Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a35f56bd-50fe-323e-b38c-25b477482e3f.roa
File:                     a35f56bd-50fe-323e-b38c-25b477482e3f.roa (raw, json)
Hash identifier:          NB7Wkgy9PLJ80DaM9um3Yws8C2zAZeNKrfuwGgWDMoA=
Subject key identifier:   8D:9E:A9:02:C6:13:9E:A2:A9:9F:F5:6A:FF:97:7E:FF:D0:C4:0D:81
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C5822B08F5D1CEF6F328C200
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a35f56bd-50fe-323e-b38c-25b477482e3f.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        172.102.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2b:08:f5:d1:ce:f6:f3:28:c2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=674d7036-3cf7-4083-ae49-4676ea1c9d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:65:a0:c6:a7:02:21:8e:b4:66:05:15:e7:
                    a7:b1:64:b4:ea:34:a4:ef:af:57:a1:a6:cc:c1:c3:
                    26:67:7c:37:f3:ef:a4:e2:52:68:e5:07:e8:cb:e9:
                    71:67:4d:6f:a2:4b:74:4a:56:49:0a:06:43:05:a9:
                    34:f4:d0:8c:56:f1:95:a8:80:a4:dc:77:09:98:d1:
                    f9:fb:85:c4:bd:69:da:51:20:ff:e1:a5:cc:4c:cd:
                    30:e1:dc:b1:dc:18:cd:3b:a5:a8:2e:57:21:9c:ec:
                    5c:af:3f:3a:bc:49:cf:fb:c5:84:c9:8c:17:d4:d9:
                    ba:6e:ea:70:6f:6e:e8:97:8b:b3:a6:3b:6d:bd:5c:
                    3e:72:b3:f4:f7:d6:63:f7:6a:a7:06:f4:23:0a:e4:
                    dc:3e:3e:80:5e:b2:87:60:54:a7:2a:42:c2:e0:c5:
                    ed:f8:fe:20:fb:52:4d:46:50:c6:b1:bc:6e:e5:e3:
                    4f:88:98:0d:7b:fe:1e:3a:d7:db:7c:fd:c8:ac:89:
                    00:dd:16:d3:f1:39:d8:53:cc:70:c7:79:ea:1d:c1:
                    c2:56:9a:24:53:e3:63:d3:07:97:26:26:9e:c6:07:
                    8d:bf:c8:ba:79:5e:80:f6:57:45:b1:0e:a3:09:1a:
                    82:73:2c:e2:9f:51:80:48:cb:c7:8c:bc:7d:ae:05:
                    85:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:9E:A9:02:C6:13:9E:A2:A9:9F:F5:6A:FF:97:7E:FF:D0:C4:0D:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/a35f56bd-50fe-323e-b38c-25b477482e3f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.102.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:cb:d8:d0:bf:e5:aa:e9:79:e3:81:ab:9d:12:ec:69:f7:db:
         cf:7d:b1:d6:08:97:3f:97:8d:aa:9e:72:b8:10:dd:aa:1e:11:
         9a:ea:72:f3:84:9f:d5:db:dd:63:59:7b:fa:6a:2b:9a:60:45:
         58:d1:23:52:d0:75:1e:29:e2:ea:eb:70:dc:38:a8:8d:fc:65:
         7c:3c:4a:e2:f9:36:a2:cc:ec:45:79:88:d2:4e:c7:ad:a5:22:
         be:42:68:ca:69:f2:2c:9d:ed:9a:98:ba:15:a8:8d:61:03:84:
         7d:7d:3b:fe:46:30:fa:ea:9f:a6:79:e2:f5:64:e0:58:3c:c4:
         90:12:6f:32:40:ed:fd:da:0c:86:9f:4f:8b:db:2e:6e:04:8c:
         17:e1:0f:79:60:c3:d7:9d:7c:3a:fc:1c:e3:ac:81:47:de:00:
         09:98:82:c3:b0:e7:94:69:66:79:e2:a0:f6:ef:80:88:a0:a9:
         e6:14:b0:50:80:3c:2c:e6:70:ed:8f:25:cf:8f:0a:f0:62:4c:
         24:7f:a9:87:24:bd:39:5a:52:b4:ea:d8:6d:7d:5b:f3:ab:77:
         16:74:0f:45:88:00:bd:e7:77:4b:c7:57:66:be:d4:63:6a:53:
         64:a6:fb:fa:aa:f6:f0:32:13:48:29:31:cb:c3:bd:87:8b:0d:
         7e:ce:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:37 2025 by rpki-client