Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa
File:                     5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa (raw, json)
Hash identifier:          5jlJ84iyxsTPDqYxDRhRhuPnsF6BjmojQFcJs2zbVDs=
Subject key identifier:   06:53:F2:F8:E2:46:47:72:85:D9:56:A4:C7:47:41:65:0F:9B:47:AE
Certificate issuer:       /CN=69df89b1-6446-4f76-b802-330eeb5819c6
Certificate serial:       010D0C9F43285849350E99C9187AE96CE1C99200
Authority key identifier: 3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     1706
IP address blocks:        199.104.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:99:c9:18:7a:e9:6c:e1:c9:92:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69df89b1-6446-4f76-b802-330eeb5819c6
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=54877c8d-c59c-427d-9de2-745281c66559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:50:45:68:45:cd:3b:4b:f7:fc:f7:9e:0f:e7:
                    17:a2:38:2b:2f:bc:28:2c:e0:10:8f:40:f1:eb:5b:
                    cb:dc:7e:46:29:f9:61:85:17:3f:05:e8:34:49:d1:
                    ec:fe:79:1c:a3:cd:d3:00:1e:2e:2c:e7:11:c1:11:
                    ad:e4:3c:81:ff:48:cd:5c:cc:ea:7c:5f:ed:e0:57:
                    6d:3b:76:da:23:b3:8b:a0:5c:27:6c:f5:fa:12:de:
                    73:cd:52:b7:94:d6:c0:a5:fc:05:ab:20:7d:82:a8:
                    d9:07:9b:71:0e:0a:80:8c:32:20:55:6e:d4:33:e3:
                    22:9e:fa:ca:05:66:8f:12:98:68:f9:79:f1:a3:08:
                    8d:c3:5b:19:d8:66:63:26:f0:26:4d:46:aa:ef:08:
                    9c:14:4a:50:46:bc:55:f2:d6:65:a9:ec:d3:4b:a9:
                    cd:07:19:88:6a:54:9a:eb:80:94:b9:c3:dd:b1:d2:
                    c6:98:fa:c8:db:cc:36:54:a2:f4:eb:7e:6a:62:70:
                    2f:17:d2:6a:08:4e:39:e3:07:bf:a0:f1:c6:e0:75:
                    9a:77:8e:23:af:16:3a:15:61:e0:02:7e:83:8c:e4:
                    38:4d:17:9d:96:45:78:13:8d:e4:9b:56:2f:71:bf:
                    02:e6:af:3e:a5:24:b3:5a:bc:59:5d:2d:89:65:80:
                    5c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:53:F2:F8:E2:46:47:72:85:D9:56:A4:C7:47:41:65:0F:9B:47:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/5fa31f17-55ad-3ffe-818c-0d807111b1e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6/69df89b1-6446-4f76-b802-330eeb5819c6.crl

            X509v3 Authority Key Identifier:
                keyid:3D:58:6B:3F:CD:66:47:01:3A:08:98:AC:85:EF:91:BE:74:EA:AB:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/69df89b1-6446-4f76-b802-330eeb5819c6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.104.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:76:3b:df:56:ff:c0:7e:93:39:1f:d4:3b:3d:9c:8a:92:87:
         49:47:19:f3:2a:f5:2e:2b:34:03:b5:8a:5c:38:d4:33:19:18:
         42:13:90:f1:13:4a:b2:c0:ae:8a:03:5a:a1:b2:13:35:59:db:
         b3:00:f0:13:3a:56:e9:55:55:b1:11:c7:8b:e9:c3:18:92:b6:
         72:a6:11:e2:45:29:91:8d:27:66:52:5b:5b:f8:d3:c6:3b:5a:
         0e:3e:98:72:63:6e:44:92:87:cd:98:d2:a4:d9:d2:2f:c6:e5:
         f9:25:35:86:2d:15:aa:5a:25:3f:c8:3b:a0:d1:bd:f8:d6:84:
         84:0b:70:70:f5:80:9e:a0:a5:45:ba:e1:bd:60:f6:2d:7b:2c:
         8c:0f:59:e6:d9:5b:49:70:45:99:fa:78:b4:f5:ba:a2:b4:85:
         d4:d8:d0:45:af:4e:89:e2:2d:7e:e5:50:75:ee:c0:24:02:46:
         80:4b:33:97:e2:21:f2:d1:0b:ad:c1:4e:31:76:88:67:b6:c3:
         c6:67:45:04:57:c4:47:ed:a7:57:24:fe:bf:5d:16:af:8c:2c:
         59:46:49:64:5e:fb:d2:a0:2b:41:bf:8f:32:33:73:69:76:dc:
         a6:7c:87:c1:91:dc:91:ac:cf:ea:3f:e1:d0:b4:9b:d9:93:92:
         32:5a:76:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:03:54 2025 by rpki-client