Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
File:                     559bd815-2f54-3ec2-9322-c904668bbbce.roa (raw, json)
Hash identifier:          8fIrnw5gIizJW7201hJ6aXqDuxQsPxigmPoKxnLrams=
Subject key identifier:   14:78:8D:2E:6F:89:B5:7C:A2:30:A6:F8:37:74:9C:5A:D3:11:95:08
Certificate issuer:       /CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
Certificate serial:       010D0C9F432858495C243DF3345668DB17AE2040
Authority key identifier: 61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     7029
IP address blocks:        207.170.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3d:f3:34:56:68:db:17:ae:20:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fab6378-e15d-4471-b01f-be15fc5bfa04
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=abac37b0-7f90-46cb-8c9f-b4f2592297d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:25:5c:21:56:f7:5f:54:56:03:e9:7d:13:
                    46:ce:47:c4:eb:f4:13:e2:2e:ec:20:e7:6b:11:69:
                    dd:42:3e:a4:35:2f:8f:89:e7:d0:c9:53:cb:12:9b:
                    d9:f3:97:f7:c7:4d:f3:85:b8:e1:8d:74:3c:f7:25:
                    d1:d6:b2:7e:6a:f2:61:4d:6a:71:36:5f:79:b2:e4:
                    13:58:1a:63:86:50:d1:20:cf:2f:39:67:0e:d0:93:
                    70:78:1f:01:7b:fb:27:72:db:9e:7f:b4:1e:9b:18:
                    da:c5:d6:26:ff:9b:42:63:a7:37:97:7d:53:c9:88:
                    26:02:5b:74:54:71:49:0e:b6:51:09:1f:92:65:e6:
                    95:0d:84:e7:71:89:a6:64:9c:73:59:66:69:37:04:
                    7d:9f:2d:9d:91:5e:be:f2:18:76:0b:4c:4a:48:1e:
                    64:48:2f:32:a8:92:6c:af:9f:7a:71:d2:8c:50:53:
                    c1:99:63:d6:23:98:1d:32:50:84:29:f5:b3:df:ab:
                    35:78:55:fe:f8:f2:79:a6:af:c6:2d:39:15:99:6a:
                    17:94:96:ea:57:25:2a:7f:3c:da:94:59:40:57:28:
                    c4:4a:1e:1b:7f:e5:9f:d3:b9:cb:bd:99:1d:b0:6a:
                    da:07:da:09:a1:c2:be:65:45:84:7a:dc:ea:ce:e6:
                    d1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:78:8D:2E:6F:89:B5:7C:A2:30:A6:F8:37:74:9C:5A:D3:11:95:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/559bd815-2f54-3ec2-9322-c904668bbbce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04/5fab6378-e15d-4471-b01f-be15fc5bfa04.crl

            X509v3 Authority Key Identifier:
                keyid:61:40:43:BF:E2:50:B3:47:64:FC:D1:73:0F:62:98:03:50:32:18:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fab6378-e15d-4471-b01f-be15fc5bfa04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.170.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:3c:1a:3c:d6:c4:12:f0:0f:25:82:6a:6e:7e:83:d7:ca:28:
         75:95:6e:83:73:76:13:64:1e:3f:67:f5:d1:11:0d:40:e0:40:
         9c:fb:51:6b:d0:8b:39:2d:78:4f:52:db:95:33:f4:0a:a7:19:
         ed:34:ee:34:76:f1:bc:fa:27:b6:b6:ca:08:c5:a0:ee:7b:80:
         7a:fa:d5:04:0a:e4:36:01:61:ac:9e:5e:a3:35:fe:bc:8b:dc:
         5a:c1:1e:30:52:84:6c:fb:2e:3b:ab:ba:62:59:15:ac:cf:f5:
         73:2f:bf:20:66:80:5c:97:ce:00:1e:f7:f5:d2:b8:4e:4f:63:
         38:9e:cf:36:7c:1e:fe:d6:54:3b:cc:c3:f5:09:df:d9:e1:7d:
         26:83:a5:ec:20:1d:a5:19:2e:50:5e:7a:d2:17:9a:86:e5:1f:
         5b:6d:36:a5:2a:2f:35:af:03:98:a9:73:63:ed:8d:15:a3:0e:
         5e:36:4e:e1:50:37:4d:49:5f:47:3d:67:b3:0c:18:97:b5:7e:
         bf:cd:fd:a0:48:38:82:63:db:ae:a2:7e:93:1c:72:00:98:b8:
         90:f0:cf:d9:f7:66:53:20:8c:7f:de:53:d9:34:ba:70:7e:4f:
         3a:10:3b:2b:f2:6c:7d:59:f1:79:ce:20:f8:6c:92:6b:cc:de:
         8f:d3:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:10:52 2025 by rpki-client