Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
File:                     c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa (raw, json)
Hash identifier:          zfwqzaen8XU2rBetONfuhu/3hPbblD384n32rU54mjQ=
Subject key identifier:   B9:35:7B:E3:FF:D4:6D:9A:65:E9:F0:84:EE:00:6F:D4:77:2F:50:AB
Certificate issuer:       /CN=50d23085-72e3-499d-9b7f-e552792b3f1b
Certificate serial:       010D0C9F43285848DEA117AEE1759FD74CAD80E0
Authority key identifier: 57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     61317
IP address blocks:        94.72.178.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:17:ae:e1:75:9f:d7:4c:ad:80:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50d23085-72e3-499d-9b7f-e552792b3f1b
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=6e1dbe46-71c8-4bdd-924b-b1608242369d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:92:80:08:52:bf:47:ea:6c:d4:88:6a:7f:f2:
                    8a:3b:ce:f4:28:51:d1:d3:48:de:77:c6:9a:df:bd:
                    20:eb:53:0c:6c:66:0e:5a:91:5d:ab:4a:15:46:89:
                    f7:45:0a:9a:32:21:c3:c7:6c:75:59:88:0d:d1:19:
                    08:51:71:85:e2:68:71:26:5d:c1:54:af:78:0e:5a:
                    7b:f1:2a:a5:9b:bc:7e:77:2b:2a:91:d6:b9:96:2e:
                    ed:4a:82:6f:ac:5a:0d:f5:a6:5d:2b:2e:66:a9:d4:
                    49:bd:35:02:f3:32:c2:55:1a:5f:fa:a4:d3:a2:92:
                    b2:6c:63:6a:92:fa:28:49:cd:2a:65:51:3e:59:29:
                    ac:f2:56:f1:cc:bf:26:fe:ec:ab:9b:64:7b:02:d6:
                    0c:67:ad:e6:38:8f:3b:a5:ee:d9:82:9c:fe:8f:24:
                    8a:0a:36:d2:ea:aa:15:d3:d7:27:14:05:72:97:9e:
                    e3:09:3d:99:95:e9:cf:9c:94:c3:c6:8c:a4:0e:61:
                    90:67:32:b9:75:c0:ca:07:9d:14:47:bf:36:f4:98:
                    50:93:a9:65:95:2d:4f:c5:82:75:03:4e:8a:4c:60:
                    45:28:ca:0e:6b:33:43:87:fc:28:01:ba:c8:2f:71:
                    63:f5:97:d0:66:b6:06:39:4f:12:41:e4:66:7a:4d:
                    6a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:35:7B:E3:FF:D4:6D:9A:65:E9:F0:84:EE:00:6F:D4:77:2F:50:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/c75b412a-1d88-3830-ad50-cd7950cc3ab2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b/50d23085-72e3-499d-9b7f-e552792b3f1b.crl

            X509v3 Authority Key Identifier:
                keyid:57:CD:0B:99:0C:67:55:DA:91:D2:A4:D8:56:61:B5:8E:FE:70:35:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/50d23085-72e3-499d-9b7f-e552792b3f1b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.72.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:74:a5:75:12:9c:b7:93:3b:c9:b7:f2:eb:43:1a:a5:27:bf:
         21:4f:d7:8d:15:1a:2b:5e:01:aa:53:3a:bc:46:8c:31:01:eb:
         52:ef:45:7b:b2:be:9c:51:f5:84:4d:3d:16:8b:53:92:a1:6f:
         92:02:9b:e6:a0:d2:06:ee:90:af:a4:5d:6c:5e:8e:d1:41:92:
         5f:51:ef:5d:39:98:a4:89:0e:72:3a:5b:9d:7f:d0:67:a6:7c:
         a7:f3:49:4b:d1:a2:2b:e6:cd:f0:82:74:f4:f4:69:2d:c2:26:
         e4:c1:0d:d9:c3:f7:77:ce:c0:6c:b5:4d:98:49:9f:1f:d1:3c:
         ee:9d:7b:ec:c0:f7:d7:c0:6a:ba:7f:c6:3e:b0:18:a7:93:5a:
         82:f7:7f:5d:12:b3:22:34:00:be:3e:25:a3:d8:ca:b7:a0:d1:
         82:4e:6b:e1:6c:d7:f0:f2:39:1d:7a:a7:7e:be:19:29:48:b2:
         63:fa:27:6c:d3:3d:e7:9c:72:5f:c8:12:bf:7c:e7:67:cd:aa:
         bc:0d:81:8a:8e:15:d2:e5:e7:c5:bc:57:71:53:b6:5e:e9:73:
         e3:27:04:ef:24:69:bc:40:e7:f3:0d:7f:f2:d4:15:0d:28:c8:
         e8:8d:66:0b:e0:cc:b8:fc:d4:32:25:2d:b8:a4:11:aa:ec:89:
         21:84:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:38:23 2025 by rpki-client