Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b34b1c15-c377-34b7-9434-b6d7a70deb8a.roa
File:                     b34b1c15-c377-34b7-9434-b6d7a70deb8a.roa (raw, json)
Hash identifier:          DaGFhek++AN0z+xNhP8o6YJ7VDropgm3RxagcGD6PU0=
Subject key identifier:   FC:ED:F2:10:0E:16:55:74:A8:A6:08:12:27:30:B5:28:D4:1B:31:B7
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6D0AA174FD9179D08C8080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b34b1c15-c377-34b7-9434-b6d7a70deb8a.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     22909
IP address blocks:        107.3.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:0a:a1:74:fd:91:79:d0:8c:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=e69fff88-3c89-426a-83ac-dcdb6fa16df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ff:4c:ab:6b:d1:2c:29:ed:53:0a:f2:b8:aa:
                    93:b6:8a:8a:16:c3:eb:36:a3:4d:24:a1:6b:2a:a1:
                    d4:5d:03:28:59:36:16:a9:2d:f6:8e:c1:4e:cc:85:
                    16:5f:b5:96:0a:73:80:26:8b:65:06:87:9b:e5:15:
                    07:26:52:be:40:4f:19:e8:99:55:52:9c:d6:ce:a1:
                    0b:45:cc:85:0c:f9:e5:6c:4c:a6:c8:13:e0:84:99:
                    69:a8:91:d9:5c:f4:4b:b2:a4:9f:6e:4e:4b:32:54:
                    31:fd:e2:98:03:5a:05:51:fd:40:74:22:10:97:db:
                    c0:a7:52:28:05:b3:1b:60:2f:9a:64:60:27:e6:e1:
                    26:db:a4:b9:ef:df:d2:b8:5d:10:e9:3a:18:7b:4d:
                    78:4d:b5:20:d3:31:8c:c1:39:56:6d:33:fa:ff:aa:
                    d7:69:5b:00:97:1e:2a:6f:8a:b8:bb:c7:e7:c0:23:
                    6a:fe:40:53:c9:f3:7c:ad:ba:18:90:b5:b9:21:56:
                    7f:ad:89:3e:cb:ee:b1:22:db:e7:71:22:11:bd:ac:
                    91:a3:d3:eb:d7:e0:42:c6:0c:c1:22:b4:91:d7:5e:
                    b5:11:11:23:ca:6c:d4:e2:d7:65:2a:fa:29:4e:9d:
                    41:46:a4:15:1a:53:9a:07:d1:63:1a:3e:0c:93:6c:
                    9c:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:ED:F2:10:0E:16:55:74:A8:A6:08:12:27:30:B5:28:D4:1B:31:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b34b1c15-c377-34b7-9434-b6d7a70deb8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.3.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:df:26:8f:0d:9f:1f:43:fc:52:3c:b8:b2:65:c7:53:55:88:
         2c:e1:50:09:b4:b3:8b:26:13:52:a8:d1:fa:04:89:b3:4b:c1:
         ca:e9:1c:70:94:8c:f9:ef:29:86:97:88:05:3e:54:b1:17:11:
         57:7d:c9:66:e9:a3:4d:84:b8:43:23:52:b8:6b:19:b7:86:76:
         d4:e4:26:ab:61:6a:a0:45:1a:fc:44:e9:e6:41:d1:2e:1a:66:
         dd:d8:93:4e:05:6b:9b:7a:7c:a1:a3:c4:46:73:1a:6c:3a:be:
         e1:2a:9e:1e:19:c9:31:2d:5b:7b:be:07:eb:4d:98:3c:69:00:
         c6:e7:33:b2:23:46:b9:13:79:49:e9:32:bf:f5:29:b8:94:d3:
         2c:06:ba:b3:7e:58:3d:5b:25:9f:ba:29:60:31:c3:93:47:d6:
         51:b3:f5:c5:c7:60:3b:ca:73:1a:91:c9:12:1f:f7:7b:76:4c:
         dc:c7:82:78:1c:be:eb:31:15:01:9e:d7:4e:44:62:df:5d:4c:
         0c:b5:23:a2:98:13:58:68:d9:1d:25:b1:47:82:15:7d:49:83:
         2a:56:09:9e:78:8d:45:09:62:4c:d4:09:56:5f:90:cf:5a:e6:
         ef:21:04:74:86:e4:86:60:59:24:69:8f:51:cf:59:1e:af:e5:
         49:0a:cf:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:08:12 2025 by rpki-client