Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa
File:                     d79224a4-7b5d-35e9-8833-a5152ff6818c.roa (raw, json)
Hash identifier:          x//SYkjtuFEVc0u8Bo72e33P3kaCLAx9zws8WDNVx9I=
Subject key identifier:   FF:D3:57:5F:4D:28:AC:DD:FF:E4:B9:7B:8E:56:FD:4F:F7:5E:50:61
Certificate issuer:       /CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
Certificate serial:       010D0C9F432858493B52DC5F3B63D1CA7D71D380
Authority key identifier: AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa
Signing time:             Tue 18 Mar 2025 18:53:28 +0000
ROA not before:           Tue 18 Mar 2025 18:53:28 +0000
ROA not after:            Mon 16 Jun 2025 18:53:28 +0000
asID:                     23294
IP address blocks:        76.165.32.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3b:52:dc:5f:3b:63:d1:ca:7d:71:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ab53067-4493-47ab-bcf2-7fa9ad46579c
        Validity
            Not Before: Mar 18 18:53:28 2025 GMT
            Not After : Jun 16 18:53:28 2025 GMT
        Subject: CN=feae579e-ffbf-4f13-89ae-d6d13878aae1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:71:29:6e:49:ec:eb:61:74:f3:40:4f:80:95:
                    94:27:ab:12:0f:2c:f2:4b:7e:05:ce:96:9d:9c:81:
                    15:7d:a5:ae:a2:70:72:d5:54:a0:32:c7:60:d8:6e:
                    14:21:19:1d:e9:91:d0:8f:e9:e4:88:0a:df:47:a4:
                    1e:1b:bb:73:cc:61:56:2e:21:9a:75:a4:64:b2:1e:
                    ee:91:e6:de:18:10:00:ea:83:5a:3c:d0:e0:4f:b8:
                    ab:c6:18:61:ad:62:bb:8d:74:a2:e6:09:43:61:90:
                    7e:45:5f:1a:9a:59:41:94:88:6d:a7:15:ee:8a:a4:
                    e4:e7:97:13:d5:c7:aa:5c:d8:a0:f7:09:ef:ff:2a:
                    08:ba:06:e3:77:a4:b7:4f:93:96:20:46:82:f3:26:
                    13:71:4b:4b:85:0d:7b:e6:b6:bc:94:49:ca:7e:f5:
                    09:fa:43:46:22:38:0f:2c:d2:fe:27:12:a3:44:a6:
                    fe:7d:f8:c6:4d:7c:12:7d:dd:55:af:0b:ef:8f:7a:
                    32:0b:69:96:d3:ca:58:fb:8a:5c:54:1a:3e:94:f1:
                    65:33:c0:0c:57:0e:5c:4b:f9:b7:65:c2:f1:60:d8:
                    bc:c8:ef:d8:fd:6f:44:12:e6:4b:b9:36:63:08:7a:
                    b7:e8:23:76:f8:80:ed:9f:22:6a:ab:cc:4e:c9:2b:
                    54:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D3:57:5F:4D:28:AC:DD:FF:E4:B9:7B:8E:56:FD:4F:F7:5E:50:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/d79224a4-7b5d-35e9-8833-a5152ff6818c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c/4ab53067-4493-47ab-bcf2-7fa9ad46579c.crl

            X509v3 Authority Key Identifier:
                keyid:AE:FD:6E:3F:D6:AE:31:B2:0C:6E:7B:C6:38:A5:2F:3A:28:53:4B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4ab53067-4493-47ab-bcf2-7fa9ad46579c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.165.32.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:57:36:14:3b:d6:15:18:3a:d1:d7:93:b5:2d:ba:e5:ac:a6:
         c3:8e:5a:d4:0c:b5:02:ce:3d:ef:3a:a2:33:6a:e1:e0:6e:a9:
         be:b4:83:19:66:5f:8d:3a:28:e4:66:ae:19:ff:25:04:82:3e:
         de:e4:72:e6:4d:e6:37:1f:80:04:39:91:43:3c:a4:5e:d8:2c:
         78:a4:db:8a:83:eb:c6:e0:b9:77:5c:31:b3:ba:ba:bd:e3:40:
         68:6d:cb:d2:81:40:10:83:d0:2c:56:0c:1b:e0:9a:10:87:74:
         32:dd:8a:da:99:25:9e:c1:ef:b4:ae:a5:fd:99:23:53:a0:7d:
         80:97:d1:f5:5a:38:67:ab:f5:cf:51:6f:b9:70:20:ae:41:2a:
         53:d8:6d:fc:db:c4:8c:ad:43:fa:b5:e3:32:74:b0:18:73:6f:
         a6:e2:a2:db:44:8e:6e:f0:13:05:a6:9d:05:c8:f7:31:48:57:
         42:48:72:0d:3e:49:28:d0:cb:04:d3:f3:22:a3:5e:d1:45:90:
         fd:c1:23:1d:5c:ce:61:be:03:4f:6a:08:2e:5d:d9:fc:64:bc:
         3b:69:26:92:75:58:ca:b3:2d:af:bf:95:8e:d5:4a:f9:23:46:
         c4:d0:fe:34:54:e9:10:bb:75:de:3b:e5:1a:d5:e7:cf:43:5b:
         2b:07:6b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:40 2025 by rpki-client