Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
File:                     4756446c-96ad-309f-b6b4-5601e968e103.roa (raw, json)
Hash identifier:          jNTpKNRxcS77da/Z2MzJsv3bVttH8eNNLNwv5O9hKHs=
Subject key identifier:   61:E9:ED:7A:98:79:36:CF:9F:75:80:61:74:B1:3E:EF:56:36:48:95
Certificate issuer:       /CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
Certificate serial:       010D0C9F432858491246C884199563AEC5C2C900
Authority key identifier: EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     27446
IP address blocks:        64.147.211.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:c8:84:19:95:63:ae:c5:c2:c9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc307e5d-cfa4-4304-8b29-ef289d4a387d
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=93db5270-3474-49f8-8a67-ebf3d4a46c4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2e:04:a5:14:fa:98:9a:a8:f1:45:43:91:8d:
                    30:07:ee:27:71:fd:ed:de:71:9a:33:96:3e:9e:bf:
                    69:61:ff:46:62:d8:c0:ba:db:61:48:9c:3e:68:18:
                    78:c2:a9:8f:f1:e8:de:ff:e7:3f:b5:1c:62:35:e3:
                    04:ab:ba:2f:81:a2:2b:8c:8e:b4:5a:f7:39:5b:42:
                    40:8a:90:54:65:19:66:6c:7c:f3:34:51:ed:3b:1f:
                    d8:97:c4:d2:d2:12:ac:23:fe:2d:c1:f0:6d:58:7e:
                    1f:81:c9:c7:20:0b:fb:cf:5f:bd:1e:c7:6a:24:20:
                    15:d1:0c:db:09:e6:79:7a:71:c7:a1:0f:89:85:2e:
                    f7:b7:8f:0d:f0:ca:b9:7b:f3:44:21:85:7e:72:72:
                    1b:0c:13:0f:47:7d:3c:1e:59:de:77:01:98:32:f7:
                    52:68:22:0a:94:9a:dd:75:2e:cc:b8:ae:83:39:f1:
                    59:2a:8e:f6:d0:c0:ba:70:f6:23:bc:a0:1d:bd:14:
                    4d:e2:27:42:77:96:47:74:b5:a4:3d:48:a2:e2:86:
                    52:b0:c3:31:96:30:9a:be:c2:d9:bc:e3:17:39:54:
                    09:b0:82:12:ed:55:79:1b:ba:b9:a0:07:90:a0:46:
                    d8:6d:7f:af:f0:b1:2a:52:88:ea:b8:37:a6:23:65:
                    d2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E9:ED:7A:98:79:36:CF:9F:75:80:61:74:B1:3E:EF:56:36:48:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/4756446c-96ad-309f-b6b4-5601e968e103.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d/bc307e5d-cfa4-4304-8b29-ef289d4a387d.crl

            X509v3 Authority Key Identifier:
                keyid:EB:62:07:A4:44:45:33:61:8F:64:3A:0C:2D:1D:BA:B9:6F:6E:D1:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bc307e5d-cfa4-4304-8b29-ef289d4a387d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.147.211.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ba:92:24:25:08:39:2d:63:b5:da:b7:10:88:eb:27:a8:85:68:
         49:c3:02:71:83:f5:8e:c8:88:95:0f:8e:8a:26:c3:d8:80:b9:
         c3:1e:68:10:32:d6:ba:01:a9:91:de:33:74:02:7e:bb:da:93:
         55:99:69:c2:94:cb:92:46:c1:23:fb:f4:bd:8e:c6:4d:82:40:
         ea:6a:6d:f0:ac:3b:56:8e:27:17:6e:1e:44:a4:04:5d:d0:21:
         19:9a:7f:bd:c6:43:15:32:b7:a2:18:d0:bf:d5:f1:9b:17:35:
         99:39:07:86:b7:76:ba:c0:7f:52:5c:c0:3f:60:60:c7:d0:34:
         3f:40:53:85:ce:4d:c3:42:cb:53:ce:55:e1:35:51:d1:0b:d1:
         6b:37:b4:b2:16:0b:6b:2d:a7:0a:f8:0d:75:7d:aa:86:52:17:
         b1:99:d6:f0:3f:3c:91:96:68:fd:d6:68:47:c9:79:c2:72:e2:
         b4:ed:c0:f5:db:86:39:bb:34:80:85:1e:15:8d:a9:2c:22:7c:
         33:5f:68:17:2a:31:6c:99:7b:0a:25:10:58:e7:9a:f8:67:0f:
         32:58:6d:46:ce:18:92:32:a2:03:76:b1:7e:4c:4c:76:7b:bb:
         56:f6:26:8c:ad:1f:75:67:2d:7d:74:90:0b:d2:ea:bd:b0:58:
         57:3b:d7:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:11:34 2025 by rpki-client