Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
File:                     8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa (raw, json)
Hash identifier:          oqMBuYG3mREc0Nwj/psUqES/1jU2jmKyeHF+oI/0NwA=
Subject key identifier:   83:8C:B1:8A:09:DB:BD:3C:A0:19:DC:2A:5D:15:66:49:F3:61:56:9B
Certificate issuer:       /CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
Certificate serial:       010D0C9F4328584921840C3891ABCB4477997E00
Authority key identifier: 2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     20277
IP address blocks:        23.155.40.0/24 maxlen: 24
                          2602:2eb::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:0c:38:91:ab:cb:44:77:99:7e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d6bbef3-ee9e-47e1-8865-b0b861ae1d80
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=cbcd44b4-9824-4b04-9089-639c2dde313a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:bc:72:09:13:79:49:f7:83:6d:a1:8a:ad:
                    e3:c2:d2:d8:3a:5b:19:1e:dd:72:b5:9b:4a:d0:ab:
                    3b:ca:b1:20:53:64:1a:dd:39:ed:cf:af:df:1d:c5:
                    de:3a:23:5c:53:35:9c:e1:ac:67:69:cc:35:7a:57:
                    73:f2:18:7e:63:1f:03:60:cf:e8:ec:16:3d:4e:34:
                    db:e5:3e:a1:a2:1e:0b:4d:fa:3f:c2:99:57:ec:3d:
                    2e:60:9f:93:92:e0:64:bf:0c:9d:de:2e:f4:6a:c6:
                    ab:50:67:be:c2:a6:f1:d1:2c:85:b8:ed:a7:9d:78:
                    df:1e:b8:90:31:4e:1d:4e:b4:a9:2a:7c:3b:04:1c:
                    89:b9:43:e6:c0:f7:a8:08:02:1f:3a:94:52:f9:b4:
                    d6:96:3e:37:be:44:9b:45:fe:a4:eb:51:ef:af:b1:
                    a8:cd:fa:4f:b9:dc:1a:c3:e8:0a:a7:a8:a9:ba:ba:
                    de:e6:a4:3a:dd:ee:0a:5a:11:fc:fe:0c:80:90:cc:
                    35:ab:f0:7d:06:2b:25:ea:a3:eb:95:6e:34:ef:84:
                    41:18:a7:b3:c1:c9:66:64:42:a1:ea:73:35:86:d0:
                    8b:b7:0a:ac:17:9f:76:99:81:04:e8:83:ca:a4:41:
                    fb:ef:10:a3:49:96:51:a2:16:8f:0f:7c:1e:ec:72:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8C:B1:8A:09:DB:BD:3C:A0:19:DC:2A:5D:15:66:49:F3:61:56:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/8fba3b46-2555-3f9e-aae9-f83ca3a5f549.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.crl

            X509v3 Authority Key Identifier:
                keyid:2C:5A:5F:CA:70:2A:F7:AB:AD:EE:66:73:1A:26:0B:66:11:6C:BE:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9d6bbef3-ee9e-47e1-8865-b0b861ae1d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.155.40.0/24
                IPv6:
                  2602:2eb::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:0d:a3:19:a3:e9:53:d1:9f:a5:9f:b6:4c:7c:2b:6c:71:4c:
         ed:59:e2:2a:bc:c1:13:a4:74:ba:0d:38:31:a8:d5:1e:3d:4c:
         45:69:35:70:06:61:6e:98:28:bd:c7:90:42:9c:4a:aa:5a:fb:
         9e:c8:9f:57:59:c1:ce:83:d0:d4:6e:60:82:ee:7b:fd:89:cd:
         eb:cd:29:db:d3:20:54:13:fc:92:35:fd:c4:13:f2:b8:84:0e:
         7e:e4:61:d5:a7:ae:ca:bf:06:1d:75:7f:d6:1e:dd:97:1a:d0:
         15:fd:91:b1:e9:60:37:3c:b4:56:48:f5:7a:90:65:02:53:ba:
         e0:66:f0:62:b7:1c:bd:08:87:49:61:7e:10:bf:5b:11:0a:dc:
         3e:8c:fe:b7:be:a5:22:67:a4:ec:a4:67:87:02:54:1b:15:e0:
         41:e7:fd:fe:ff:d2:9b:c9:c3:bd:d8:fc:34:80:41:a2:89:1f:
         00:8b:3b:c0:b1:61:e7:d2:e7:82:10:7f:bc:89:92:38:3c:94:
         31:6a:34:60:69:35:b9:cb:70:65:57:ab:15:4d:75:3f:52:2f:
         14:18:6c:6f:21:56:a0:83:72:eb:67:84:d4:26:f5:21:80:5c:
         6d:41:28:19:ef:68:9f:03:c9:a8:12:a9:04:8b:51:a7:d2:d7:
         0d:43:99:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:47:22 2025 by rpki-client