Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
File:                     cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa (raw, json)
Hash identifier:          PsaEPuYyAvZy/TFN8U59HsJJd6tFLZ0LPN7mVJO322o=
Subject key identifier:   2F:D1:70:94:89:7A:DA:43:E5:D5:AC:23:48:9E:7A:A0:28:5F:BD:6A
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584919417EBEE93FFEE856DA9C00
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     22110
IP address blocks:        64.184.32.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7e:be:e9:3f:fe:e8:56:da:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=5ebdeda8-c51e-44ea-9b17-e2ea6b600512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:c2:31:0f:a5:26:ee:d4:aa:4b:30:39:36:
                    6c:70:84:c9:6b:c6:9a:5d:6f:c0:19:9b:86:66:10:
                    d8:65:14:a6:28:8b:d1:36:44:61:73:b8:be:e6:95:
                    df:8c:6e:60:ea:6e:5c:f0:08:0e:0a:55:ab:ad:97:
                    94:06:03:bf:4a:9d:76:e6:70:83:3b:e0:3b:44:04:
                    89:75:ee:d5:df:82:4b:32:24:3b:4a:9a:5e:2d:c4:
                    34:ec:5e:a1:17:c3:0b:74:a8:0d:59:24:0f:a7:3a:
                    8b:aa:27:30:a8:77:cb:e1:24:75:82:fe:cb:a4:a7:
                    b8:f9:36:71:3e:18:c9:4e:d3:f0:22:b1:8f:77:80:
                    ab:ab:8e:1c:3c:cd:53:fe:39:90:d4:9e:34:81:d3:
                    65:8e:8b:39:51:e6:ed:3d:3c:73:1f:9a:f4:f0:5c:
                    49:86:15:82:e4:fc:37:c8:84:b2:57:be:2d:c7:b4:
                    93:3a:74:4f:d9:2c:0e:4c:ca:e9:6d:e7:09:96:7f:
                    58:cb:40:99:82:c5:fb:da:da:4f:d9:a2:15:32:06:
                    d1:74:e2:fc:1e:d8:ed:ff:4e:4d:be:ad:f2:23:63:
                    85:25:f1:3b:2a:d1:51:a6:d1:96:d8:8e:1a:18:37:
                    ae:f3:dc:14:96:4c:8d:80:fe:22:3b:e6:c8:12:6c:
                    e3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:D1:70:94:89:7A:DA:43:E5:D5:AC:23:48:9E:7A:A0:28:5F:BD:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/cbf94e4c-bf85-3cfe-8112-fa372df1ae6c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.184.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:9c:ec:db:f9:fd:3d:03:7f:21:4d:27:2d:0a:8e:da:a5:fd:
         e8:c8:61:00:dd:10:62:3f:bc:f6:3f:1f:93:c8:13:6e:7e:5f:
         66:3f:69:fe:c6:41:a0:52:b2:ec:d1:3d:f6:db:e9:8e:f9:ee:
         b9:93:1e:d9:fc:c1:6a:7c:11:81:28:5d:64:41:91:b8:8a:de:
         50:e1:ef:61:a9:15:24:ca:a3:48:94:6e:b2:fe:12:82:7b:43:
         14:17:57:60:b5:4a:d6:9f:9a:ea:a2:88:64:0a:21:89:9a:39:
         12:6e:25:5f:a6:82:dd:af:2a:59:a3:3e:05:ba:72:0b:66:aa:
         21:ed:da:f9:06:56:96:7e:b0:b9:97:28:3c:8d:25:4b:a6:23:
         c3:9f:90:95:89:9c:6d:ac:54:74:f3:59:4e:1a:f3:ea:9d:de:
         87:4c:31:e2:25:1a:57:3e:e9:76:95:13:8d:98:d7:90:5e:76:
         b4:85:00:6c:b2:79:c6:3b:a8:f7:d4:4b:d6:de:0c:f4:bd:d8:
         17:85:68:8d:4d:ec:4a:0a:4d:8a:88:90:b0:b3:5a:23:0b:ba:
         cc:ad:c1:ab:d3:92:29:e5:5f:92:1f:38:91:27:8c:59:f6:75:
         4c:06:8b:9b:fa:a7:36:1e:a9:13:e2:d4:4b:a2:01:b3:00:81:
         f1:af:c7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:08:51 2025 by rpki-client