Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
File:                     b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa (raw, json)
Hash identifier:          jTB7AxqFX6TrXLjcRYdVgXesJ+wfHKyMAsQ8tHmCelc=
Subject key identifier:   5B:7D:50:11:A5:70:3C:8B:31:A7:49:C1:B4:95:4D:90:80:2B:48:3F
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BE86261C522A0FD4D392D600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        207.134.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:26:1c:52:2a:0f:d4:d3:92:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=100175ca-697d-41d2-9b7e-7b76c977d557
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:74:d3:5e:85:4f:fc:98:4d:ee:dc:7f:17:e0:
                    55:36:5d:f3:50:7d:44:74:28:9f:e2:8f:a2:ee:57:
                    7d:df:91:1f:09:56:3c:61:93:f5:8a:9a:66:7d:a4:
                    69:52:2a:d9:5b:b5:8b:c5:3e:a6:0d:da:87:65:2e:
                    b5:52:11:e8:4f:c9:08:30:32:b3:81:f1:8f:1e:37:
                    7d:0d:bc:a1:ad:77:1f:f0:a0:a6:a9:b2:8c:1a:2e:
                    bc:2a:ae:b9:ad:41:a8:bf:dd:c8:83:0a:f7:44:94:
                    b8:3b:93:e1:23:ba:6b:e9:3e:d8:d8:a0:45:1f:2f:
                    0f:d1:f4:9c:dd:f5:72:89:f3:53:7e:09:4f:84:5b:
                    80:9a:7a:e5:da:d8:71:e7:ca:c8:71:43:85:c8:ad:
                    7d:cf:aa:0f:35:8e:fa:f6:36:e6:e2:2a:ae:eb:43:
                    2a:10:ad:a2:4c:5e:8a:e1:58:1a:5e:c9:1e:e5:d0:
                    82:12:07:0f:d9:36:3a:fd:cf:fa:f6:cb:0b:e4:28:
                    c3:1a:4b:f2:8a:47:7a:43:d4:71:ee:9d:fe:59:20:
                    50:f3:ff:fa:e9:03:12:dc:18:29:7c:64:b2:b6:38:
                    cb:b5:2f:cf:4c:e1:88:f4:b0:4d:86:b2:98:55:f8:
                    cd:86:6d:22:43:30:67:ed:35:c3:a6:8c:42:b2:20:
                    44:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:7D:50:11:A5:70:3C:8B:31:A7:49:C1:B4:95:4D:90:80:2B:48:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/b4fb41c2-1c3f-3f9a-a8ea-ba96962be3ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.134.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:4f:84:38:22:c9:bb:39:3b:a2:70:67:70:86:bf:4c:d3:5c:
         06:cf:ce:13:96:2c:ed:89:0c:60:ce:3c:72:4f:56:3a:c4:78:
         45:16:96:47:23:55:09:65:bd:bc:d2:08:ea:aa:49:b0:3f:fb:
         07:0c:f0:90:a4:73:f9:c6:4a:7b:97:5c:9e:21:4e:46:38:e9:
         a6:ae:63:08:a8:32:be:3f:b4:5f:b9:ea:7c:e0:0e:60:14:9f:
         d7:21:61:95:0c:92:86:38:db:29:ef:1c:a5:ea:aa:14:14:8f:
         ad:d5:b7:d4:03:8c:ab:d9:22:7b:bc:20:c9:0d:c9:73:8c:c2:
         95:28:02:8f:11:6b:45:fe:ff:2e:98:a1:55:fa:fe:6c:2e:d4:
         1e:f3:b1:78:b6:f5:b6:55:1d:3a:60:b6:41:16:7c:27:09:6c:
         ea:6f:60:fd:ed:3e:95:2a:96:c3:f3:75:88:5e:24:85:3f:87:
         d0:d5:65:37:d1:be:9e:f8:76:a4:21:2b:5d:c8:07:e2:2b:b2:
         5b:04:75:21:06:a8:b7:df:4d:59:96:c4:e1:f1:fd:cf:43:06:
         ec:a4:47:e9:54:e3:08:9d:50:ad:a6:63:d0:bb:65:78:f9:e3:
         f6:99:0f:58:01:d1:5b:41:e2:72:89:3e:b2:57:ec:c4:39:65:
         9d:ce:9a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:45 2025 by rpki-client