Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
File:                     6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa (raw, json)
Hash identifier:          LMubmLnsIOyEvMt3gRtj1FGatuwV1JhXnL/Erqr9Ryc=
Subject key identifier:   61:60:66:F0:DD:A4:58:43:F1:4A:FF:4B:7B:8E:F2:01:78:C3:2D:49
Certificate issuer:       /CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
Certificate serial:       010D0C9F4328584957F402A9EC869F4B7C63DA40
Authority key identifier: 37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     398894
IP address blocks:        209.142.115.0/24 maxlen: 24
                          2620:98:2000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:02:a9:ec:86:9f:4b:7c:63:da:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78a2f9a6-28a7-4fb5-ba32-6f4af07c0026
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=8919b266-42a5-4c98-9f47-f66a1e923e92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:40:e5:56:db:85:25:5b:8a:a2:2f:6d:86:86:
                    25:f0:39:05:cf:38:f7:01:ba:5f:21:f5:f0:90:c6:
                    d6:f6:0f:81:a7:ea:54:bc:c4:14:b6:dc:d2:40:a9:
                    b8:ee:5c:00:fe:ee:18:01:25:3e:e4:f8:63:75:e9:
                    56:42:a3:79:85:1e:76:4f:7f:6c:ec:a4:34:b9:69:
                    31:25:3f:77:7f:fd:b5:cc:ad:86:4c:00:2c:51:c4:
                    8e:c1:d3:25:7e:18:c6:00:a3:ff:83:42:9e:99:45:
                    34:76:88:09:d6:d5:15:60:30:63:c0:e4:04:52:65:
                    dd:38:11:7c:e2:58:9f:b3:ae:b7:29:54:80:5e:a8:
                    2b:9e:2c:8d:8b:1b:69:80:cb:f7:e6:eb:97:17:7e:
                    08:5b:34:7c:1b:3f:1c:d8:fb:67:12:da:eb:aa:a3:
                    fd:b6:25:72:ba:06:c0:4e:e9:51:60:2d:42:8c:89:
                    77:ed:28:52:35:11:22:4c:8b:bc:5b:26:37:6a:1d:
                    2c:85:68:0e:94:2c:57:16:a4:19:b7:98:57:03:e5:
                    0d:53:6d:75:7f:26:b2:ce:85:89:39:46:4b:fa:c9:
                    0d:eb:14:f2:2e:a5:63:96:00:99:9c:07:84:27:70:
                    92:61:98:c4:37:c3:12:90:72:f5:33:7f:9a:48:5a:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:66:F0:DD:A4:58:43:F1:4A:FF:4B:7B:8E:F2:01:78:C3:2D:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/6f6c5775-f8c6-34cc-9d55-8e4694d5be7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.crl

            X509v3 Authority Key Identifier:
                keyid:37:A8:04:0E:9F:D2:37:72:00:94:6E:60:47:99:1C:96:40:CC:49:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/78a2f9a6-28a7-4fb5-ba32-6f4af07c0026.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.115.0/24
                IPv6:
                  2620:98:2000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:89:3c:11:94:c9:b1:a2:e3:96:94:8a:71:d7:a6:4f:57:11:
         2a:ae:6b:1d:60:fc:7e:d0:c4:30:cd:aa:05:de:ef:b8:38:69:
         0b:01:84:e2:e4:aa:70:09:b2:51:60:8a:3c:3a:ec:ca:a9:8f:
         a7:97:18:da:a8:b4:44:a7:20:fe:6e:dc:d6:d6:f7:9c:ca:1a:
         99:c6:ed:5f:7c:6f:cf:4b:d9:f2:da:3d:22:ca:13:64:0a:81:
         ab:81:90:df:12:97:04:ec:91:cc:a9:1c:66:77:ed:04:57:21:
         b2:b8:46:6a:11:35:74:4e:7c:fb:b3:64:52:dc:e7:ca:c5:6d:
         90:d4:8b:f7:60:1f:70:cc:b9:3b:48:39:54:3d:4a:0a:9a:5c:
         d9:72:5c:dd:7e:bc:9e:c4:6c:98:b8:d9:ad:e3:75:59:30:71:
         d3:38:f3:57:db:af:18:aa:1f:a8:0b:cf:1b:19:fa:c2:88:a9:
         db:e8:0c:3b:d3:4f:3e:a2:f6:04:12:15:36:38:bf:96:50:40:
         60:3e:7a:6e:41:95:cb:78:43:d2:0d:fb:f1:19:23:d8:36:2d:
         a8:0f:ba:af:74:bb:5f:15:aa:e9:97:3a:87:03:11:bd:89:97:
         4d:ab:dd:c0:81:35:73:7a:28:64:ca:dc:72:6d:c0:29:f8:45:
         c9:e8:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:48 2025 by rpki-client