Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa
File:                     3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa (raw, json)
Hash identifier:          eZ71kQ7mtN3KlzN8y65rHp/l3s4sH+wofRzQs1zk02c=
Subject key identifier:   33:AE:F6:59:36:7D:77:91:17:79:CD:BF:5C:4B:C2:23:03:BF:5D:F4
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858497279A36B8F9FEE45DB06A640
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     35950
IP address blocks:        204.156.84.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:a3:6b:8f:9f:ee:45:db:06:a6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=427bc12a-74c9-441e-a549-bc11aa936c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:42:5d:c5:ea:24:d3:06:e6:d9:21:a2:a4:df:
                    d9:df:e3:51:c1:8d:11:0f:48:7f:bc:26:4f:42:9b:
                    2b:12:3e:d0:73:2f:07:4e:04:20:d2:e3:6e:61:74:
                    59:95:5d:56:6b:e3:8d:ad:f8:86:0a:98:91:c5:f5:
                    b8:30:f0:5f:a6:71:17:f5:60:e6:6a:20:a6:92:48:
                    a3:dd:f0:11:0a:11:c9:f0:fa:98:b0:dc:a7:09:c1:
                    87:2e:bf:91:fe:3d:f1:4a:ce:92:ee:55:b0:ed:60:
                    9f:8a:95:9b:9e:e2:5a:fe:6e:1a:41:66:96:36:a2:
                    01:4c:a4:b7:4a:af:f8:27:66:dd:fd:8b:90:ab:4a:
                    db:96:47:d3:09:30:a1:85:a8:d0:74:cd:cd:52:2f:
                    aa:57:ae:10:e8:95:9c:9b:ae:32:28:96:c2:05:b4:
                    cd:de:2f:0e:4a:c0:57:a0:d3:4d:d7:6c:f6:c9:05:
                    6f:3e:46:fb:09:75:f3:47:d2:59:96:27:d9:70:eb:
                    f6:a7:2b:43:05:12:87:27:b4:7f:c7:cf:52:cc:77:
                    92:76:67:1d:38:ce:6d:62:93:22:95:2c:32:77:22:
                    ad:ee:0d:25:1a:46:6a:db:85:85:dc:d9:0d:2e:a2:
                    c2:ee:34:1f:94:7b:5a:ed:3e:b6:76:ee:97:31:aa:
                    5d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AE:F6:59:36:7D:77:91:17:79:CD:BF:5C:4B:C2:23:03:BF:5D:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/3a30f470-08d1-3a9f-9da2-88dadb2618b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.84.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:02:ff:89:03:1e:2d:e0:de:0e:cf:8c:de:70:b4:2d:21:eb:
         15:08:4b:8a:e7:a5:87:cb:be:a4:10:0c:c2:4c:4e:85:12:39:
         17:5f:59:12:49:73:cd:78:8b:46:ab:fd:e5:7f:5a:d9:67:cc:
         d2:94:5f:bb:2a:71:5a:5d:cd:8f:76:10:61:c7:44:42:cb:29:
         de:f7:81:c6:b2:f5:37:f1:97:43:05:1d:e8:0c:9c:85:a5:13:
         92:28:7a:71:35:97:62:ad:25:75:73:05:e2:13:a0:a8:37:27:
         45:cd:af:a5:16:97:ed:67:ef:18:30:0e:f9:bb:51:61:c7:f4:
         1f:93:20:aa:2d:c2:b9:92:7d:b6:41:09:98:f3:d4:57:da:10:
         9e:d6:fd:9c:c2:4d:20:ab:f6:b1:1a:0e:80:bd:b0:8d:d4:2d:
         b0:b0:65:ef:30:ce:11:aa:f8:d7:7c:92:78:69:5c:74:82:37:
         4f:85:92:32:2c:da:d4:59:27:1f:c2:75:b9:ef:00:ea:d2:7d:
         c2:d4:51:f5:9b:78:7a:8f:33:7e:f9:4e:be:c7:f0:40:ae:02:
         11:59:5f:5d:80:f9:23:74:81:94:d1:ab:c7:31:ae:c7:02:eb:
         8d:2d:7d:7a:9f:0b:24:c9:c0:68:1b:bb:0f:a9:79:91:29:f2:
         1f:51:ce:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:31 2025 by rpki-client