Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa
File:                     9a20493f-3df8-39b2-beb5-aafa944c96f1.roa (raw, json)
Hash identifier:          lQ5CogoEnzXcuuq7QqnwhJBBcc9cwZi1xkNJ9pwU3wo=
Subject key identifier:   F7:66:E4:A9:29:C4:18:BD:53:1D:02:07:9E:CC:10:9D:79:43:53:0C
Certificate issuer:       /CN=ea4790bc-4699-4a2d-8cae-17f809013230
Certificate serial:       010D0C9F432858490021523F4C66EE34B14EDEC0
Authority key identifier: BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     397550
IP address blocks:        199.231.120.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:52:3f:4c:66:ee:34:b1:4e:de:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ea4790bc-4699-4a2d-8cae-17f809013230
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=9135cfb5-1668-4759-9f90-304071938f6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:22:cc:16:cc:6d:39:5e:c5:9b:d3:2a:ac:93:
                    8b:a0:33:a7:60:df:c9:36:60:59:29:a4:10:25:e2:
                    3d:fc:34:f8:a9:79:73:b1:77:ee:e7:2c:1b:0a:17:
                    88:dd:3c:53:fe:23:72:84:32:a1:36:b5:66:a3:e6:
                    f3:ee:a3:2c:81:4b:25:46:20:b3:e9:05:7b:87:6c:
                    25:62:a8:72:20:51:71:3c:d2:0b:fd:8b:94:95:b5:
                    89:9c:7f:82:43:92:01:54:07:b0:e1:1f:1c:3f:d3:
                    27:ec:c9:ad:bf:11:f2:71:f7:44:a2:2f:ae:8e:c1:
                    32:7e:c0:ea:32:01:60:e3:20:09:42:b0:ce:e1:ba:
                    b9:35:ea:28:b6:c4:ab:43:a8:2e:38:48:ac:93:05:
                    b4:99:a5:31:1f:e0:6a:4d:3d:3e:ec:21:66:af:0c:
                    48:f3:ad:0e:3b:1e:5a:52:6a:a7:25:6f:36:b8:35:
                    1e:b7:2e:02:aa:46:b7:9c:e9:49:71:17:06:00:d0:
                    2a:a4:81:4e:b7:a2:09:5c:74:24:35:f9:28:77:e0:
                    38:99:3d:26:76:c8:e8:5f:9b:fb:a3:03:64:b5:cb:
                    09:a5:7a:aa:63:f5:58:cb:2d:e4:39:8d:2d:af:8a:
                    e2:c8:d2:35:bf:b6:24:fb:c5:7e:ae:b7:58:03:21:
                    15:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:66:E4:A9:29:C4:18:BD:53:1D:02:07:9E:CC:10:9D:79:43:53:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/9a20493f-3df8-39b2-beb5-aafa944c96f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230/ea4790bc-4699-4a2d-8cae-17f809013230.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7E:52:56:B2:3A:0C:40:CC:7F:81:32:9E:48:87:05:56:80:E9:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ea4790bc-4699-4a2d-8cae-17f809013230.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.231.120.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:ae:7f:0e:df:1f:92:75:5b:8b:92:4d:b9:82:73:e2:06:4d:
         64:8b:c2:f6:1c:b1:57:ca:e8:67:50:36:60:2e:8e:26:b9:e6:
         af:da:ed:97:29:7a:51:48:1b:43:4d:fd:1d:84:fe:bd:f8:c0:
         55:bd:dd:dd:6a:e2:41:23:af:d7:7e:1c:76:ea:26:c0:31:0c:
         aa:3b:9b:29:a9:39:7d:c7:97:9f:d4:80:19:c8:08:98:7e:3d:
         4a:16:de:53:9d:76:91:41:d8:2f:90:4b:c9:7f:b9:af:5b:ba:
         34:2f:df:fc:62:ae:9c:0d:9d:99:9c:b5:22:d1:a3:1d:e7:f5:
         35:2f:31:f8:7b:ac:16:db:21:85:64:cd:b7:68:3e:55:66:33:
         3c:6b:19:8e:6f:b4:11:f6:5a:ad:f0:d9:de:fa:20:4a:05:89:
         7f:00:9b:b3:2d:69:6d:96:3f:ab:bb:63:92:84:ed:d1:2d:8a:
         6b:2a:41:09:93:92:94:d3:17:37:d0:19:97:5b:fc:27:77:f1:
         68:9d:8d:bb:18:37:a5:18:93:01:7b:c7:94:69:aa:99:b5:0f:
         5c:54:db:db:cc:c0:ee:c4:92:4a:7a:3e:02:75:e6:12:13:24:
         17:7b:85:93:f2:c6:c4:d9:79:bf:db:0e:89:89:ea:6a:d1:85:
         dc:ba:46:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:07 2025 by rpki-client