Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
File:                     6dca5a17-8e7b-3be9-b53b-2a516a105494.roa (raw, json)
Hash identifier:          wVKw0xh6w5yu1hXtjX7fuQLno8rOvOYaikc3+6dCLSY=
Subject key identifier:   71:8B:22:D9:7F:42:7C:87:7A:30:5B:9D:9E:35:79:8A:51:58:D8:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D43006C98C65C39A105F7800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.91.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:30:06:c9:8c:65:c3:9a:10:5f:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=8688f45c-9a15-4b54-9758-ecc60f94f180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3b:85:5b:45:58:9a:a0:48:14:ac:71:f0:37:
                    3f:d7:78:06:a7:bc:85:29:45:4c:0b:5a:ee:2e:66:
                    c6:59:11:15:19:2b:66:13:ef:17:cd:63:26:20:4a:
                    f0:d9:54:d9:1c:57:f1:66:c1:96:48:0b:c1:9e:be:
                    7d:be:ad:68:95:86:25:35:1c:01:b4:8e:0d:1c:77:
                    d4:67:e3:12:c9:e0:50:d5:fb:40:ff:1d:a1:6e:41:
                    89:2b:54:db:84:87:4d:bc:8e:48:9d:e6:e2:70:67:
                    41:d3:ce:a1:23:91:36:74:b1:fc:a9:7a:b4:c1:d2:
                    b6:be:36:10:bc:9f:e8:2d:17:1f:be:cd:a0:b0:68:
                    a9:04:ed:51:49:82:b4:43:47:db:30:48:95:c3:ac:
                    b8:92:1c:0f:2e:69:e4:d9:7e:f8:73:f8:b0:94:5e:
                    de:76:f9:ba:5c:9d:42:7f:6b:98:0a:96:10:6d:2e:
                    34:9c:15:09:b5:7a:87:26:10:8b:e8:04:d4:19:18:
                    a3:13:39:58:d9:f4:22:dc:14:0a:2c:ae:00:13:34:
                    12:7a:a4:d2:88:ed:49:2f:fb:5b:89:13:98:23:b5:
                    12:a1:d6:d2:74:08:f6:81:16:f6:f0:51:d3:62:e2:
                    6f:3d:46:17:e5:84:92:f1:a4:50:dc:1d:f5:a5:ec:
                    8a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8B:22:D9:7F:42:7C:87:7A:30:5B:9D:9E:35:79:8A:51:58:D8:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6dca5a17-8e7b-3be9-b53b-2a516a105494.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.91.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:d7:5b:b7:21:d7:ff:ba:70:47:ae:a9:00:7f:b6:c1:90:c3:
         9b:53:58:87:12:8c:73:20:cf:ea:5f:f4:bb:ef:15:2c:88:70:
         67:06:e2:53:80:59:af:9c:1f:91:5b:12:99:67:ff:27:e5:b2:
         cf:1f:f7:92:f7:e6:82:60:0c:01:17:eb:2e:f6:56:d6:5c:68:
         97:bd:bb:42:c1:21:41:16:d2:97:4f:46:bf:f0:62:e0:87:44:
         e1:9f:a9:98:62:ff:49:78:9f:7c:1a:f7:36:05:b3:7e:04:79:
         e4:28:93:8a:36:fe:a0:53:9d:62:52:d8:90:e4:f2:f1:c6:56:
         b2:98:1c:cf:2b:f8:a3:15:54:26:6e:aa:0c:a1:1f:05:21:f7:
         f7:0d:5c:97:b9:68:6f:33:53:5e:23:0d:5e:1c:8e:77:43:fb:
         39:c7:6b:ea:8c:51:30:75:3f:d6:89:f6:35:db:9b:db:2f:b1:
         c2:cc:c4:eb:0c:6d:d4:b7:dc:97:35:60:86:b4:8a:35:d5:88:
         bb:1d:4d:dd:be:82:49:b6:c2:8b:53:8a:dc:9b:40:22:ca:bb:
         ef:52:3c:ad:9e:22:94:ef:cd:90:83:54:ce:5a:63:19:99:f4:
         36:fd:7c:7b:ed:5b:c3:eb:54:da:96:32:3e:20:b6:a9:06:8c:
         79:4f:1d:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 05:40:15 2025 by rpki-client