Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa
File:                     d93a20ce-1dae-39c1-be87-74905d73ff1c.roa (raw, json)
Hash identifier:          1TGZZa/R6KDW0M2Q74/iOcFZxkXGzTRnNfwuu3qG5GY=
Subject key identifier:   EB:32:32:33:65:4A:CC:1E:FC:3C:58:7B:60:07:A4:3B:1C:A6:1C:86
Certificate issuer:       /CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
Certificate serial:       010D0C9F432858495ABEE321703C7C8803FB5F40
Authority key identifier: 70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     6253
IP address blocks:        48.0.0.0/9 maxlen: 24
                          48.128.0.0/10 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:e3:21:70:3c:7c:88:03:fb:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=6b005ac0-9e58-45b3-af18-e9128320b49b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:0d:f2:7c:66:de:d8:03:4a:65:1c:fe:fe:69:
                    eb:87:a4:4b:4d:3a:39:53:d3:0c:7e:1b:ae:21:2f:
                    fd:5b:9d:7e:4f:48:b6:0e:6e:51:25:7b:ea:c7:6d:
                    9e:23:c7:0b:a7:61:9c:e3:f8:79:d1:a7:c6:85:93:
                    ae:63:79:c2:48:dc:69:13:9d:36:57:7c:eb:46:62:
                    6c:6e:2d:c5:eb:b8:8b:84:6a:4c:65:10:3f:c5:55:
                    51:05:d0:a1:37:0a:a4:6e:17:ef:78:af:8b:48:65:
                    ec:90:63:31:ab:75:ed:df:dd:21:d4:2a:1a:92:a1:
                    8b:7b:cb:cb:71:8e:50:4a:28:aa:2e:a4:b1:db:54:
                    e2:fb:ae:72:58:a8:7c:3c:c6:c1:16:13:a2:18:87:
                    6e:09:f2:3a:1f:70:18:65:d7:a0:0f:da:dc:4f:e8:
                    39:3d:31:6d:6c:71:62:34:a5:5a:fb:7a:97:14:11:
                    5e:8c:f9:96:c1:9b:48:dc:b9:8a:17:1c:1b:0e:3a:
                    a8:5d:c0:0a:b5:5c:91:31:e5:da:5e:b0:28:f2:44:
                    8c:6d:f7:5f:b2:1b:97:cf:f3:af:f0:52:a0:cf:b2:
                    46:42:a8:de:f2:88:69:8a:ca:49:c7:cb:a8:f4:06:
                    59:06:b0:85:71:56:26:62:ae:78:40:33:6a:99:f1:
                    3a:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:32:32:33:65:4A:CC:1E:FC:3C:58:7B:60:07:A4:3B:1C:A6:1C:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/d93a20ce-1dae-39c1-be87-74905d73ff1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:B5:BF:D0:BF:AB:6B:B2:C4:F7:D8:37:1E:EC:A3:59:C1:6E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6c2b6470-94e4-4f77-9d48-13d5aaa2b3c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  48.0.0.0-48.191.255.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:e4:ee:a8:5d:df:e9:34:2e:fa:0e:9a:e4:16:6e:4b:85:
         56:43:8b:c1:8e:28:d1:c7:06:c0:b5:a1:e4:a8:9a:5d:ad:9f:
         0d:ff:78:fb:43:c4:ef:3d:93:64:87:0d:a1:f5:98:fb:b4:46:
         88:07:ba:45:89:60:19:f5:75:43:8b:e3:c4:da:7e:1e:32:17:
         54:75:b2:85:00:a5:1b:7c:47:a6:94:3e:9d:48:c8:05:b5:e7:
         74:64:b2:a1:5d:4c:62:8a:6c:1c:5a:f3:4d:b8:28:f8:94:e4:
         20:ef:e6:24:93:48:a9:61:cc:98:d8:d1:e3:65:05:38:b3:bf:
         a9:49:44:a2:f1:8b:0a:85:8c:e0:2c:2b:ee:e3:ff:24:7d:64:
         a1:cd:53:50:ae:4b:bd:d8:64:50:25:92:5a:e1:74:9e:35:03:
         0f:2d:c3:75:ff:5c:36:ef:2d:0d:7c:fd:82:0f:5a:90:a2:3a:
         b1:a3:f5:18:56:a7:f3:76:ce:a4:44:98:16:d1:9d:1a:b9:dc:
         b0:d6:f1:58:c9:1f:30:a4:14:06:90:ac:80:b0:40:94:d8:bb:
         c8:8e:90:76:a5:2c:ca:2f:cf:64:80:0d:f6:3c:af:d7:cc:55:
         6d:35:d2:b2:40:6b:f9:d4:11:82:11:d7:07:b7:fb:0d:4d:ca:
         e9:da:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 14:42:42 2025 by rpki-client