Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa
File:                     9bf85187-a45e-3962-8697-1db7dbb2477a.roa (raw, json)
Hash identifier:          9/dHPRZOef82GbYGn/uRlLH89/dHOS8isvXlENwDBOQ=
Subject key identifier:   94:FB:09:45:9A:25:BD:B2:31:BC:F1:C8:24:10:B5:4A:71:08:3B:3F
Certificate issuer:       /CN=a7804dec-fd00-426f-bba4-038d9b753fc5
Certificate serial:       010D0C9F43285848F65BE7A8EAB05F58F8DD8E00
Authority key identifier: 68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     3257
IP address blocks:        64.112.82.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:e7:a8:ea:b0:5f:58:f8:dd:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7804dec-fd00-426f-bba4-038d9b753fc5
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=c3da9d6f-2439-455f-b119-ae374af4cf48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:03:72:cc:7f:ee:ea:64:cd:f9:02:4e:d1:
                    cb:ad:29:5b:ab:bf:cd:67:f2:3e:38:52:fe:cb:4a:
                    6a:ed:b8:73:eb:04:65:e2:b5:7c:b2:93:af:1d:21:
                    cf:49:ac:32:8e:6f:a3:aa:65:74:c9:fe:70:a0:f4:
                    31:b5:d5:8a:ed:f2:36:eb:5b:6e:2c:5c:23:16:c5:
                    82:a7:43:c3:cb:60:36:2b:b4:b5:fe:cb:fa:9d:ac:
                    e6:b8:d6:76:34:14:32:21:a5:c8:ae:de:29:ce:2f:
                    4a:d7:a0:15:68:df:bc:bb:27:9f:0e:00:87:55:a7:
                    b9:89:fc:57:8a:22:5e:ae:f8:ec:5f:21:e9:60:91:
                    be:b0:b9:0c:36:bf:fb:fa:73:31:88:1c:34:47:ee:
                    4e:b6:a9:8c:68:54:3c:e3:db:e2:06:34:40:89:46:
                    e3:20:ad:e5:fb:0b:30:c2:54:c0:0a:b0:13:5d:e9:
                    95:f9:89:3a:72:f5:87:0b:fb:70:55:ae:e9:03:07:
                    4e:5e:f1:c2:82:08:38:34:64:c4:4d:3c:b1:97:d8:
                    37:c3:29:4b:0f:95:64:b0:af:ae:53:8a:c0:c3:a5:
                    ce:a7:2b:20:4c:a4:08:12:8e:60:39:68:51:52:e6:
                    05:40:7f:11:55:24:bd:e4:cc:26:3b:e6:83:86:88:
                    b3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:FB:09:45:9A:25:BD:B2:31:BC:F1:C8:24:10:B5:4A:71:08:3B:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/9bf85187-a45e-3962-8697-1db7dbb2477a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5/a7804dec-fd00-426f-bba4-038d9b753fc5.crl

            X509v3 Authority Key Identifier:
                keyid:68:75:1B:1C:86:59:64:39:7B:39:BE:37:1D:10:67:66:9C:87:32:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a7804dec-fd00-426f-bba4-038d9b753fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.82.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:08:4e:a6:73:b7:ca:3c:15:c6:01:d7:fa:ea:47:cc:44:4b:
         3a:05:91:e4:f0:62:e2:68:bf:ff:69:18:ad:db:57:2b:ab:f4:
         ed:5f:7c:ef:8e:12:67:ba:b3:12:05:c5:53:17:78:2a:37:b7:
         38:29:fc:47:9c:e9:4a:a5:f4:24:a5:93:f8:20:41:93:1c:73:
         4c:62:ff:f2:3c:85:13:4d:90:5e:3f:9c:ed:53:1d:f9:0f:13:
         78:f3:76:aa:3d:7b:57:e8:af:d3:e8:a5:48:1b:af:12:1f:88:
         b4:63:38:92:3f:47:ba:d5:94:69:a9:46:e8:3f:d3:59:78:28:
         f5:85:d0:e7:c6:2a:c0:44:cf:29:93:de:a5:cf:31:cf:ac:e3:
         c2:f1:36:1a:19:96:07:df:06:f9:52:90:ff:81:3b:65:90:ad:
         b1:5d:8b:bf:22:7d:8f:00:38:4b:e7:b9:9b:bf:e3:dd:3f:77:
         4b:34:fd:09:59:ce:01:56:d6:9f:94:c6:89:91:83:dc:97:c2:
         6f:54:43:64:17:b1:7b:47:54:f8:bc:41:5f:44:92:a2:f6:d6:
         15:aa:e7:be:15:eb:6d:4d:92:6c:84:01:f3:63:3b:4c:d1:36:
         f7:85:4f:fc:f3:d7:ac:9e:c2:07:b2:d1:2f:a7:d4:46:64:e9:
         c6:42:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:12:58 2025 by rpki-client