Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa
File:                     6d383822-d442-3445-a1c1-3de9ce886d09.roa (raw, json)
Hash identifier:          BOAb5MPIicWYcDmCtdpQAJwUWaLTReZPaf4Siv5rk0g=
Subject key identifier:   52:49:0B:93:B0:0A:4C:24:21:B4:F7:C3:6C:A1:BC:7D:7E:72:9D:21
Certificate issuer:       /CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
Certificate serial:       010D0C9F432858491246AB2A8ACF15B5CF7D2D60
Authority key identifier: 83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     53665
IP address blocks:        216.120.146.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:ab:2a:8a:cf:15:b5:cf:7d:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4c7af685-9e64-44e4-ac36-719ad5b8bf68
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=50ed6143-31c0-45bc-82ac-a3cf20f00caf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:9f:4c:93:f2:d1:65:ee:4a:29:f5:60:e1:f6:
                    c9:65:cc:90:1e:5b:e5:8f:d5:0f:85:85:de:41:65:
                    d8:91:aa:cd:59:24:9c:dc:e3:89:55:01:e7:f6:e2:
                    a3:04:19:ad:01:b9:29:da:34:d7:8d:a6:99:3e:b3:
                    c6:aa:69:40:43:13:3d:eb:97:08:00:0e:ac:06:b6:
                    e4:68:98:60:46:01:6d:8e:30:7e:ed:ef:aa:c2:3b:
                    47:89:31:49:95:5f:cc:1b:b3:9c:74:91:49:30:85:
                    e6:ef:d6:b4:25:81:a7:05:5a:90:87:37:10:63:03:
                    7a:a1:9c:25:fd:5d:55:e2:8c:aa:93:b8:46:d7:10:
                    df:16:de:06:28:e8:7d:ed:01:05:21:62:80:88:55:
                    53:83:8c:9c:b4:ac:21:b3:5b:fe:29:00:93:75:8a:
                    66:48:70:21:e1:3b:ee:56:9e:b3:c8:ce:0c:be:61:
                    3c:e2:ea:8d:f5:5f:6f:a6:9e:c0:b5:ec:69:04:44:
                    26:f9:12:6c:82:a9:a1:46:85:d3:38:6f:0a:5c:25:
                    ca:64:cc:7c:60:51:60:a9:e6:6d:2c:81:e6:ea:2e:
                    58:c3:41:07:59:4b:e8:38:c9:f9:66:7e:98:5c:3d:
                    84:68:90:bb:7d:0a:1b:15:ad:57:9e:77:5c:bb:89:
                    bc:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:49:0B:93:B0:0A:4C:24:21:B4:F7:C3:6C:A1:BC:7D:7E:72:9D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/6d383822-d442-3445-a1c1-3de9ce886d09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68/4c7af685-9e64-44e4-ac36-719ad5b8bf68.crl

            X509v3 Authority Key Identifier:
                keyid:83:1F:FA:45:E1:13:40:75:27:2F:26:DD:18:21:09:AD:FC:C8:9A:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4c7af685-9e64-44e4-ac36-719ad5b8bf68.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.120.146.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:95:7a:80:6e:eb:27:98:18:98:e8:b0:98:bd:3a:c5:14:
         83:54:97:d6:b2:fc:f1:99:45:89:23:78:29:ff:4e:7a:4a:37:
         68:1d:e5:25:9d:e0:af:f6:40:f2:4b:71:79:b9:e1:e8:20:45:
         aa:f5:7f:74:1e:e8:a8:2b:38:4d:89:69:72:69:2e:98:02:95:
         f6:ac:f6:0c:6c:85:48:ed:64:2d:04:da:79:30:51:fe:36:ee:
         95:92:e1:b5:92:4a:bb:ec:6f:49:dc:1b:e9:5c:70:c9:e5:56:
         9f:18:8e:8d:d4:2d:a5:ae:69:1d:2f:4d:c7:dc:44:09:fc:4d:
         67:b5:83:0a:50:4b:46:d8:2c:e9:62:93:85:ea:e8:e6:25:a6:
         c3:6b:06:a5:43:39:d8:f1:bd:82:6e:cc:8f:8b:ab:88:50:ff:
         a5:90:d0:66:46:01:a4:3a:e1:e5:35:cb:bc:5d:dc:29:c0:38:
         ea:94:73:5b:69:5f:30:ac:a5:df:ad:96:a8:d4:76:54:db:77:
         8c:c6:c1:f1:7f:d9:3d:62:07:17:c6:45:32:07:52:91:5c:7a:
         c5:02:b0:1e:3d:48:5f:21:99:89:e4:57:de:95:55:f0:21:f1:
         d1:67:84:db:6f:20:80:37:15:d2:20:3d:5a:87:6c:16:c9:f2:
         e1:5a:6c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:27 2025 by rpki-client