Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8d6d00dc-897b-3a37-8983-686700201734.roa
File:                     8d6d00dc-897b-3a37-8983-686700201734.roa (raw, json)
Hash identifier:          BYcjbTdv6OEo4d+jkPJ+/JxGcI88LbTchErKLHIcDKY=
Subject key identifier:   53:4E:92:AA:89:4A:26:B6:F0:73:BF:37:7B:07:00:48:CC:99:9B:83
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584960541500B28489F17E33E400
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8d6d00dc-897b-3a37-8983-686700201734.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        184.95.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:15:00:b2:84:89:f1:7e:33:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=80e775f7-cfaf-453b-8b12-3cceffe66e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c6:d2:25:38:c3:fd:84:ee:2b:cc:bb:86:9d:
                    81:82:60:c7:c1:5a:86:44:0e:e9:b6:20:17:1b:d6:
                    a5:e2:d7:79:00:2d:f3:4b:d0:eb:af:86:45:37:68:
                    1b:1c:82:8c:38:6d:bb:21:11:f1:e8:62:cf:b6:90:
                    36:02:b2:07:ef:ee:2b:05:eb:2e:ee:b4:64:e8:3e:
                    86:34:a9:4e:c3:f9:e4:2f:08:a6:a4:62:f3:9b:15:
                    3f:93:3a:92:94:f7:8c:cf:09:bd:2d:c6:0d:cf:f9:
                    a7:a8:11:5a:10:76:0e:6b:45:1c:3a:10:2c:0e:53:
                    f5:3f:5b:0f:5a:8e:46:07:a4:69:31:85:21:45:88:
                    5f:93:63:cb:c1:d3:9f:b5:0b:9d:fd:1b:5b:6b:ec:
                    44:67:0d:c2:22:4c:8b:c3:db:ca:bb:43:02:af:f7:
                    a4:87:2b:0d:f9:e8:7f:13:1c:a5:41:35:0e:11:e9:
                    3b:ff:a0:f7:5d:cf:c1:f0:6c:4f:a8:af:e6:29:56:
                    50:cd:33:17:42:75:41:d4:36:11:1b:0e:2e:a2:ca:
                    ec:b6:ae:98:26:33:4c:0a:01:45:6f:ac:53:f0:a8:
                    4a:a3:2f:e3:8b:a6:a2:6e:c7:57:20:42:db:43:11:
                    45:8d:d2:d1:1b:e9:62:3c:4d:81:d4:20:34:8e:a8:
                    1f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4E:92:AA:89:4A:26:B6:F0:73:BF:37:7B:07:00:48:CC:99:9B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/8d6d00dc-897b-3a37-8983-686700201734.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:e0:95:64:56:68:6d:47:4a:e2:6a:10:6f:81:b9:4f:15:e1:
         b2:ab:05:de:d6:4a:c7:a9:21:50:73:7f:a0:06:8b:91:d6:d1:
         97:7e:05:97:bf:0d:10:a9:f3:4c:52:8f:2b:70:03:00:d3:09:
         06:bb:01:07:11:2e:a7:5c:75:d0:c0:a4:32:cf:92:79:ad:b9:
         a6:f7:b0:26:50:33:96:73:23:5d:67:97:fe:c7:5b:99:94:6b:
         fd:43:f4:e6:c7:4a:58:9b:35:ab:ae:91:f6:54:fb:85:8a:b3:
         f9:9b:c9:92:6e:22:fa:d6:29:23:08:b4:54:2d:18:64:44:7e:
         18:de:bd:79:74:55:66:d7:0f:e3:b7:9d:ed:27:3c:e4:b8:a0:
         06:97:22:c5:e0:73:77:4b:64:cd:5d:db:89:ea:28:7a:92:06:
         cc:7a:b9:84:12:fd:4a:e4:ab:8e:86:98:55:3c:cd:85:17:f5:
         bb:ad:02:c8:67:14:42:e4:a9:5b:73:e8:62:19:d6:88:fd:87:
         7e:87:1c:7b:70:a0:e3:98:be:d9:37:e2:97:f1:d7:5e:4d:ea:
         8f:b7:07:5a:87:78:d6:55:cf:66:1f:ba:65:9a:e8:7a:e4:e4:
         e4:c5:bd:71:db:64:bc:c2:86:e2:cf:05:b2:3e:bb:f5:e8:79:
         39:37:d8:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:24:50 2025 by rpki-client