Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa
File:                     b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa (raw, json)
Hash identifier:          0EA/ee2+8QT0GUlAxVMaqOkspWdhVIWOfiWQfifITpQ=
Subject key identifier:   CF:E8:16:5A:BF:61:BF:F9:16:A6:0E:1F:B3:BE:8B:E1:67:51:97:01
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285848DBD66B2781879AB5C1945D00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     64267
IP address blocks:        216.185.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:6b:27:81:87:9a:b5:c1:94:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=3c18f622-705d-4e4c-bf65-1ab364d89766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ed:10:e6:fa:b0:b4:cb:64:fc:62:28:2b:56:
                    3d:50:7c:b2:dc:56:4d:57:c9:a4:11:e6:5d:7a:cb:
                    63:0e:d8:ee:a8:91:c7:86:0a:eb:72:da:24:cd:50:
                    31:d5:cd:39:bf:fd:62:3e:b0:3f:f0:ae:d3:e0:27:
                    31:18:07:e5:e0:55:51:6b:ec:6d:5a:17:d6:8d:df:
                    a8:2f:d3:24:d8:e7:1a:cc:41:de:65:25:df:52:fa:
                    3a:56:05:b3:b9:a5:99:21:4e:60:64:68:04:05:dc:
                    6e:2f:7d:fb:61:e3:64:8d:a7:72:47:9a:e5:38:c1:
                    ce:ff:58:dd:85:7a:42:55:60:9d:00:ee:96:f4:a5:
                    22:7a:b2:2b:f8:2c:92:ac:35:dd:a6:91:06:5f:c4:
                    a4:ef:ed:e3:56:36:14:87:33:78:9c:35:99:4f:24:
                    dc:aa:7e:68:81:64:a7:8c:e1:e5:3d:95:c2:e8:16:
                    af:09:c9:2f:e0:26:db:6f:5c:0c:2f:78:f0:ab:ab:
                    9e:e7:82:a5:36:fd:eb:96:17:db:54:c7:8a:81:a7:
                    36:98:af:c3:2c:37:e0:b1:a0:08:cb:65:f6:79:17:
                    80:a2:dd:48:75:e3:47:08:dc:bb:a4:49:df:9e:fc:
                    d3:d3:37:e5:79:ad:6d:2f:33:f9:a4:d2:91:b2:79:
                    e6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:E8:16:5A:BF:61:BF:F9:16:A6:0E:1F:B3:BE:8B:E1:67:51:97:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/b4eacfe3-bd9d-341d-8e97-1c74c119e428.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:30:59:70:1f:c1:4e:09:ed:00:33:42:53:c5:87:9a:f1:70:
         d0:f1:0e:67:45:56:13:f1:af:0a:de:28:72:a8:88:92:7d:5b:
         e3:c7:28:f2:a6:e3:f5:7c:f2:dd:91:61:ef:c2:86:3d:59:e0:
         a1:3b:50:7a:ae:5d:2c:eb:89:f5:dd:cf:07:63:c5:a1:04:f4:
         5f:b3:a5:f7:92:b6:05:e5:4a:c5:82:a7:f2:ef:1e:3d:a1:23:
         bd:e2:6e:ce:d0:69:ae:6a:68:7d:c2:65:81:78:cd:c5:02:e2:
         1a:26:dd:3c:30:cf:82:39:14:cf:a4:61:cf:c2:d5:17:dd:b7:
         40:51:1b:51:2b:c0:7d:8e:24:20:79:42:38:a7:25:ae:e8:54:
         ae:fe:27:fc:32:aa:c9:df:c4:ff:78:c4:ee:98:40:a7:94:38:
         b0:c0:a0:fd:f0:ed:be:87:cf:81:c8:2e:fa:96:3c:61:5a:3f:
         81:e0:fc:db:1a:d0:d8:34:f6:2d:2c:0d:03:f7:c3:07:09:d3:
         e1:86:bc:50:be:23:11:b4:10:01:85:64:d6:e3:95:e9:55:1e:
         9f:2d:1f:6e:a0:f0:bc:4b:8d:ac:ea:18:b7:f4:92:0a:83:18:
         46:9d:a2:9e:3b:3c:d2:26:88:90:40:38:51:06:b3:66:ee:88:
         fb:bf:45:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:24:40 2025 by rpki-client