Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa
File:                     713f68d8-8447-3185-ae18-2325ad6b61c4.roa (raw, json)
Hash identifier:          4B2WJawLGtDE50xW+7PTNpEoU8q/AqivmrszeVsETZU=
Subject key identifier:   0C:1D:5B:4F:A4:EE:57:7F:AA:89:62:A4:4C:EB:B7:4A:3F:F3:1F:91
Certificate issuer:       /CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
Certificate serial:       010D0C9F432858497C3EEE7902DBA79A03F32480
Authority key identifier: 60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa
Signing time:             Fri 11 Apr 2025 01:00:48 +0000
ROA not before:           Fri 11 Apr 2025 01:00:48 +0000
ROA not after:            Thu 10 Jul 2025 01:00:48 +0000
asID:                     18671
IP address blocks:        152.44.64.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7c:3e:ee:79:02:db:a7:9a:03:f3:24:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed
        Validity
            Not Before: Apr 11 01:00:48 2025 GMT
            Not After : Jul 10 01:00:48 2025 GMT
        Subject: CN=2c272925-42d9-4eb2-87ee-a74bd4222c03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ed:aa:2b:9c:23:95:c6:fb:2c:fe:bf:49:86:
                    08:9d:d6:57:14:9d:80:73:4a:c4:a9:a0:27:9c:d6:
                    d6:2e:b8:89:b5:89:6f:0e:b9:7b:d6:6b:e0:f7:37:
                    38:50:ca:c7:a0:67:04:66:6a:45:ba:8d:92:67:5c:
                    5b:f1:f0:03:b7:00:37:a7:70:2c:ef:a0:48:93:71:
                    c7:1f:8a:08:45:5e:98:c5:47:b5:df:3f:c9:dd:f8:
                    23:77:1f:8e:2e:cd:af:ec:20:d9:5c:ea:f5:b9:f8:
                    e9:47:54:b5:2c:cd:8f:47:e6:01:37:0e:24:68:ef:
                    16:a7:a2:32:e4:6b:43:ea:ff:e9:96:c5:87:e0:46:
                    b3:20:2a:ef:85:49:6d:50:8b:48:e2:9b:a5:81:fd:
                    3d:a3:ae:c6:cc:db:0f:04:82:6d:1a:17:6f:d2:0c:
                    1c:98:87:4e:81:ca:2f:b2:30:d7:30:5c:0b:7a:98:
                    ba:7a:e9:35:c8:f8:20:00:19:d9:43:a0:be:05:ca:
                    f3:f5:e1:4b:1e:ec:e8:4b:b7:31:d7:6f:1d:bb:78:
                    5e:4a:d1:3f:d2:7c:14:cc:79:fb:97:e0:25:e7:6d:
                    35:b7:6e:18:3d:38:7e:d3:81:dd:fa:d7:33:b8:92:
                    d4:e7:95:26:17:6b:b0:39:a9:09:7d:3b:54:32:96:
                    0f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:1D:5B:4F:A4:EE:57:7F:AA:89:62:A4:4C:EB:B7:4A:3F:F3:1F:91
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/713f68d8-8447-3185-ae18-2325ad6b61c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.crl

            X509v3 Authority Key Identifier:
                keyid:60:19:68:5C:12:1A:D8:CD:7C:C1:5E:BE:93:20:3C:47:4E:D0:EA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1026f2d5-b1fe-47f2-9d2e-0bb75a7b18ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.44.64.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:be:9e:f9:a2:f0:14:1f:33:4b:11:20:57:5a:15:84:5d:16:
         4e:0d:f9:fe:5f:aa:5b:cc:26:25:a1:69:a8:c8:37:4c:b4:1f:
         60:fc:d2:a0:5d:3a:1c:37:42:7d:64:e9:4b:15:01:16:d4:a4:
         d5:2b:f2:b2:e2:d6:0e:37:22:21:30:d6:8c:40:48:64:a6:26:
         cd:95:3c:51:eb:47:59:2b:ff:dc:4e:9b:14:bf:75:a6:79:7d:
         c4:55:ee:8d:24:81:21:03:f6:91:b0:48:e7:b5:3c:0f:1a:52:
         31:4a:7d:a7:93:51:ac:64:66:4a:b3:bd:16:6d:90:79:8e:47:
         5c:fe:e7:33:32:65:6f:25:6e:98:be:23:90:ab:b6:e6:d7:b7:
         d7:06:4b:ed:30:9f:48:93:86:8a:4e:38:de:d3:29:c4:71:de:
         13:f6:20:da:7c:87:ab:70:83:c6:9f:f7:66:11:2f:79:ef:0d:
         2c:b0:de:ae:06:ed:12:0b:e7:58:31:68:4d:7d:ff:5d:e5:c1:
         3f:c9:86:7d:eb:99:6b:ff:03:b1:d2:fe:54:76:bf:d6:7b:69:
         4b:64:53:43:e6:32:da:b7:5f:17:8e:00:95:23:bf:fe:4a:86:
         cf:d7:cd:88:9c:eb:d1:d1:c6:2d:f9:2f:e1:21:b0:a1:ea:5c:
         cf:fd:f2:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:52:57 2025 by rpki-client