Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e56e51f-7f78-388a-b9b3-6d961373638c.roa
File:                     4e56e51f-7f78-388a-b9b3-6d961373638c.roa (raw, json)
Hash identifier:          ai1c9nHkI3CRt3rTuIAUasYKmdgZk/o2+SaFnfu7mao=
Subject key identifier:   11:0A:14:11:2F:A5:2A:23:C8:58:4E:33:88:1A:43:84:17:B4:22:50
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E89870F137C1DB2466C40
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e56e51f-7f78-388a-b9b3-6d961373638c.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     6559
IP address blocks:        204.84.226.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:89:87:0f:13:7c:1d:b2:46:6c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=085a9ef4-8365-4484-a093-e96a784db660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:94:97:2a:8a:63:0c:30:d7:90:85:75:32:7f:
                    eb:98:45:62:ec:e7:18:d7:79:6e:2a:3a:ff:4f:2e:
                    68:c5:c4:6d:42:a1:86:21:39:44:ff:58:cb:69:6a:
                    c6:86:44:e0:a5:51:44:fb:ff:d8:ca:cf:4f:ca:4b:
                    7f:e2:74:55:d5:2c:68:0a:9a:c0:76:32:a9:50:99:
                    92:83:a0:5c:c5:8c:5f:dc:f9:17:73:ea:37:cc:1b:
                    bc:a6:bf:88:da:08:92:37:41:87:48:da:a9:a0:6b:
                    1c:41:9b:09:a0:98:b2:28:27:74:f5:0a:d1:5e:bc:
                    c7:84:12:06:d0:93:df:e2:2b:33:e6:90:77:6e:71:
                    65:eb:f2:83:8f:eb:da:fe:46:b1:c5:60:b2:85:8b:
                    53:fb:18:07:0a:74:7b:06:87:cb:3f:6c:31:36:7d:
                    53:d2:04:06:70:ab:a0:9c:7f:48:82:13:d4:11:e0:
                    c9:a8:5a:7d:c3:81:0a:03:34:4c:32:2f:02:f8:c7:
                    7e:fb:18:f7:dd:5c:ed:3f:3a:ae:c5:f3:89:a0:bd:
                    e2:74:11:62:57:25:af:0d:26:1d:85:49:e5:c9:2e:
                    7f:28:31:60:b6:03:ff:ee:10:4c:82:f5:2c:5e:a7:
                    2b:03:e0:8a:2b:a0:9e:63:bd:8f:72:5f:a3:52:ef:
                    29:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0A:14:11:2F:A5:2A:23:C8:58:4E:33:88:1A:43:84:17:B4:22:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/4e56e51f-7f78-388a-b9b3-6d961373638c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.226.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:4b:d1:d6:35:e1:f8:64:3b:f7:3e:ad:95:ca:50:e5:e6:78:
         5c:c6:7b:76:ce:0f:ea:e8:fe:87:4b:82:61:34:2c:da:eb:42:
         55:a8:4c:d2:b8:e7:95:16:e9:f4:ec:5b:4b:48:2b:2e:10:f9:
         03:b2:1a:ce:e0:7f:8f:ca:c1:20:0b:2b:75:bd:92:bc:65:ca:
         f2:29:0b:d8:af:74:fd:51:83:78:12:c4:c3:40:53:e5:66:1f:
         d2:35:d5:27:08:80:a6:be:4d:79:a8:28:0a:f2:57:cc:e5:e5:
         9f:3c:1a:87:2a:2c:53:1e:a9:4d:72:65:91:63:a9:a1:5a:61:
         44:56:f1:49:dc:5c:2c:7f:47:1a:c9:8f:8a:5a:66:5d:0d:07:
         f4:71:2a:49:96:bf:32:c7:ef:87:9f:4d:ef:94:b1:a6:b0:cc:
         e3:d7:53:a8:f0:32:79:d3:dd:5b:af:70:ec:18:f3:33:bd:e1:
         2c:57:0a:b1:16:44:8c:50:7f:5b:cb:6f:0b:e6:b5:c5:7c:10:
         d2:d8:86:3a:bd:01:2b:69:66:34:f2:6a:c7:da:30:7b:b8:62:
         b3:3e:ab:10:45:24:fb:ad:36:1b:ff:85:c4:ab:08:d6:1b:04:
         7c:9b:6e:78:09:9d:70:1d:e0:96:11:66:cb:ba:ce:ce:82:e8:
         4a:a4:5f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:01:05 2025 by rpki-client