Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa
File:                     18033496-5782-3221-85dc-1cc6d01b6081.roa (raw, json)
Hash identifier:          wVYn8xjLvdzDkKNffqy7+F/tw80OorAbqVfGXYa2FMk=
Subject key identifier:   BD:E5:27:19:95:58:50:F1:7B:B9:3E:EC:BC:9F:39:3F:CB:EC:3F:AD
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849605413D2B300398E8E392F58
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        216.113.104.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:13:d2:b3:00:39:8e:8e:39:2f:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=a03f4bd8-42c7-40db-a626-6d2e93bbb535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0c:08:9a:49:e9:e5:b9:fd:bd:5f:db:23:73:
                    74:c9:82:45:7a:f5:82:9e:46:ff:3f:36:7e:05:37:
                    e6:24:5a:a4:94:1b:d1:e8:8c:b9:9f:b3:64:f1:0a:
                    95:1f:eb:02:89:1c:9f:f1:16:97:d9:e1:8c:c7:61:
                    90:54:ae:ea:a6:d6:83:6e:c0:86:4b:2a:a1:bb:03:
                    4a:93:36:58:7b:c6:9d:6c:0c:c3:4b:5d:21:ae:43:
                    a6:7d:52:6f:10:6d:e1:97:0c:0e:dd:ea:b7:0a:34:
                    e9:40:9f:1b:ac:94:6a:b8:4b:c7:9c:87:d1:94:50:
                    be:60:2d:01:b9:f7:2d:6c:f0:5e:88:16:cb:0a:ac:
                    af:0b:61:84:4a:7f:b8:99:c4:b4:7a:29:a5:5b:92:
                    59:4a:c1:6f:85:92:66:61:60:e1:79:6c:5b:8e:f1:
                    48:71:4d:12:1f:8c:82:ee:1a:8f:be:a6:ac:0b:e4:
                    de:20:9b:2a:6d:a7:79:64:ed:4a:98:ad:34:53:c4:
                    70:77:b5:d9:bc:4b:99:89:ee:04:23:cb:2e:0f:95:
                    c4:2a:b4:9f:90:b9:ee:33:fe:ed:61:9f:ee:b3:ab:
                    76:df:ba:16:ae:53:86:04:6b:ed:52:88:24:f9:f9:
                    a3:7b:4d:8a:36:07:5c:4b:5c:b1:28:be:04:3a:76:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E5:27:19:95:58:50:F1:7B:B9:3E:EC:BC:9F:39:3F:CB:EC:3F:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/18033496-5782-3221-85dc-1cc6d01b6081.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:94:4e:51:db:ed:cc:46:64:51:06:f2:a9:ff:75:01:5c:6b:
         91:42:fc:72:ed:ec:68:45:b6:b4:fb:74:0e:02:65:96:87:50:
         80:ca:09:9f:b4:2a:55:65:b9:af:e8:87:a9:79:6a:6f:03:32:
         1c:f3:60:7a:11:f0:74:37:2c:e6:f4:f5:bd:fc:fe:81:d0:28:
         56:a6:50:6f:e9:75:58:63:46:e5:f7:a4:8f:1c:f0:82:56:45:
         79:bf:b9:3d:43:22:18:91:b1:1f:db:f9:18:dc:85:fc:1c:ed:
         4c:89:00:1b:28:c7:e0:0d:0c:eb:5e:df:f1:bc:db:f2:e3:14:
         37:14:76:f1:cd:95:1b:e2:c2:6a:9a:1d:f2:2d:ea:f7:7d:28:
         32:f0:de:93:35:14:a9:2d:bc:9b:d9:59:85:78:2a:ed:a6:7e:
         6f:96:97:87:a5:5c:22:48:e2:c7:01:81:ba:a3:89:4f:bc:33:
         a6:b8:bc:02:b3:fa:5b:96:b7:bc:24:bb:1a:db:76:a3:4a:74:
         42:74:fd:20:00:04:1d:5e:72:a7:f2:6b:95:65:3c:1c:30:75:
         5d:85:db:29:ea:38:05:e6:3e:ea:49:73:f0:fb:c7:35:d9:6e:
         5a:08:5a:6b:99:f4:6d:90:cf:ce:ca:15:85:af:63:b7:1e:01:
         e9:89:2b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:15 2025 by rpki-client