Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/1799bd79-18b8-3e04-897a-cb96ff430eb0.roa
File:                     1799bd79-18b8-3e04-897a-cb96ff430eb0.roa (raw, json)
Hash identifier:          z8PGWpsgKVbH4pn+whErxcd5B6eHJ888Wllm8WDGo/I=
Subject key identifier:   0E:EC:25:FC:8C:17:96:46:7B:56:D9:99:E9:52:40:ED:EF:70:C6:A3
Certificate issuer:       /CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
Certificate serial:       010D0C9F43285849393E7BA122D72072AA3B6980
Authority key identifier: 09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/1799bd79-18b8-3e04-897a-cb96ff430eb0.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     30722
IP address blocks:        47.53.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7b:a1:22:d7:20:72:aa:3b:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a39f160-9ce8-488c-8af5-e292b7a545c1
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=6c8ec902-1b36-4a2f-bea9-551248aa7429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:51:26:c3:18:9b:eb:70:1a:8d:c3:7b:cc:61:
                    3d:87:dc:f3:d7:c5:e2:c6:66:b7:59:d4:81:be:62:
                    e1:13:8f:a9:b9:87:89:d4:99:ab:6a:6a:1b:e4:74:
                    0f:81:6c:8f:c2:c3:fa:04:d8:6e:4d:a9:d6:02:00:
                    1e:3d:ab:96:19:45:41:29:8c:9f:85:8d:b6:62:21:
                    70:16:b4:31:0b:1c:82:f5:21:82:27:f3:9f:e1:72:
                    20:b1:5b:35:43:06:b1:06:5b:7e:e2:d3:6b:81:15:
                    06:f7:d3:05:e4:7a:0f:fc:f8:b9:90:e4:b2:69:fe:
                    31:c3:37:92:e6:de:b4:2b:7b:6c:2d:42:e2:f6:12:
                    cf:7b:07:a1:13:70:2f:66:67:14:a6:ad:1a:e4:7a:
                    26:dd:4d:15:7b:aa:64:9b:60:a3:21:ae:6c:c1:1a:
                    8d:56:1f:d9:3c:43:c1:b1:ce:aa:51:cf:29:82:1e:
                    a6:ff:f9:e5:5c:ab:08:99:e1:9e:5f:23:86:54:40:
                    a3:ba:e6:87:ed:56:29:79:05:9c:2d:c0:be:59:98:
                    e6:f2:1a:f7:87:76:15:f5:50:e7:a8:5c:05:ea:00:
                    91:0d:56:f0:b5:26:ff:99:71:dd:68:e5:d5:71:3f:
                    b0:a4:3e:a6:4c:99:a8:95:58:60:02:d8:d4:9d:8d:
                    09:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:EC:25:FC:8C:17:96:46:7B:56:D9:99:E9:52:40:ED:EF:70:C6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/1799bd79-18b8-3e04-897a-cb96ff430eb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1/4a39f160-9ce8-488c-8af5-e292b7a545c1.crl

            X509v3 Authority Key Identifier:
                keyid:09:49:32:1A:C7:49:22:7F:8D:77:5E:DC:47:A6:5D:CC:E7:34:D3:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a39f160-9ce8-488c-8af5-e292b7a545c1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  47.53.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:ed:78:51:37:57:78:2a:cd:db:f6:f4:7d:c5:51:d9:5b:17:
         3e:66:4a:14:ff:45:ca:10:97:76:96:5e:85:9f:ac:31:c0:2a:
         99:39:d0:e5:04:4f:58:b2:95:d7:c8:d6:20:67:db:7c:4e:06:
         57:d9:fc:e0:1b:25:1e:54:30:27:86:49:ba:d2:88:01:03:7a:
         e1:a1:e6:ee:7e:91:d4:2d:92:97:1c:07:8d:3c:06:68:c0:a1:
         a7:96:6c:40:58:48:e2:e3:ac:7d:1b:c8:5b:fb:ba:6e:f2:ef:
         e8:b5:8b:ab:4f:19:c7:b1:a5:a6:f4:43:36:bb:a2:3b:bf:bb:
         37:cc:39:87:34:b2:2c:ac:ef:19:80:15:3b:86:ec:20:80:3d:
         d4:a0:a7:99:d6:9a:d6:44:e6:44:a2:a8:db:a7:e6:93:8b:3f:
         d3:d7:2f:a8:ef:b8:be:21:8f:89:a5:26:00:69:e5:ac:ac:4d:
         9d:64:d7:4b:c8:98:7f:78:00:5a:67:e9:52:fd:a5:07:65:9d:
         4a:51:e1:19:d9:0d:a2:41:d8:13:c5:00:62:e8:53:1c:2b:29:
         d0:58:1a:cc:08:5b:68:ba:77:a1:38:f4:fd:b2:8f:43:f9:be:
         f6:37:f8:5e:3c:f2:0e:87:9f:e7:ea:f3:52:aa:48:39:d5:d9:
         c8:21:ac:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:07:01 2025 by rpki-client