Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa
File:                     aad98796-ff30-3d3b-8235-4fd483024c72.roa (raw, json)
Hash identifier:          gYzUSbRwOB9KZCnzAwA7LdRtxLUqAEv2nrKf9Fbg45w=
Subject key identifier:   98:C0:07:C5:90:BC:BD:F4:1F:8A:7C:F5:C4:B8:CA:4A:BD:13:3C:6A
Certificate issuer:       /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial:       010D0C9F4328584961B9973A5F635113359E7DC0
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     12083
IP address blocks:        50.4.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:97:3a:5f:63:51:13:35:9e:7d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=9d8bfac2-0329-4e5f-8fc0-bc5bd030ff3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ef:13:ab:62:65:96:c0:95:7f:62:76:9a:f0:
                    3d:8c:ad:4a:08:ce:cd:11:b9:1e:88:b2:37:04:af:
                    30:e7:f9:2b:be:8c:2f:61:e5:d2:8f:3b:35:13:5e:
                    ed:39:d2:9c:de:7e:2a:34:f0:40:cc:17:91:cd:7c:
                    c6:19:10:09:d3:cf:5d:f7:3a:13:84:37:c2:41:53:
                    79:77:2c:8f:f3:1c:39:30:3b:7f:36:71:35:4a:81:
                    59:39:51:2b:f3:d0:b5:eb:8d:6a:c7:b2:2d:c4:3c:
                    fc:52:ec:ce:c6:e6:22:ab:c4:76:cb:57:5f:32:83:
                    4b:3b:4c:60:f9:0b:69:82:23:8d:9a:aa:77:ad:80:
                    76:de:b2:40:b2:f0:54:28:33:c0:e7:e1:b2:ec:5a:
                    e0:0a:cf:6b:6b:8a:2f:1d:98:f7:b0:16:53:d8:3c:
                    ce:43:96:53:ec:bc:40:04:49:a8:d0:ac:ec:e3:31:
                    63:50:e9:2c:dd:2f:0d:62:62:e6:41:41:2b:25:c6:
                    62:4b:a4:e8:3f:4c:87:8c:4a:a6:01:d3:6a:37:2e:
                    85:75:73:fa:3e:38:54:b6:65:8f:dc:cf:94:ce:f1:
                    16:ce:78:f5:b4:4d:70:1b:e6:c6:7e:bb:0a:35:df:
                    bf:42:b5:b7:41:88:97:35:43:58:27:05:2c:0d:0b:
                    2f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:C0:07:C5:90:BC:BD:F4:1F:8A:7C:F5:C4:B8:CA:4A:BD:13:3C:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/aad98796-ff30-3d3b-8235-4fd483024c72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl

            X509v3 Authority Key Identifier:
                keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.4.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:ce:8a:95:a0:ed:aa:43:e0:72:de:1a:f2:79:24:92:de:da:
         d3:1d:81:22:cf:d9:f6:4b:ca:87:21:92:01:a9:75:7a:bd:da:
         24:1c:2b:3d:a7:8e:12:12:a4:d9:d7:e1:0d:56:f6:84:89:e8:
         42:9a:bd:af:e0:c4:84:17:d9:ba:55:82:b6:f8:62:9b:a0:b2:
         4b:96:84:86:a8:67:af:07:8e:8f:bb:e5:25:b5:fd:4b:51:53:
         b9:0a:28:35:99:55:5e:a1:39:74:94:33:80:df:84:2c:3e:c8:
         bc:96:dd:4d:69:01:fb:40:f1:98:66:3a:c0:d4:f3:29:f3:21:
         84:3b:47:7d:5f:6f:2b:21:90:2c:4c:03:1f:81:7b:b0:ad:53:
         46:ba:53:aa:2d:d7:53:44:7f:18:09:cf:8e:15:21:86:7f:33:
         21:b4:f5:02:4d:03:68:78:f7:64:0e:4a:00:17:f9:95:3a:b5:
         27:32:5f:1e:cc:d2:e9:e4:40:55:0f:ad:9c:f8:33:df:bd:30:
         1e:e2:3e:53:58:f5:df:15:d3:c1:10:ed:b7:36:26:c6:cb:f4:
         67:ab:f0:35:19:ab:61:e5:13:01:0a:4c:00:c4:48:99:43:5a:
         8e:be:ed:64:91:88:70:41:e5:63:af:bc:65:e7:0e:61:75:ab:
         c6:76:cb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:54:39 2025 by rpki-client