Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a69c88-4c28-3aeb-92eb-31b858e74699.roa
File:                     d1a69c88-4c28-3aeb-92eb-31b858e74699.roa (raw, json)
Hash identifier:          7EGoVaQwTiMdPZd6nhMU5SXa2zsXwj8wwCkgSfK/jmo=
Subject key identifier:   C2:01:11:DA:88:36:C9:AC:75:B8:1B:83:7A:61:9E:22:DB:C2:64:3A
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CB170E2687F03231B4B6700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a69c88-4c28-3aeb-92eb-31b858e74699.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        24.4.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b1:70:e2:68:7f:03:23:1b:4b:67:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=72b8a8cb-9339-4276-a959-f85e267fbc04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:28:2d:39:b9:cb:a3:0c:44:8f:97:cd:41:83:
                    e8:91:df:dc:fe:2f:6f:35:d1:a9:29:7e:b8:f5:ca:
                    dd:4d:ad:de:44:0e:b7:66:56:7e:55:d2:95:a0:10:
                    2f:10:b1:02:4d:0b:3a:df:b2:26:69:ba:c1:f3:de:
                    dc:98:ba:eb:eb:89:21:0c:88:86:1b:a4:56:92:be:
                    59:71:89:a1:ab:c4:24:39:8b:e7:fc:53:ff:a8:99:
                    8f:29:b8:df:9a:52:99:e5:a4:8e:0e:ec:71:63:49:
                    5a:25:1e:34:e8:1a:75:33:f7:01:c5:dc:3a:bb:42:
                    92:6d:a4:73:3e:39:ae:76:44:4f:8d:76:f9:a6:cb:
                    a4:9b:b5:c6:92:76:5a:67:bf:fb:be:4c:fe:d6:35:
                    c1:5f:4d:dc:33:56:52:3c:69:eb:e8:3e:9a:e3:34:
                    d3:48:85:a0:c6:04:10:86:76:90:d2:ed:80:8e:29:
                    a8:5e:cc:50:2f:6b:c4:9a:73:1b:08:b6:b4:6e:ac:
                    7b:87:28:de:82:f3:58:82:1c:e8:74:69:0f:84:5e:
                    46:96:6e:c5:40:5f:ef:94:5c:bf:a3:58:9e:69:8c:
                    35:e4:97:7f:ab:39:85:98:8b:a2:81:87:ea:df:83:
                    ba:bd:41:df:b6:a4:01:9e:a7:1c:13:7c:34:7a:c2:
                    9d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:01:11:DA:88:36:C9:AC:75:B8:1B:83:7A:61:9E:22:DB:C2:64:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d1a69c88-4c28-3aeb-92eb-31b858e74699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.4.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:9a:a8:c6:89:0c:95:b1:33:e4:fa:d4:86:d7:dd:7e:d2:c7:
         8d:b6:a0:ff:1a:1a:30:7a:6b:73:ec:2b:ac:59:04:e7:a9:3c:
         be:51:81:51:f7:14:e1:be:f8:2a:4c:76:33:70:70:52:0f:9b:
         4d:36:91:4a:bf:67:75:83:81:fa:73:dd:fa:1d:57:37:b3:e4:
         12:9d:ec:31:ef:63:58:c1:6f:02:aa:10:ed:a7:6f:8f:e1:15:
         e9:14:61:75:d5:38:c9:62:1a:56:45:87:1a:ef:16:1e:a6:96:
         3b:ee:b9:b4:75:c0:68:ba:da:f1:bb:0e:8c:9f:72:63:04:8e:
         0e:5f:10:9c:2e:a1:64:9b:15:97:7f:0d:c7:d9:99:4c:2d:5b:
         41:c7:dd:68:ba:60:e4:bd:da:71:ef:6b:9a:39:ed:40:14:68:
         3d:56:b7:43:b5:b7:c8:78:76:04:63:d0:3a:c4:eb:95:56:47:
         af:06:f1:33:d4:ec:8c:42:f7:c7:3a:7f:d9:51:63:79:f9:d7:
         52:89:4b:6d:ff:60:90:09:93:b1:34:cf:8f:b3:4f:77:78:98:
         91:f6:1f:f5:f1:f0:67:cb:06:93:6b:8f:75:6a:ca:a4:fb:8d:
         8d:e5:d8:74:3b:fe:5e:6c:7b:42:4e:7c:77:7b:dd:99:a8:e7:
         8e:2e:f6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:27:10 2025 by rpki-client