Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa
File:                     6da27189-1a29-38ed-b43d-3d65266b43d1.roa (raw, json)
Hash identifier:          Qdpmnq3WRFljKEJhKXaHNSkimdRr3PNPHwJkFb7P+dw=
Subject key identifier:   3A:08:DC:F7:E9:6D:37:E9:B7:51:74:32:3B:F8:B7:AF:FD:BD:DC:E2
Certificate issuer:       /CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
Certificate serial:       010D0C9F43285849393E7340941B123F5512A600
Authority key identifier: 00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     8075
IP address blocks:        192.94.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:73:40:94:1b:12:3f:55:12:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71ea89b4-ed85-463f-83d9-8453300bf2bd
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=04c29861-2ea9-4e34-bb01-01c98fefb99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:21:cc:55:0b:b8:36:9b:7b:4a:f7:b7:7c:3b:
                    b4:72:5e:12:d0:89:46:4b:af:51:21:d5:2a:cc:ec:
                    92:86:a3:ec:b6:e9:94:09:0e:5a:b5:e6:78:f2:2a:
                    19:0e:40:66:c6:ad:ff:12:50:2b:b0:ad:0e:cc:e1:
                    b8:00:59:09:2e:49:49:ec:d5:25:9e:0b:a5:d7:4e:
                    17:2a:db:1a:0c:75:ca:c2:0a:27:b7:3b:d5:23:11:
                    2d:e6:40:cd:3f:92:2e:88:da:6e:54:c1:b2:88:a9:
                    bc:63:ad:77:a4:c9:0d:d2:a2:41:ea:94:ba:e3:19:
                    ba:b3:22:ab:3c:aa:5c:d4:a1:26:f2:68:c6:29:e7:
                    8e:dd:cc:d0:96:33:8d:95:24:46:e3:24:aa:6f:d2:
                    d3:32:b3:ca:08:d6:ba:f8:3a:46:8c:37:4c:81:7b:
                    ff:47:24:b1:14:dc:51:9d:6c:c8:f4:a4:2b:72:67:
                    fe:fe:41:cb:fe:d9:c7:6e:56:c5:83:4a:30:93:7e:
                    bd:bb:e0:8c:7b:44:8c:19:15:44:35:08:85:2d:d5:
                    09:79:95:76:95:9a:26:8d:7b:17:37:bf:9d:32:84:
                    29:ab:40:29:5b:e2:af:7b:03:17:be:f8:7c:7f:60:
                    83:fc:d5:fa:9d:3d:54:a0:3b:dd:ef:e8:66:8a:03:
                    45:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:08:DC:F7:E9:6D:37:E9:B7:51:74:32:3B:F8:B7:AF:FD:BD:DC:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/6da27189-1a29-38ed-b43d-3d65266b43d1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd/71ea89b4-ed85-463f-83d9-8453300bf2bd.crl

            X509v3 Authority Key Identifier:
                keyid:00:FA:28:B0:63:5E:34:0C:5A:99:8E:4A:5A:9E:34:69:3A:5A:56:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/71ea89b4-ed85-463f-83d9-8453300bf2bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.94.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:90:60:ee:8d:9d:52:1d:71:9f:54:cc:54:6c:10:c5:fe:f1:
         19:cb:2b:99:31:af:76:a4:d6:7d:92:b3:67:24:06:88:35:d8:
         f1:de:c3:4a:ec:55:f8:bf:bc:d3:c4:72:f6:4d:b1:fd:c4:2c:
         04:59:08:a8:ce:33:83:55:dd:0b:7f:d8:9e:db:56:60:ca:59:
         67:1a:0c:da:9f:4e:61:b5:07:c5:8f:7c:d8:e9:96:c1:b6:26:
         43:44:62:ed:c7:4b:f1:68:5a:c4:e9:78:46:75:be:b6:e4:3a:
         e5:3c:7c:b8:04:5d:96:5b:32:9c:8b:e4:cb:1e:82:34:0c:45:
         a1:f9:5d:26:07:29:1a:51:9b:c1:72:a8:4f:fc:1c:12:16:9e:
         80:62:c2:fa:c6:5d:1a:65:51:3a:31:e2:86:fa:a0:73:89:6f:
         27:44:88:73:10:43:f0:d1:38:56:8d:7b:ba:e0:5d:4e:c0:11:
         c9:67:4f:02:b5:79:96:cc:e1:8d:e3:81:03:f7:d0:77:57:a2:
         c8:db:ff:4c:42:ee:a0:85:31:ad:21:65:20:e4:a4:d3:61:4b:
         12:04:50:7e:06:e9:b7:d1:59:eb:b1:0b:aa:2c:86:91:03:b6:
         cc:b5:80:28:be:c3:93:fc:22:24:5e:ee:99:28:f4:65:af:95:
         0b:78:1c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 20:14:57 2025 by rpki-client