Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/24db1b0b-d354-302a-9ad4-c99ef4594e5c.roa
File:                     24db1b0b-d354-302a-9ad4-c99ef4594e5c.roa (raw, json)
Hash identifier:          ER2aydcIXmu3vwXdSzh6U6tHcrkxEIUD+HuzOrRX1A8=
Subject key identifier:   5F:C3:02:94:19:53:A2:BF:DA:30:B7:5E:0F:F2:88:02:62:EF:DD:04
Certificate issuer:       /CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
Certificate serial:       010D0C9F43285848E16BEAE10B844344F30C0128
Authority key identifier: 1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/24db1b0b-d354-302a-9ad4-c99ef4594e5c.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        148.59.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:ea:e1:0b:84:43:44:f3:0c:01:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4548e87a-63de-4e11-92c6-0a2e1bc04dd6
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=7cbd58ba-078c-41ba-ae22-9000c616d39b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5f:65:13:0e:fc:84:e5:1d:29:e0:91:6d:27:
                    e6:41:5c:7b:90:ad:ce:bd:a2:27:d5:aa:f6:5f:35:
                    d3:68:9b:66:b9:2d:52:c4:86:2c:ab:7e:1c:86:11:
                    ce:40:6b:8f:90:99:91:f1:3b:14:3b:79:33:82:9c:
                    2e:26:11:97:9d:24:de:97:7d:00:44:53:90:ad:03:
                    cf:4a:bd:16:81:18:0d:59:95:45:b7:a0:6d:8b:2f:
                    9a:47:42:f0:dd:6c:10:4d:8b:8f:b3:ff:fb:c4:0b:
                    d5:12:fc:33:39:d5:39:c7:18:83:ff:8e:20:a7:c0:
                    a1:b1:43:dc:ae:db:85:e2:99:34:fd:05:5e:d8:0f:
                    92:ca:4c:7e:34:c7:dc:1a:e7:a0:1b:8d:4c:21:e4:
                    df:f4:00:fe:74:dc:0d:3c:78:5c:12:51:99:ec:6d:
                    9b:55:be:b6:b6:3f:78:e4:a8:cb:a8:6d:a7:4f:1f:
                    e5:fd:21:14:c4:52:9d:f9:6f:63:6e:c9:a6:c2:9e:
                    43:5c:78:98:4c:f4:3a:45:ba:13:c9:58:8d:5e:28:
                    b1:5b:07:5f:fe:a0:ac:27:78:cb:f4:6a:7e:42:3a:
                    90:95:3e:bd:a1:fe:f4:37:ea:9b:5b:d0:03:5f:c4:
                    3c:78:84:e4:f0:13:71:9e:a5:02:84:fe:0f:e7:88:
                    d6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:C3:02:94:19:53:A2:BF:DA:30:B7:5E:0F:F2:88:02:62:EF:DD:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/24db1b0b-d354-302a-9ad4-c99ef4594e5c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.crl

            X509v3 Authority Key Identifier:
                keyid:1D:C7:70:43:98:53:E7:89:75:FA:CE:D1:90:08:04:6A:7D:15:7B:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4548e87a-63de-4e11-92c6-0a2e1bc04dd6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:0c:79:bd:1c:34:5d:07:91:35:25:dd:ef:42:ab:6e:2f:f4:
         f6:85:39:fa:b5:b3:a6:de:54:9b:e4:4c:9b:05:0d:f6:51:25:
         b5:c5:0a:37:d3:c9:4d:d5:5f:16:bb:5b:d9:b2:4b:4b:9e:0a:
         cb:3f:09:74:27:93:c1:1e:cc:d6:5d:2c:0b:cb:17:e2:6c:74:
         36:89:e7:45:40:e7:70:21:c1:b4:59:5e:6a:a2:2f:65:3f:6a:
         d3:a8:c8:07:99:49:8b:56:f0:1f:f8:37:fa:cb:91:64:18:a1:
         88:ca:33:96:7f:1c:ca:d9:ef:bd:d7:7f:f3:19:7d:b7:78:97:
         87:58:f1:5c:1b:dd:e4:3f:8e:42:b9:ce:31:6e:ec:57:6b:dd:
         53:6c:64:c8:f4:8d:e6:13:c5:6e:18:7c:74:34:a5:44:1e:50:
         69:46:c4:dc:1f:4a:4d:46:84:44:ef:a1:63:01:51:29:11:32:
         29:ef:a6:ca:5c:6f:5e:48:61:95:1c:f0:83:3f:b0:f5:83:c8:
         6a:39:ff:62:1f:e4:b9:a2:f0:6e:53:fa:e3:68:95:09:d2:6d:
         5a:b7:7f:08:17:f8:40:d3:60:1b:65:fd:6f:8c:27:98:64:e4:
         59:5b:09:63:29:74:ec:1c:2e:db:46:65:4c:d2:c8:cc:9c:49:
         b7:91:b8:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:52:39 2025 by rpki-client