Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/48874942-0e05-3fd9-a468-61738008870a.roa
File:                     48874942-0e05-3fd9-a468-61738008870a.roa (raw, json)
Hash identifier:          MENnLMhqr7I+IMKA70/Sor74WVL7b/TDPj7JXo77Hn8=
Subject key identifier:   01:F9:73:0C:FB:CA:0E:C7:AF:D3:EF:0E:9A:CE:B8:72:EE:D1:A3:F0
Certificate issuer:       /CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
Certificate serial:       010D0C9F432858497974452DE74A0A41076C4AA0
Authority key identifier: 91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/48874942-0e05-3fd9-a468-61738008870a.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     36097
IP address blocks:        198.133.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:45:2d:e7:4a:0a:41:07:6c:4a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=803d96a6-616e-46c1-8bc7-2a9aa977f088
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=bc163e2a-01a0-43ec-8512-127720f6ffc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:b3:b9:78:ba:a1:f0:94:d5:66:55:e4:7d:d6:
                    8b:6a:13:37:4e:45:52:af:db:ec:96:86:2d:b5:db:
                    13:df:84:3d:eb:51:ea:bf:00:f0:98:6c:1f:7e:43:
                    78:1e:44:3c:54:df:60:7c:f2:84:d6:97:28:02:49:
                    ee:f0:f1:dc:eb:07:53:c5:28:af:74:13:69:34:c1:
                    84:bc:80:87:46:8c:0b:e5:bb:1e:98:57:96:84:27:
                    e6:b7:e2:6c:95:f1:7f:e3:38:fd:0e:78:e3:09:69:
                    36:9f:64:c4:27:c3:91:e8:90:1b:7b:04:3f:84:17:
                    3d:50:d9:62:e1:2b:ca:69:db:84:9c:39:db:7d:cf:
                    65:8a:0e:74:91:62:bd:f3:4e:cc:76:f0:22:7e:42:
                    41:ac:eb:33:f6:8d:fd:4b:af:a4:a5:f2:9e:2c:be:
                    89:52:6e:fe:7b:9a:b5:fe:2e:cd:90:0d:7f:40:33:
                    14:15:1e:d9:a1:e2:da:2a:4c:01:64:87:c0:42:73:
                    a2:96:72:98:33:07:6e:a1:bb:e4:56:7d:bc:7f:14:
                    0f:d1:f5:89:1e:88:de:48:d4:8d:17:61:c4:71:f7:
                    82:61:d5:b4:bc:d7:4c:0c:b5:ae:ff:3c:d1:b0:9b:
                    92:6e:e1:43:76:25:46:42:f4:c4:62:22:79:a6:7d:
                    58:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:F9:73:0C:FB:CA:0E:C7:AF:D3:EF:0E:9A:CE:B8:72:EE:D1:A3:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/48874942-0e05-3fd9-a468-61738008870a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088/803d96a6-616e-46c1-8bc7-2a9aa977f088.crl

            X509v3 Authority Key Identifier:
                keyid:91:A0:4D:E8:14:7D:39:57:73:D6:42:37:9C:60:F3:14:31:BC:B9:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/803d96a6-616e-46c1-8bc7-2a9aa977f088.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.133.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:eb:0d:8a:1d:21:b2:e5:d7:3f:0e:7b:29:13:3a:17:ba:4c:
         9e:ea:cc:4e:9f:c3:fa:f8:d6:c0:05:22:ff:87:c2:a3:2e:b9:
         32:a2:43:80:3b:ed:99:73:32:f8:92:1a:15:60:57:f0:90:c9:
         ce:97:4e:13:2a:a6:04:bb:8f:67:d3:4c:dc:66:7d:b7:ce:df:
         d4:50:00:a8:5b:6e:06:2b:e2:54:ab:28:ab:df:97:23:72:e1:
         c2:db:1b:b2:7d:39:6f:fa:e0:36:d8:6b:7d:18:eb:57:3d:a1:
         29:b5:64:89:28:2c:49:ff:13:26:f8:1c:40:43:93:4b:55:4a:
         73:19:64:20:2e:82:bb:8f:7a:90:78:a2:43:a4:6a:6e:08:47:
         a8:02:f0:be:eb:f0:85:22:c0:59:f7:f5:c7:55:6f:e8:bd:14:
         11:ba:57:a3:64:f8:c2:ac:af:02:5c:e1:ee:e0:40:da:62:0e:
         52:81:1c:7f:18:2a:45:10:50:90:07:0c:63:cd:ef:02:0c:24:
         92:44:f9:8d:c5:d9:3d:6e:92:7e:6c:82:ce:22:a9:2f:fc:d9:
         b4:f6:15:67:03:28:f4:bf:68:ea:45:21:3d:e5:d5:47:0a:8e:
         72:b4:8d:34:82:9a:99:10:98:a9:c6:b6:4d:df:f9:29:a2:ae:
         38:a1:ff:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:14:16 2025 by rpki-client