Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa
File:                     b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa (raw, json)
Hash identifier:          JBlPstDGfhsxKrj61zj9d60bhXIDb3uLTCrxtElyEYo=
Subject key identifier:   C8:C1:00:67:68:2B:31:63:01:07:50:B9:8E:38:39:E7:92:C1:82:20
Certificate issuer:       /CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
Certificate serial:       010D0C9F432858497279A3BF0CADB9A2480F5080
Authority key identifier: 5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     35950
IP address blocks:        204.156.94.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:a3:bf:0c:ad:b9:a2:48:0f:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbc73483-6034-4dc0-bbf5-e4d82bf28af9
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=aae96755-1b7a-49ac-906e-06367235dbe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e1:05:e1:9c:6b:b1:3b:8c:25:01:fd:eb:19:
                    2d:1c:51:ae:f5:b4:a5:d3:5a:7a:41:bd:22:c0:5d:
                    a5:c0:97:7c:93:2b:69:a7:c4:d8:a6:55:ba:62:5a:
                    17:60:30:0b:d9:07:f4:ac:fc:1b:44:79:83:58:00:
                    04:20:b6:30:bf:db:43:7f:82:85:ad:3e:db:1e:e7:
                    f6:57:b8:c6:99:e1:34:84:f9:96:e8:40:7f:25:a6:
                    f7:6d:a8:28:9a:87:93:63:c4:3f:58:59:31:39:b2:
                    f0:9f:c3:a8:bf:c5:24:aa:42:a0:b6:7c:78:14:62:
                    37:c6:66:ad:a8:4c:bb:ad:2c:38:8c:d3:14:e8:cc:
                    39:c0:b1:ed:ca:b4:dd:00:6f:cd:e5:c4:74:3e:3e:
                    e2:1a:bc:4e:a1:ad:37:c8:7b:bc:f9:43:85:c0:bd:
                    c3:f6:03:80:0e:25:4e:27:76:cc:b6:81:62:a9:3b:
                    18:d3:11:48:72:2b:9f:d3:b3:ca:76:9e:84:d8:8c:
                    f1:07:91:31:b4:39:8e:59:d6:a1:ec:61:7b:e2:88:
                    aa:9b:87:a8:83:02:79:50:a0:7c:0d:ee:0a:62:15:
                    a2:a8:5a:a9:19:68:f0:ab:e9:02:cc:55:58:fc:79:
                    d6:e3:f5:46:25:66:ca:47:4b:bf:53:af:5e:19:b7:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C1:00:67:68:2B:31:63:01:07:50:B9:8E:38:39:E7:92:C1:82:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/b2bbca83-14d3-3df1-aab2-fcf20b49ee52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.crl

            X509v3 Authority Key Identifier:
                keyid:5E:DB:0D:6C:CE:4D:8B:38:2A:68:E5:F0:F9:E9:11:C2:2D:48:66:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cbc73483-6034-4dc0-bbf5-e4d82bf28af9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.156.94.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:cc:b6:54:23:bb:8b:81:88:53:5d:5a:f5:00:a0:ab:af:7a:
         0d:96:fc:0b:62:4e:96:93:91:f8:11:6c:77:ac:16:66:c8:32:
         1d:71:70:7c:c1:4f:d1:96:1f:cc:fe:eb:c8:78:a3:50:40:52:
         0b:0f:fb:2d:a1:b4:93:e0:b2:35:37:a6:bc:3c:b1:0c:0d:68:
         d5:1e:46:7a:42:fb:88:04:4a:9b:05:31:38:1d:86:41:64:87:
         29:4a:c3:2f:7e:55:e6:82:85:fa:28:93:06:0a:58:24:35:cb:
         cb:8c:43:8f:19:a2:29:1e:b5:ef:9b:05:41:ec:14:8e:91:9c:
         8f:f6:19:76:12:2c:d2:cf:fb:cb:19:46:d3:5e:a7:21:33:b8:
         71:d0:f9:68:ff:41:e6:b2:bc:9a:bf:b3:23:9b:ed:10:d0:59:
         42:64:dd:78:7a:4c:22:ef:6b:ab:1d:3b:d0:f8:2e:d4:5f:2e:
         0a:55:eb:06:32:8d:7b:77:cb:12:c7:e1:8b:ba:ef:5b:b8:ff:
         c2:a6:a2:a3:dd:d9:5a:29:c9:3e:ab:ac:e8:c4:1a:37:d3:2d:
         55:ba:23:95:23:a2:0b:bb:9a:e8:c6:50:f1:60:c8:48:f4:ce:
         6c:ec:d8:73:3b:e9:19:69:41:a2:47:c7:d1:1c:14:20:3f:14:
         d1:d1:ab:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:32 2025 by rpki-client