Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/a7532514-90f3-3a47-9b58-e1ce7e9f923a.roa
File:                     a7532514-90f3-3a47-9b58-e1ce7e9f923a.roa (raw, json)
Hash identifier:          maSCogfXutw9xxQ8DBeW0GApxABRNgbJmv2G9Vfgbwg=
Subject key identifier:   E5:62:70:03:A0:96:CA:41:60:53:3A:9C:F8:79:50:63:9C:B4:0D:3F
Certificate issuer:       /CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
Certificate serial:       010D0C9F4328584898D60C997A8E949C1E81C4A0
Authority key identifier: 72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/a7532514-90f3-3a47-9b58-e1ce7e9f923a.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     27539
IP address blocks:        69.26.8.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:0c:99:7a:8e:94:9c:1e:81:c4:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=464a5304-974d-4c86-9829-2f4d8dc9b9b6
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=06bf6102-8914-444c-885c-8bf03bfcd050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e8:7a:11:d4:07:9f:18:f2:43:46:6e:42:e9:
                    bf:c4:19:46:49:0f:d6:e4:60:f7:40:70:e7:d7:a4:
                    85:4a:27:bf:26:82:8d:c9:5c:13:ed:1c:b9:06:03:
                    0e:ce:9d:26:5c:e4:3a:37:3f:3c:64:6b:c6:4b:35:
                    0b:e9:d4:29:56:29:74:d7:79:be:fc:89:41:80:44:
                    7a:68:e1:ce:3c:50:d1:2f:c2:68:3b:0c:11:bb:90:
                    ae:1b:62:4b:8a:38:8c:9b:a0:89:9c:1a:30:66:81:
                    2d:02:59:c6:91:0e:10:03:b3:57:9f:3b:af:59:ac:
                    19:14:27:c7:5c:81:01:af:32:b5:60:ac:82:d4:a9:
                    ed:c8:f0:1b:70:3e:4d:37:2b:06:32:7f:41:78:43:
                    de:45:0b:6a:aa:85:e7:7d:99:26:e5:30:dd:96:a3:
                    25:ca:40:f6:80:2f:9e:0e:3f:86:b2:3d:7d:25:2b:
                    b2:21:2a:24:32:ab:8a:90:a2:dd:fa:6b:fc:7f:b0:
                    50:51:f2:40:6e:bb:5a:0a:1f:0c:9e:1e:21:92:13:
                    47:04:1d:e2:4a:77:66:1f:45:5c:d3:3b:27:c2:b6:
                    d6:91:7f:b7:ad:e4:89:06:a7:be:cf:b3:91:0a:d8:
                    ae:81:b8:30:73:98:eb:fa:32:e9:23:a3:91:3d:ec:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:62:70:03:A0:96:CA:41:60:53:3A:9C:F8:79:50:63:9C:B4:0D:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/a7532514-90f3-3a47-9b58-e1ce7e9f923a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6/464a5304-974d-4c86-9829-2f4d8dc9b9b6.crl

            X509v3 Authority Key Identifier:
                keyid:72:07:A6:10:FC:33:25:75:21:16:48:2F:A4:4F:6D:D6:D5:77:30:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/464a5304-974d-4c86-9829-2f4d8dc9b9b6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.26.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:4f:1c:38:f2:53:08:e2:d2:50:20:57:7e:98:17:71:bb:e4:
         d4:20:c4:78:09:9a:cb:41:3e:aa:dc:11:42:d9:82:f1:62:b4:
         34:23:98:9c:c4:02:b5:6c:ce:c6:f4:b1:40:f2:f0:3a:f9:e0:
         bb:4f:89:0e:78:de:69:9d:34:5d:c6:9b:76:ee:84:0d:76:ee:
         05:1c:64:ef:9f:e9:96:e4:ac:f1:56:d0:63:3f:20:9f:85:4d:
         34:72:16:2b:76:51:80:83:3e:e4:f4:9f:5a:8e:d9:01:f4:03:
         b2:52:4b:2b:61:4b:8e:c5:40:9d:bf:32:52:70:94:b1:22:76:
         9c:bf:76:c0:4a:b3:04:45:3a:0c:7b:8c:76:f6:71:ea:6d:43:
         a7:82:fe:0d:54:d8:1c:c2:be:bd:a4:49:4e:61:c4:3e:d3:53:
         27:d7:ce:f6:fa:bf:0e:7f:d0:11:ce:50:47:15:1c:62:d4:9e:
         52:e0:60:7b:83:24:33:89:63:f9:b4:f4:e1:eb:5f:ba:1f:e3:
         4e:97:26:94:22:7a:73:59:6f:cf:ce:4c:4d:cd:23:81:5c:8f:
         0a:44:1e:b9:9a:00:a8:f9:4c:f6:27:d7:f5:f7:96:f3:d3:e1:
         6c:4a:6e:0c:08:9d:68:de:b8:17:ec:0d:8e:82:63:aa:26:a9:
         a7:9b:e1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:11 2025 by rpki-client