Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa
File:                     e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa (raw, json)
Hash identifier:          +cTNe84PX8NMw+Sxlv4UZ3nIWOyE9RFgx1xq8/rnS2A=
Subject key identifier:   0C:82:F3:29:5C:C4:09:8B:2B:BC:07:FE:A5:D8:AF:56:4C:3F:E6:9A
Certificate issuer:       /CN=04ea0880-2156-4bff-9635-feb716ac6fae
Certificate serial:       010D0C9F432858494469399B0F9595269D226A80
Authority key identifier: 6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     398419
IP address blocks:        170.39.22.0/24 maxlen: 24
                          2602:fd45::/36 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:39:9b:0f:95:95:26:9d:22:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04ea0880-2156-4bff-9635-feb716ac6fae
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=67845364-d867-4d58-8c93-9986872a89a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:77:90:73:e8:4d:df:bb:4d:56:10:bd:db:c4:
                    e7:f4:bf:f8:70:8f:73:96:19:47:e8:03:81:ca:0c:
                    8b:b6:e2:7a:93:e8:35:11:4f:c3:2c:fd:b1:c3:87:
                    c5:6d:d6:e8:a0:17:1c:1b:5b:fe:73:8a:e6:56:45:
                    6c:60:f7:72:d7:3e:3e:19:a9:91:1d:03:8a:d4:06:
                    a1:9f:9c:73:47:71:76:6d:e4:ff:7a:94:f5:43:58:
                    41:19:69:2e:93:fe:df:5e:f7:bc:2a:95:bd:6c:2b:
                    37:1a:d3:6f:4a:2c:13:1e:ed:36:ea:8b:37:38:ad:
                    49:fa:e2:08:22:b9:ef:4d:24:44:6d:e4:3a:fd:39:
                    c9:3c:3b:89:62:fa:9f:59:33:a9:d8:bd:0b:53:18:
                    9f:8b:51:b7:0c:e7:c6:27:5b:7e:03:6e:c4:52:8b:
                    31:58:b5:e8:ea:f1:e1:4e:a4:e7:01:48:84:6e:5f:
                    02:fc:79:b4:95:af:e9:d7:da:29:46:fd:4a:56:22:
                    5a:35:88:5e:88:af:e5:1b:2e:2d:15:94:4c:b7:57:
                    a2:28:09:9b:72:cd:10:4c:54:1a:b6:5e:3d:87:dc:
                    43:a3:48:3a:a8:11:da:5f:67:0a:90:08:dd:0d:88:
                    8e:72:1c:d6:8f:9f:d3:26:18:a3:95:0f:bc:3a:37:
                    33:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:82:F3:29:5C:C4:09:8B:2B:BC:07:FE:A5:D8:AF:56:4C:3F:E6:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/e9e7f3ff-b648-37a2-8c6c-4cfadba2adcb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae/04ea0880-2156-4bff-9635-feb716ac6fae.crl

            X509v3 Authority Key Identifier:
                keyid:6E:3A:68:AB:A2:03:66:89:AF:ED:B5:C8:72:5A:38:C4:FD:E4:1C:BF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/04ea0880-2156-4bff-9635-feb716ac6fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.22.0/24
                IPv6:
                  2602:fd45::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:33:d9:c3:d5:0e:4d:8c:b0:15:1f:52:37:55:89:44:2a:7b:
         70:52:19:1a:55:cf:f4:3a:6f:01:1e:5a:be:b3:c2:bf:ac:bb:
         a8:7f:55:6f:73:89:cb:4e:c6:7d:ca:ce:d4:c4:02:e2:b6:af:
         4b:c1:56:b9:dd:26:14:be:78:0b:9b:af:a6:b3:cf:ef:a5:b3:
         38:f2:ae:dc:39:cf:24:56:19:7d:d8:c9:47:c2:5b:d7:75:95:
         73:8f:c5:c7:d6:fb:e5:7b:28:18:c8:38:d6:12:ed:a4:6b:bb:
         48:ed:07:6a:a1:30:29:db:76:fb:5b:39:7b:ed:2d:c9:ea:e3:
         67:e9:22:3e:13:1d:84:9e:5a:c7:4c:78:ce:0b:e2:81:fd:02:
         12:cd:05:6b:e6:53:5a:ad:fa:4f:96:de:35:0c:5e:4e:90:d4:
         25:f5:5f:a8:be:a4:13:7a:ee:fa:1a:31:bb:ce:fc:37:0e:94:
         d3:6a:6d:8a:d5:a9:3a:0d:75:91:da:cf:b6:ab:0f:88:1f:b9:
         2f:71:4f:86:32:48:3f:91:1c:b3:fb:d6:5a:57:85:ff:54:6b:
         7b:9f:e2:4a:a1:24:12:d2:01:31:8d:6e:ae:dd:2e:9d:5a:77:
         65:2a:0a:d4:7f:a7:7f:97:8c:30:03:57:d2:05:27:d0:3e:f3:
         88:17:c1:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:08:30 2025 by rpki-client