Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
File:                     6a7cc440-c701-3906-b2fe-594c62786924.roa (raw, json)
Hash identifier:          aLR2lwochmwT9Xj1D2QWoZu98adiZGFi3Q/GppR+3AQ=
Subject key identifier:   0E:39:79:88:C3:9B:65:4E:1E:5C:3A:A8:90:E0:6B:34:27:71:60:69
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858491ED6DCAAF3E7200EB7608D00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     29538
IP address blocks:        128.1.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:dc:aa:f3:e7:20:0e:b7:60:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=2c027530-d08c-47d4-954d-7169d008e881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:74:a8:8b:55:ff:da:95:3e:30:8b:81:78:24:
                    e5:dc:a6:ef:d1:dd:b2:da:c1:49:d2:fe:a3:c5:2c:
                    e1:10:3c:cd:3e:a2:d5:af:8c:26:5a:93:85:41:4c:
                    d1:86:99:21:e7:2e:10:36:21:60:76:8d:6a:d1:c4:
                    e1:a4:39:2f:5d:68:4d:30:49:86:6f:6f:cd:19:08:
                    9f:5e:60:4b:4a:f2:b4:ba:04:cd:a9:f9:55:bb:5e:
                    77:11:07:60:f3:18:67:4b:4c:e0:ce:1e:d1:98:33:
                    35:e0:40:e2:23:e8:2b:39:82:a5:4b:1e:77:0b:b5:
                    ce:9c:0f:d3:78:de:04:27:30:20:10:e3:e8:5e:fc:
                    f2:f8:82:67:95:97:19:d9:5f:05:2c:6d:4a:9d:4c:
                    77:74:ff:49:06:1c:e4:00:b7:e3:84:a1:1a:de:47:
                    c5:63:e5:4e:81:4b:2b:d2:3e:48:a3:93:57:46:07:
                    98:5f:87:cd:00:96:19:5c:ee:44:8f:83:1c:f3:36:
                    5c:9b:40:4b:9b:a9:3b:25:2c:e9:0a:54:72:4d:83:
                    58:85:d2:78:c3:59:16:71:3e:0d:71:c6:9d:bd:be:
                    8e:f7:80:62:d8:55:ca:52:99:d0:ac:54:35:1d:64:
                    7d:ec:09:65:41:6b:f3:ca:8c:3e:b5:e1:01:25:1c:
                    5d:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:39:79:88:C3:9B:65:4E:1E:5C:3A:A8:90:E0:6B:34:27:71:60:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/6a7cc440-c701-3906-b2fe-594c62786924.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.1.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:ea:1f:94:09:cf:02:be:71:c4:40:15:4d:f1:2c:8c:e5:8a:
         e3:3a:90:18:91:68:c4:44:30:d9:66:e8:77:50:a1:6f:f4:31:
         d7:d4:c0:9f:e3:45:9b:08:8b:c4:83:80:ed:92:90:ec:39:79:
         09:eb:e5:70:cb:8d:f0:e4:67:a1:f6:11:d2:d6:64:ad:4e:a3:
         f9:66:3e:7d:42:1c:d9:cf:cc:b8:62:01:64:72:e7:d0:63:a2:
         44:03:5c:3b:e1:35:a8:c7:f6:2e:d5:8f:f4:c8:af:b0:67:ef:
         21:aa:22:fe:fa:15:bc:e8:60:ec:f0:8a:8a:8b:00:1b:5d:b8:
         bb:bd:7c:29:2d:a9:69:d9:a3:70:6e:9e:1a:ae:0e:b6:d5:73:
         cf:7f:08:7c:9b:9f:1c:90:ba:ac:19:69:d2:0d:94:ea:12:98:
         64:3d:48:ab:31:3f:32:b6:52:a0:90:46:76:d3:f0:31:15:0f:
         01:65:d6:a3:c3:54:f5:c2:35:3f:0a:58:1b:84:15:8f:5f:1e:
         74:ab:c0:45:72:89:7b:ea:eb:f9:6b:fe:e0:9b:72:9d:00:2c:
         51:be:5c:6c:2b:6b:82:59:f4:d5:0a:fc:1a:6c:f4:dc:9b:ac:
         1d:b5:ec:2a:c5:c2:ac:12:94:29:ec:47:e5:fc:52:8a:ef:aa:
         ee:65:96:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:07 2025 by rpki-client