Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff702af8-6152-3743-8632-f332ed72ac53.roa
File:                     ff702af8-6152-3743-8632-f332ed72ac53.roa (raw, json)
Hash identifier:          6GH4tWjL3pPO8n4sKo1VW5StK3qVeF9KFf5rG0QezeE=
Subject key identifier:   46:4C:58:E0:A3:6D:BD:64:73:21:F3:04:30:C9:8A:F9:AB:40:6B:39
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D42FFE7713E391CDCB1E5ABC
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff702af8-6152-3743-8632-f332ed72ac53.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.34.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:fe:77:13:e3:91:cd:cb:1e:5a:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=d3d7274f-cf04-4f0e-a0e7-33c4d212e73f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:fd:a8:a4:8e:ab:92:2f:ab:4c:94:91:b8:40:
                    b3:61:53:0f:ba:d2:e4:1f:e6:ce:ee:e8:5a:06:a3:
                    24:34:6d:b1:10:a2:1e:79:f4:fc:ae:47:69:7c:c7:
                    cc:23:c0:bf:27:6c:f9:e2:75:78:6c:39:e6:c5:6d:
                    a0:03:6c:57:40:32:48:89:24:cd:4f:49:50:d0:bf:
                    8d:8a:d5:85:08:9a:39:6c:62:30:86:09:fc:ee:7e:
                    5f:5b:db:57:c6:1a:9c:c1:c9:e0:eb:73:38:ca:8a:
                    fc:09:f0:7a:c0:43:f5:b1:91:0e:ab:40:3a:d8:10:
                    30:be:a9:57:77:69:57:8b:78:d6:af:b7:14:01:97:
                    59:78:55:82:ba:a3:be:7e:e1:bd:b0:9c:e4:fd:82:
                    14:8d:fd:72:15:29:da:8a:da:6c:71:28:3a:e0:96:
                    45:21:a2:3a:d5:b9:fa:9d:0b:90:41:63:03:53:ae:
                    09:5d:f0:3a:07:fa:10:9e:8e:07:cf:33:2f:25:46:
                    f4:04:ec:75:72:e7:63:74:f7:d1:e9:2a:7b:ba:dd:
                    ea:f3:37:c7:b4:4e:24:5a:47:12:e3:a4:f6:dd:47:
                    3e:64:94:53:30:a6:ee:aa:87:32:79:c3:c2:49:ee:
                    eb:cc:a9:d2:45:84:ef:a4:17:67:1d:21:02:4d:9e:
                    3e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4C:58:E0:A3:6D:BD:64:73:21:F3:04:30:C9:8A:F9:AB:40:6B:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ff702af8-6152-3743-8632-f332ed72ac53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.34.210.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:3f:0d:2b:28:fc:d4:d9:e6:aa:e5:89:fb:5d:ba:4d:ad:28:
         2b:a0:3c:14:e9:c7:d6:c8:c2:7c:5a:a6:e8:ea:4d:6a:0f:6f:
         de:19:a0:ca:40:33:7d:c1:09:91:62:18:56:16:95:2a:ee:fb:
         26:b7:60:17:9f:4d:c8:8c:81:d8:3b:22:c3:c6:0a:98:fd:e2:
         90:b2:63:5a:12:f6:6f:63:fc:80:c3:1a:24:88:0c:9e:f6:ce:
         a6:20:0a:c2:53:bd:f2:25:3e:52:4a:75:0b:fe:ef:5f:33:f1:
         70:ad:7c:d8:c9:33:65:92:ce:cd:22:37:bf:98:85:b4:20:7e:
         0d:29:47:0f:21:5f:5b:1d:f8:18:4b:a7:97:9f:d7:e1:ee:02:
         d2:41:0f:63:c9:90:6c:c3:7a:5b:a7:50:71:1d:7f:f6:1b:20:
         09:1e:f5:88:44:17:55:87:e5:90:f1:f8:64:cd:e3:3e:60:d9:
         0b:63:b8:46:f4:95:95:ac:69:6f:83:ca:cd:cf:01:62:de:69:
         c5:cf:b8:fc:b8:7d:63:72:f5:08:b5:85:f0:cd:6b:fb:30:1c:
         4f:4d:22:91:cd:c7:a5:e3:df:08:08:e1:00:0a:36:f8:b2:ff:
         f8:02:c3:75:a6:ac:a3:c5:5a:52:6d:d1:66:91:fe:ec:c8:c1:
         11:d9:56:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:56:49 2025 by rpki-client