Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/11521b40-acb5-3a53-9d07-b097304cfc6f.roa
File:                     11521b40-acb5-3a53-9d07-b097304cfc6f.roa (raw, json)
Hash identifier:          uNWuAjmWpdNECzIbJ0Ropd9cAa4yQm4YTU4KLjxhgSI=
Subject key identifier:   50:74:B9:DF:ED:F7:AC:53:58:B3:3D:02:48:09:EC:68:67:B3:FD:51
Certificate issuer:       /CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
Certificate serial:       010D0C9F43285848EF615B000A3D290A16F97200
Authority key identifier: 5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/11521b40-acb5-3a53-9d07-b097304cfc6f.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     15562
IP address blocks:        67.221.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5b:00:0a:3d:29:0a:16:f9:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ed313ca7-81e7-42e2-bf38-c96bb839ecf4
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=ada04319-dd0c-4d8c-8d16-0ca140141761
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:27:68:c2:30:7c:42:ac:29:cc:23:7f:59:c3:
                    b4:19:4f:24:cb:93:8e:37:29:31:42:7a:75:44:88:
                    19:3e:be:26:3f:21:5f:eb:49:bc:48:fe:1c:fa:cb:
                    27:0e:02:af:7e:3e:c9:35:a3:45:1e:41:06:2b:e6:
                    35:4a:48:4f:5e:27:f9:1b:d3:26:22:05:35:92:39:
                    67:9f:c7:08:d1:ee:8f:39:b9:a9:e3:3a:68:50:b7:
                    d4:dc:80:53:0b:1b:9d:f6:00:82:db:d4:14:a8:63:
                    16:5f:e2:99:7e:7e:fb:75:72:53:9a:da:25:08:4d:
                    17:0e:04:99:38:06:08:c6:95:f2:ed:11:ef:1d:3e:
                    f9:e9:2d:2c:e2:04:af:d9:50:46:fe:fa:0d:26:4c:
                    cf:48:ae:ae:24:c9:c4:de:8f:e9:b7:31:e1:2d:b4:
                    d5:d3:e6:ac:e2:8f:43:b7:92:ad:c5:da:f1:8a:5d:
                    37:57:96:9e:4b:51:d1:5f:3b:d1:de:b0:c3:df:fd:
                    e8:01:6d:99:c9:9f:77:35:fc:d1:8b:80:c0:09:67:
                    d1:2f:2a:b4:27:32:12:67:9a:4d:f4:e1:4e:9f:42:
                    51:0a:3a:2a:e1:d3:cf:b3:3f:69:ca:38:cd:36:5a:
                    d6:9b:d2:94:a4:34:74:1a:87:72:03:01:0b:33:67:
                    3e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:B9:DF:ED:F7:AC:53:58:B3:3D:02:48:09:EC:68:67:B3:FD:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/11521b40-acb5-3a53-9d07-b097304cfc6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.crl

            X509v3 Authority Key Identifier:
                keyid:5D:97:76:7A:E5:5A:DA:95:2E:FE:14:AC:9E:8B:EE:E4:E8:FD:92:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ed313ca7-81e7-42e2-bf38-c96bb839ecf4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.221.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:a0:59:ce:b9:ec:d2:2d:9f:47:92:ae:be:ee:01:df:e0:dd:
         ec:17:8b:64:2b:fe:67:fc:70:0e:a1:ea:a8:3b:a1:1e:c2:36:
         47:95:8d:e2:7b:e9:f3:70:47:63:73:1c:fe:40:d8:39:bc:3c:
         20:55:56:c2:fa:74:1e:21:0b:91:28:dd:dc:94:e6:83:72:c8:
         92:ff:16:db:5d:56:dc:7a:1f:db:db:19:2c:0a:d9:44:1d:8e:
         0d:62:0b:78:07:f1:e2:06:dd:49:b6:01:90:fc:28:88:d4:95:
         6a:eb:18:f5:82:5d:c9:af:15:af:8b:14:0e:37:6b:91:c6:12:
         ef:5f:82:4a:46:ae:d2:31:71:4e:29:3c:64:36:88:ed:8d:5e:
         bd:dc:ed:bf:30:09:76:f9:38:e3:78:ba:68:42:ba:94:2b:9a:
         90:4a:d7:1a:84:06:ea:41:ea:0c:63:11:29:6e:6c:c3:ab:3c:
         e2:2f:e8:b5:21:36:26:6b:cd:bb:c0:37:2b:a1:ba:f4:c5:6a:
         d0:d2:d5:14:eb:bc:07:ca:db:47:7c:08:0d:88:38:2e:6d:d1:
         36:a1:5f:49:68:2d:33:dd:bd:fc:42:59:d4:6e:7c:94:c1:2e:
         eb:35:c9:0a:a3:01:39:44:8e:08:b9:95:8e:ba:d2:ee:43:a8:
         7c:61:43:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:10:26 2025 by rpki-client