Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/292ce702-dd03-3879-9e1c-9e11e59ba81e.roa
File:                     292ce702-dd03-3879-9e1c-9e11e59ba81e.roa (raw, json)
Hash identifier:          RgH29JhINPnBz4NK3D0/g0zEzhDw3Att6tzvgMxXMuk=
Subject key identifier:   09:C7:4E:04:A1:51:53:FB:CF:5A:B1:15:EF:6C:EA:39:19:37:F4:80
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB0496852AD1D21C92B7EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/292ce702-dd03-3879-9e1c-9e11e59ba81e.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33660
IP address blocks:        174.52.84.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b0:49:68:52:ad:1d:21:c9:2b:7e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=97b9bd27-8091-4912-af91-2b2fbabd3fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:23:cf:4e:7f:64:fb:81:70:62:e7:d4:1c:c9:
                    b3:05:21:01:4a:a9:7e:81:e1:7d:b9:f4:fa:f5:f5:
                    fc:b1:2a:b6:b7:84:26:19:33:38:80:7b:be:77:3d:
                    f4:a6:00:09:d6:8b:ec:3b:1c:e6:ec:0a:cb:e3:7e:
                    e3:87:95:97:48:fe:f1:b2:72:9c:9f:67:9a:da:75:
                    88:dc:92:42:9e:50:bc:de:91:99:fb:eb:bb:fb:ae:
                    2b:ea:25:bc:af:e0:ad:79:56:74:d4:eb:dd:15:50:
                    49:a0:fe:ab:4f:39:82:97:8e:7c:24:fe:a8:06:93:
                    c2:b1:8c:6b:ac:91:b9:23:ed:fc:e2:9e:77:de:fd:
                    8e:e6:3c:7f:5b:34:78:25:ac:f6:48:67:92:57:12:
                    e7:99:86:a6:3a:54:f3:87:21:73:59:75:21:07:8e:
                    3b:37:07:1f:3f:d3:d9:f8:02:07:c1:ef:d8:f2:8f:
                    25:c2:f6:f6:a0:1a:b9:71:49:75:fc:0a:92:99:9f:
                    74:7c:fd:45:0d:06:0e:f8:c8:29:6f:49:d1:24:85:
                    f2:17:3a:eb:fd:a1:b2:4c:34:10:c3:4d:1d:3b:4f:
                    0b:6c:18:dd:c4:cf:67:cb:d3:d9:73:30:4d:12:9c:
                    01:63:8b:bc:f6:51:fa:26:6c:5c:ac:eb:c8:84:ca:
                    2f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C7:4E:04:A1:51:53:FB:CF:5A:B1:15:EF:6C:EA:39:19:37:F4:80
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/292ce702-dd03-3879-9e1c-9e11e59ba81e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.52.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:cc:db:c4:28:6e:e6:d6:15:ec:6f:db:e8:ec:ce:d1:69:dc:
         02:18:eb:98:ee:e5:12:bf:65:32:d4:cf:a5:9c:7d:63:95:13:
         1f:1a:39:4a:3d:e3:cd:19:ae:ee:60:a2:f3:a0:b7:04:84:44:
         bd:0f:41:dc:e1:39:96:a6:d2:f4:a5:ce:b1:d1:8b:4d:6b:7e:
         3d:8c:93:03:8e:10:dc:49:86:e8:ba:b0:ff:0b:8e:c4:68:2d:
         78:0d:35:80:58:0d:38:bd:bf:c6:bf:b0:5c:ea:7e:13:0a:6f:
         b1:aa:29:4a:77:2e:e3:91:fd:9a:e0:3c:fb:65:95:ca:dc:1d:
         4c:c7:28:eb:48:6f:38:43:3a:8c:a5:51:13:49:d0:8e:fe:18:
         76:d1:d8:ed:d5:eb:ec:46:4b:4d:9c:d4:f0:77:4a:01:a5:b4:
         cc:a7:64:cc:5b:c4:22:20:6f:cd:e6:0b:a5:b2:57:29:c5:54:
         76:2f:7e:9e:c6:32:41:ec:af:19:f7:d7:ef:c3:60:90:49:c5:
         65:b0:86:3c:a0:64:28:79:f9:2c:ea:03:d2:32:c5:50:8e:b6:
         7f:b9:d9:f7:b6:e0:55:2a:60:c5:19:1c:04:9f:d0:a8:65:b5:
         e6:a1:34:a4:04:97:e7:ae:c1:17:04:fb:15:aa:39:98:06:06:
         d3:ff:27:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:31:42 2025 by rpki-client