Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa
File:                     84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa (raw, json)
Hash identifier:          V0jqTxDdCbAEmXdsOwG4NzqHEyizKruwK2oDT57aSaw=
Subject key identifier:   DF:13:A5:05:3E:69:8C:FD:82:B8:F0:70:AB:3E:85:2B:15:02:70:CC
Certificate issuer:       /CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
Certificate serial:       010D0C9F432858491D717FB6B86346E9F6B4ACE0
Authority key identifier: 73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19430
IP address blocks:        139.61.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7f:b6:b8:63:46:e9:f6:b4:ac:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a9c27a4-fe2b-4b21-8288-edfc10a93f26
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=fc11627c-3dd0-4ead-973e-7221bd0c5619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b7:bd:67:34:f5:34:fa:10:1b:1a:9a:76:dd:
                    87:d7:ad:70:a2:b3:03:a1:4c:f6:b8:f3:58:8a:f5:
                    5b:ae:f8:65:ce:03:42:4a:0f:43:1b:26:10:93:6c:
                    50:eb:18:29:8f:6c:87:44:2b:3d:b0:37:96:1c:0a:
                    6f:28:80:19:90:9a:1a:f8:fd:ac:19:55:3c:6d:9e:
                    fe:2e:bf:6c:ed:ba:ad:94:f4:e0:6f:90:65:58:6b:
                    3c:5a:99:ad:d8:0a:56:fa:7b:96:ef:a9:dd:32:3c:
                    ea:8e:18:bf:47:63:71:68:ca:22:72:ea:96:98:39:
                    46:31:0c:d5:c3:77:f7:49:97:94:97:35:e2:d5:be:
                    19:f6:a8:f3:9b:a9:99:7c:9a:bd:61:76:0e:51:67:
                    24:37:08:a9:ce:91:28:0e:01:5e:56:46:15:b2:f0:
                    00:29:f7:94:71:f8:ba:1b:06:64:86:ac:98:74:14:
                    11:1f:bb:a7:87:90:97:3d:3d:6f:ae:13:a6:79:ee:
                    27:c0:1d:52:ea:7a:f0:a8:05:c9:00:b9:06:2d:74:
                    b1:9c:32:67:43:d7:eb:d4:df:55:ac:2b:66:e6:f1:
                    f6:06:d9:31:39:d8:38:39:eb:53:1f:6b:17:0f:7e:
                    a6:da:54:04:40:5a:cd:18:92:9a:57:ab:6e:e6:58:
                    31:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:13:A5:05:3E:69:8C:FD:82:B8:F0:70:AB:3E:85:2B:15:02:70:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/84fa31c2-8fc0-36e1-871a-3eddd54d6acf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.crl

            X509v3 Authority Key Identifier:
                keyid:73:E8:E1:8C:A8:F6:D1:73:1B:9A:33:F4:4B:9A:06:75:66:96:1E:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7a9c27a4-fe2b-4b21-8288-edfc10a93f26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.61.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:2f:83:81:12:4c:6c:34:9c:45:98:be:1e:4b:16:ee:57:25:
         1c:d3:4c:f6:db:fa:e9:c7:63:83:14:99:d2:a8:5a:9f:02:b3:
         8c:a1:e8:70:31:ce:44:b7:09:a4:80:18:ac:e4:ed:2f:48:fc:
         c7:99:99:37:26:63:2a:4a:fe:ce:23:65:e1:fd:7b:3d:da:19:
         ca:f8:cf:80:f2:b8:60:9f:5e:a3:37:32:cf:ae:1d:a5:79:83:
         07:0d:bd:2e:a0:2a:5b:5e:7d:b4:53:4d:f1:7c:e1:aa:14:4a:
         24:c1:1b:4b:59:2b:58:37:8d:30:c7:aa:80:21:48:ec:20:30:
         64:a2:94:2c:05:5b:d1:36:29:e5:92:f1:c6:ec:cb:99:c1:34:
         5f:a7:39:60:ac:93:72:b5:ee:12:ea:d8:86:c9:7f:88:e9:e1:
         06:3c:36:d6:99:51:84:67:fc:b8:54:a4:24:55:3e:4a:98:4c:
         47:cf:b6:5e:62:98:35:dd:c9:09:3b:21:90:db:50:96:f2:38:
         52:21:3f:cf:ca:10:fc:eb:2d:9b:49:8b:61:d7:2f:94:dc:37:
         a0:3f:eb:69:ec:fa:bd:ae:54:a3:b6:78:d5:a3:4e:de:02:37:
         08:21:06:3b:69:01:1c:03:59:73:b5:ff:0d:c3:a9:2d:b3:ae:
         89:e7:c4:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:45:56 2025 by rpki-client