Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa
File:                     d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa (raw, json)
Hash identifier:          YI6YcmfaqoOcyz3CH/iVxmNqvy3C01AmyE7H0bn2ch4=
Subject key identifier:   7B:92:A0:BE:9E:FD:26:62:1B:DA:F9:91:B3:45:E7:B9:3E:60:1D:04
Certificate issuer:       /CN=8b53f56f-a586-4e85-9c61-c3a278e13120
Certificate serial:       010D0C9F43285848E86661A49D9C75B0DBE70E80
Authority key identifier: 21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        144.81.132.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:61:a4:9d:9c:75:b0:db:e7:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b53f56f-a586-4e85-9c61-c3a278e13120
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=c4e7810e-41ce-4ad8-a807-284840fb597f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3e:bd:f3:ef:44:76:c3:e1:c5:72:eb:52:aa:
                    32:7f:da:2b:39:e3:be:1f:4f:c1:ff:42:15:c5:dc:
                    11:6d:32:09:19:bf:2c:70:48:4e:68:2d:ae:84:05:
                    cf:25:7b:f8:26:81:05:c3:2f:d9:00:cd:ec:9b:2b:
                    e6:bc:9e:90:fe:cd:02:0b:b3:67:1b:53:09:03:6d:
                    42:d7:96:a3:7f:68:40:75:4e:dd:35:58:ab:7f:78:
                    3b:94:10:b2:b3:b5:33:7b:c5:db:17:2c:89:18:b7:
                    d8:f9:43:31:c7:e5:d2:c7:8f:8c:2f:05:51:a7:b3:
                    e5:20:57:f8:9e:83:18:3f:be:c8:16:ae:4e:e8:af:
                    98:c4:26:d4:66:2e:f2:1f:bd:12:d2:57:96:20:fe:
                    5e:3a:75:12:c5:cd:41:ae:60:8b:0b:8c:6f:54:2b:
                    cd:ed:9d:93:c4:3c:77:ef:94:48:e6:53:0e:76:03:
                    83:39:72:a7:cd:6c:6e:aa:c4:83:43:cd:7c:8b:18:
                    56:86:69:9d:d4:35:e9:01:71:2c:0e:d5:70:d6:47:
                    91:50:02:96:8e:67:0a:1f:ba:36:5e:98:1a:f7:4a:
                    50:e9:64:de:41:db:ce:6c:f1:6a:f8:60:eb:24:d4:
                    ac:66:6a:4c:03:ed:55:6c:3a:94:0e:eb:61:ba:0b:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:92:A0:BE:9E:FD:26:62:1B:DA:F9:91:B3:45:E7:B9:3E:60:1D:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/d6e07c5a-ae4a-3bc6-ac28-58b99d96bbcf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120/8b53f56f-a586-4e85-9c61-c3a278e13120.crl

            X509v3 Authority Key Identifier:
                keyid:21:7B:D3:C9:3D:20:C8:3E:73:66:85:64:B4:A7:2E:8D:45:27:DF:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b53f56f-a586-4e85-9c61-c3a278e13120.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.81.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:d5:21:5d:e8:e0:60:86:bc:36:cb:12:57:0b:a2:51:aa:6b:
         4c:f6:8e:9c:0a:3a:15:54:57:ac:29:4c:e1:0b:65:35:fd:78:
         42:c6:a6:2e:e8:36:07:6d:b4:48:fe:87:44:67:04:1b:c8:6b:
         4a:64:22:69:6a:bd:2d:ef:fd:b5:72:fd:d6:8f:3f:f4:74:ec:
         5b:5d:82:d2:ae:6f:0e:95:18:9c:09:75:5a:91:9a:db:d2:07:
         fb:86:5d:49:78:00:db:6c:0e:2c:0c:0c:bf:aa:94:ec:62:78:
         20:e5:bd:5b:29:72:30:09:b9:31:46:bd:31:69:9a:a9:2d:6b:
         85:cc:58:65:66:4e:2d:a0:5f:a8:2f:38:bc:38:90:86:98:0d:
         a0:f7:c5:bf:af:59:28:7e:fc:26:5a:a5:40:28:03:e6:f4:58:
         cc:11:2f:b8:54:05:86:74:4b:cc:b2:90:4b:db:35:b5:77:cf:
         40:dc:df:06:97:4a:7b:79:f9:92:e5:84:78:4b:60:dd:f5:13:
         af:1d:37:99:17:97:bf:36:24:97:77:d0:e4:cc:73:46:51:19:
         f2:c6:dd:b7:a5:4f:6c:62:64:52:f3:fb:a9:22:a9:ed:fa:7e:
         82:9f:fa:74:02:03:2c:63:3b:82:de:67:6c:34:a6:9a:25:86:
         16:ab:b8:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:51 2025 by rpki-client