Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa
File:                     e578444d-059d-3e45-b9db-3933326926cf.roa (raw, json)
Hash identifier:          1jFIDVFIeBCVqdeY1EfwdRBAD8B0lSooTb7wRH02lwY=
Subject key identifier:   CF:C6:7D:2F:62:62:06:04:36:49:A7:B9:B7:23:27:C1:E2:A6:64:E1
Certificate issuer:       /CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
Certificate serial:       010D0C9F43285849568EB9AC1D57727EFCC09280
Authority key identifier: 77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa
Signing time:             Fri 28 Mar 2025 13:00:51 +0000
ROA not before:           Fri 28 Mar 2025 13:00:51 +0000
ROA not after:            Thu 26 Jun 2025 13:00:51 +0000
asID:                     7029
IP address blocks:        75.89.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8e:b9:ac:1d:57:72:7e:fc:c0:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49bd506e-447c-48e7-9d44-4b373b35b2d3
        Validity
            Not Before: Mar 28 13:00:51 2025 GMT
            Not After : Jun 26 13:00:51 2025 GMT
        Subject: CN=938e06e7-04c3-4f98-9e43-58b0d14a2a76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ff:bc:3f:84:18:e9:11:0c:1c:3e:03:c5:d1:
                    6c:2c:04:59:74:57:72:55:32:25:ab:0a:eb:36:ec:
                    63:b0:b5:25:ea:43:72:ae:b1:39:3e:3e:da:82:af:
                    43:e5:d8:dc:15:aa:3a:e9:e7:53:9e:90:18:94:ef:
                    27:df:71:3f:f9:02:38:1d:49:1b:20:23:4e:86:f9:
                    f5:31:0e:46:c3:91:fd:f0:b2:fe:ae:a7:bd:70:96:
                    19:c2:a8:f2:e4:2d:ee:ad:e5:29:f1:02:77:ed:de:
                    7e:92:a3:b1:68:9f:99:76:6b:58:76:41:24:af:0c:
                    8e:80:ba:01:4c:1b:59:33:f5:11:4b:35:e6:ef:42:
                    4d:1f:fe:8d:27:75:6f:73:2f:e0:df:6a:4f:54:e2:
                    a5:60:8f:90:25:15:de:e0:3c:39:98:83:41:69:c7:
                    89:3d:37:ef:c0:a8:e7:9d:99:81:84:40:48:06:03:
                    bb:06:83:33:dc:12:9b:11:03:8d:c1:51:9b:90:13:
                    05:17:f6:ca:1b:f6:bf:3b:65:a2:10:df:9c:ad:bd:
                    fe:13:98:b6:d8:85:6f:b3:4a:70:8e:76:7e:d9:cc:
                    ed:73:0e:06:b6:bc:70:33:c6:ce:33:90:2e:ff:4f:
                    1d:a7:b3:b1:f7:d0:01:2a:81:7a:28:55:cb:18:aa:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:C6:7D:2F:62:62:06:04:36:49:A7:B9:B7:23:27:C1:E2:A6:64:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/e578444d-059d-3e45-b9db-3933326926cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3/49bd506e-447c-48e7-9d44-4b373b35b2d3.crl

            X509v3 Authority Key Identifier:
                keyid:77:03:89:3B:86:32:63:FF:78:2E:87:84:0D:12:3F:C5:E7:13:68:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/49bd506e-447c-48e7-9d44-4b373b35b2d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.89.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:75:2c:c9:ee:57:f3:f5:94:d3:f4:53:0b:f5:f1:ab:ea:2b:
         5c:ed:66:fd:f8:1f:50:33:56:8e:a3:36:59:06:b7:55:aa:42:
         7a:9b:f0:34:0e:c5:7d:6a:08:12:1e:d3:50:99:09:b9:34:ca:
         5d:62:e6:f1:d9:6a:6a:50:58:d8:9c:74:71:39:2a:9e:42:62:
         4f:43:37:e3:98:c8:33:5c:57:32:32:68:4a:cc:aa:7f:cd:0f:
         be:fd:42:d4:a4:56:d7:9a:8a:68:e0:ee:0e:20:b2:d5:9a:84:
         12:51:d9:71:f1:d9:63:11:7d:a0:e4:56:6a:b6:1c:94:24:a4:
         fc:c1:47:aa:34:f0:81:8a:ba:87:10:71:a1:12:46:db:57:00:
         65:a0:0d:5c:c3:d3:00:c2:98:0c:bc:08:ad:f1:cc:b6:fd:d8:
         65:8a:4f:d7:86:3a:d9:67:cc:24:57:4f:fb:b9:c7:02:3a:24:
         08:27:e8:ca:4d:95:31:1c:71:2d:64:db:ee:ca:0e:7e:43:6c:
         5a:06:92:26:fc:8b:14:89:3e:f1:5e:77:f1:1a:ef:cf:88:9e:
         e4:c1:a9:84:7f:bd:23:0a:91:89:ea:14:21:e5:26:31:26:f3:
         70:a6:39:c7:46:21:ca:af:cc:15:a0:ec:e7:c2:87:e5:fb:84:
         b8:5e:fc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:37 2025 by rpki-client