6c:a7:3b:0a:68:24:ce:93:d2:a0:5e:59:17:25:9e:
                    94:9b:87:c0:66:ff:ea:f3:80:e0:57:d0:d3:ff:18:
                    6d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:63:8F:CE:C6:66:DC:E6:7D:5B:6F:16:7A:52:7D:95:4B:4F:34:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/256a31a1-c209-37d9-b60b-1ccbb0d76830.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.228.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:76:2b:31:bf:5c:a0:e6:5f:32:f3:4e:90:c4:ff:a2:ad:a9:
         29:07:89:1e:4b:13:f5:00:73:96:ed:e4:42:f9:1c:95:03:42:
         d8:47:0b:51:50:4b:e4:14:62:e0:a2:e7:d6:af:a6:1d:e4:24:
         91:89:b2:59:69:5c:0d:e6:6c:2d:c1:48:7e:9b:f9:16:80:b0:
         11:ad:88:31:a0:2e:c9:60:7a:47:70:b7:35:62:92:ae:18:be:
         ca:06:bf:37:64:58:57:9c:8d:2c:dc:3f:ec:aa:70:15:6b:8b:
         ef:92:49:dd:17:09:f0:8b:b8:5a:96:8c:a6:f8:a3:4f:aa:e0:
         f5:92:dd:e4:02:7f:fb:3e:44:51:3a:0d:e2:79:7b:fa:56:78:
         2d:ae:13:95:bc:de:f2:e8:44:23:bc:15:34:96:ff:f6:29:1d:
         f1:5c:be:92:3d:5c:00:a4:e6:d0:68:da:95:b4:24:9e:4c:cc:
         96:40:c6:2b:39:d0:0a:f7:b1:4e:52:f4:06:f7:6f:bd:fa:f1:
         d3:15:39:bb:ed:2c:5d:86:d9:03:f0:f4:29:ed:b6:95:f3:b1:
         2c:13:4d:e4:e7:5a:96:5a:1b:67:96:ce:a2:47:a4:cc:3b:81:
         06:c5:75:20:22:a6:ef:32:76:48:d1:20:61:1d:48:6c:0b:8a:
         af:59:1f:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:52 2025 by rpki-client