Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa
File:                     50131b63-dc30-3e49-a1ff-f1b54003b87b.roa (raw, json)
Hash identifier:          6hXvCTT776/osBcbt66P6FbJFLDYk/T/2i9vlcO3OLI=
Subject key identifier:   33:78:6D:B4:2C:A1:A6:1B:21:67:D3:9A:31:CB:01:D6:7C:8B:F8:53
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F4328584902EBFFB53CE4449BC21F9A00
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14618
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:ff:b5:3c:e4:44:9b:c2:1f:9a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=45076b82-eaf9-482a-896d-c8b21eddab10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a9:72:6d:15:55:86:1a:0f:f2:f1:31:44:ec:
                    1d:c0:55:6c:1b:37:8f:95:a8:16:40:82:a8:24:c2:
                    3c:67:61:0a:c9:7e:4b:0b:9b:ec:dc:ea:5f:d8:0b:
                    44:d3:8e:a3:57:c5:54:82:68:5f:86:7b:3c:73:ba:
                    78:52:e4:d7:58:ac:65:9a:26:b9:4a:33:b8:18:2d:
                    ed:24:96:e5:b7:1b:63:e0:91:4a:c7:ad:f1:ca:30:
                    c8:38:70:44:1c:44:e8:3f:3f:c0:e2:41:7e:9c:b6:
                    57:ee:ec:e9:01:81:89:7e:6a:d1:b6:90:0a:c1:2b:
                    19:c3:d3:22:58:d7:b2:94:6e:68:15:6b:98:49:1a:
                    6c:d5:0b:a4:ec:99:b7:09:8d:f5:c4:30:fb:e6:fd:
                    13:be:d2:88:9d:a7:0e:be:83:09:a0:e8:58:26:00:
                    28:aa:c9:c6:ce:1f:1e:6a:f1:ad:05:bd:e2:4f:a7:
                    29:a6:81:5d:69:d0:25:37:75:12:50:58:5f:20:00:
                    55:6a:3c:96:cc:5d:79:80:f1:dc:a5:83:ca:23:81:
                    2e:11:1b:36:bc:27:73:4e:72:91:f1:25:75:f8:0d:
                    e5:b0:a0:35:10:31:a0:11:d6:54:bd:71:5b:ca:98:
                    b4:a0:80:62:55:11:52:cb:9b:4b:bf:a1:6e:4b:74:
                    94:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:78:6D:B4:2C:A1:A6:1B:21:67:D3:9A:31:CB:01:D6:7C:8B:F8:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:dd:8f:35:ed:f6:85:0f:4e:2d:7b:4f:37:98:c2:e1:15:6c:
         ff:89:6d:b9:ea:42:b9:8d:1e:0c:12:76:54:df:78:89:32:f4:
         10:c1:f4:ef:36:fd:ee:f2:e1:ae:6e:24:c9:ee:ea:01:2d:66:
         07:0a:eb:55:dc:71:97:4f:30:32:20:83:56:3a:67:50:b3:a4:
         b0:4b:e1:f7:48:7d:55:c7:8a:df:ec:89:02:ef:79:38:4f:23:
         36:21:8b:a0:4d:8f:81:83:50:f4:b1:32:82:6c:f5:49:37:a7:
         22:69:c8:8c:68:73:af:12:83:dc:ff:46:cf:74:5d:6a:65:0a:
         a8:7b:6d:a2:74:29:91:a4:d2:97:2c:6a:1f:67:31:06:c5:73:
         3c:1c:76:1a:fc:3e:47:00:e5:f9:e9:d3:17:a9:69:da:02:b0:
         54:15:f0:79:7b:a4:f3:4e:8a:e6:2e:ff:d1:5b:22:cc:1c:1e:
         bd:ff:5d:5d:b0:59:16:36:18:f9:43:9a:98:bc:43:e2:70:ad:
         6b:01:ba:63:3e:6e:c5:11:8c:09:97:00:75:3b:24:6a:bd:57:
         a0:8b:63:af:52:05:3d:28:9a:10:22:26:87:78:5b:a5:c1:5b:
         e0:d3:f0:c7:81:30:66:64:6d:02:15:bc:20:dc:6a:6c:af:8b:
         4c:57:f4:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:11 2025 by rpki-client