Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d650f-2265-3027-9881-70c5206a529b.roa
File:                     8e5d650f-2265-3027-9881-70c5206a529b.roa (raw, json)
Hash identifier:          v7F/Oc001bu9WvUKAJTV9ZNXL2rgUlbDx1Obnj8Eye8=
Subject key identifier:   33:7B:49:E5:53:D8:66:9E:ED:9F:CD:A5:1B:6C:D0:43:ED:59:CE:C2
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849203C6C68DC3AE45891551090
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d650f-2265-3027-9881-70c5206a529b.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     7015
IP address blocks:        24.147.108.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:6c:68:dc:3a:e4:58:91:55:10:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=62638d1d-6f29-4aa6-8b31-7ac55dd5b22a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:cd:de:11:b3:d0:3d:c1:88:2a:4d:53:03:be:
                    c8:d9:48:4a:b1:30:b7:23:7a:78:be:58:9f:0c:fa:
                    31:49:d4:d4:e2:2e:a9:e1:f8:b0:c6:1c:b3:f4:01:
                    9f:27:51:ec:b8:b4:21:c4:45:83:4a:1c:27:73:39:
                    10:47:00:d1:90:81:ac:63:82:30:12:dd:5b:4a:83:
                    75:5e:a1:8f:24:a9:57:59:a6:fd:83:04:09:32:89:
                    dc:17:7a:e0:83:b2:9b:6e:a2:50:a8:4e:e5:fa:c3:
                    96:ef:36:ee:ff:2b:30:25:2d:90:ca:f7:57:45:df:
                    d9:45:f4:09:be:4e:f7:4f:65:36:32:35:60:0b:1f:
                    6d:7b:97:7f:40:f1:bc:68:50:9e:d7:cd:da:c3:65:
                    36:c0:81:63:88:b6:80:4e:1b:64:73:4c:d8:c6:ff:
                    51:c7:29:0e:7b:73:d6:25:46:cb:82:cf:98:eb:96:
                    45:3e:e1:cd:3f:16:27:9a:29:ee:31:01:9d:02:3b:
                    11:be:5f:38:b7:a7:f5:d8:6c:7f:74:f3:2d:28:30:
                    fb:ff:86:b0:41:23:69:2e:bf:28:2f:0d:91:8a:38:
                    9b:f3:d9:ee:56:38:b1:4a:36:02:bf:f2:c7:76:30:
                    5d:99:13:fa:77:7a:91:87:75:a8:ea:cc:68:06:cf:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:49:E5:53:D8:66:9E:ED:9F:CD:A5:1B:6C:D0:43:ED:59:CE:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e5d650f-2265-3027-9881-70c5206a529b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:12:45:21:6d:4f:4e:e4:18:70:41:db:f9:f7:b8:b6:a9:03:
         b3:d6:11:6b:96:4c:49:f8:d9:ba:66:a0:02:24:29:96:ab:3b:
         65:76:a8:b3:30:33:c3:de:70:15:42:1b:c8:bd:5e:e0:14:de:
         fe:a6:06:9d:3d:37:d8:60:11:ac:31:6a:5a:ad:8e:cf:46:15:
         65:f4:fb:00:e5:2d:45:8a:c8:aa:90:b5:05:c4:11:c0:c6:cd:
         51:d2:14:c2:bf:12:99:bc:ad:3f:27:43:fe:5c:d3:55:49:12:
         10:ac:f4:3d:fe:77:ce:60:9d:1b:ca:d8:a4:65:8b:ad:9f:fa:
         aa:e2:06:de:0e:fe:b1:a1:3d:db:8f:62:6a:11:e9:49:5a:51:
         8a:6e:99:27:18:56:6c:2a:cf:db:09:64:91:b1:a2:46:13:be:
         ac:76:b7:9b:56:f5:cd:34:a1:5b:be:eb:00:a1:03:71:9b:be:
         13:e3:d7:28:33:be:a8:e6:1d:e1:2a:cd:0f:cb:b5:b3:ed:9e:
         6e:11:03:11:32:62:dc:01:ed:71:d3:d9:db:5c:f6:33:90:89:
         5c:38:07:d6:75:f9:bc:66:07:db:8c:e1:d0:b3:47:aa:63:7c:
         c5:12:d6:d3:cb:6a:5f:16:b0:e1:5b:34:33:a0:46:e2:9f:ba:
         76:ca:8c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:47:56 2025 by rpki-client