Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa
File:                     e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa (raw, json)
Hash identifier:          IbNCC1muB/OAOHzpEzREEAgTzW413OsJEzWjrX3Csyg=
Subject key identifier:   88:46:20:33:60:15:3D:B0:08:E6:27:3B:38:C5:53:8E:93:54:FC:6B
Certificate issuer:       /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial:       010D0C9F432858489D05E995EA368CDDE8DBC240
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa
Signing time:             Tue 21 Jan 2025 02:00:39 +0000
ROA not before:           Tue 21 Jan 2025 02:00:39 +0000
ROA not after:            Mon 21 Apr 2025 01:00:39 +0000
asID:                     16532
IP address blocks:        205.233.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9d:05:e9:95:ea:36:8c:dd:e8:db:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
        Validity
            Not Before: Jan 21 02:00:39 2025 GMT
            Not After : Apr 21 01:00:39 2025 GMT
        Subject: CN=13b394e2-f98f-40e2-b6fe-8b55dbd9a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:83:75:06:37:92:6c:75:ee:db:b0:e0:3b:9b:
                    ba:af:3e:9b:69:42:a3:fb:68:d6:f3:cf:df:7b:ec:
                    2c:2c:2b:4a:ba:65:29:b1:f8:f0:20:41:3d:a7:52:
                    f0:8e:9b:f5:f7:7e:0d:fc:9c:90:5d:f3:f5:4d:eb:
                    0e:1b:2b:76:5f:f3:2f:0e:51:c0:e1:14:ea:86:7e:
                    63:25:fd:0b:d0:f5:3c:19:27:aa:84:bf:2c:bb:5e:
                    20:7e:a7:9f:bf:d7:55:08:66:f9:87:d3:df:ad:a2:
                    a3:48:36:3a:24:28:35:d3:24:32:7f:2f:e7:38:f0:
                    c7:d5:10:bc:3e:af:6e:4b:fb:de:51:ba:7b:2d:11:
                    31:ec:47:e1:88:df:ed:e8:f0:bd:9e:ab:20:9a:22:
                    25:0c:22:9c:ad:ee:de:78:34:a6:06:91:28:2b:1b:
                    23:1a:e5:f5:d1:dc:11:98:fd:83:77:01:81:57:9c:
                    bb:7a:b2:82:89:69:c7:e8:29:62:76:19:35:f9:2b:
                    c8:85:c1:3b:9a:19:36:5a:94:71:9a:02:d4:1d:fe:
                    d4:84:b2:10:3b:e5:29:3d:f3:73:74:4e:98:a7:47:
                    06:c4:10:76:ef:0e:b7:04:30:cb:ce:3e:41:8b:81:
                    9e:39:12:f1:dd:29:2d:07:64:bd:59:d2:ce:03:b9:
                    59:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:46:20:33:60:15:3D:B0:08:E6:27:3B:38:C5:53:8E:93:54:FC:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/e4f8075c-ec5c-35e2-ba24-e4530074d3c3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl

            X509v3 Authority Key Identifier:
                keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.233.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:3d:e9:0e:ab:1f:30:bd:ec:1b:5f:47:ea:c9:1c:53:e4:bc:
         1a:95:86:d2:ec:a0:50:71:f2:78:e8:c9:26:d4:79:92:c9:72:
         dd:78:fc:76:76:ae:31:bb:a2:d8:7e:23:b4:7c:d6:81:ed:15:
         9f:8d:ce:8b:1a:d6:29:99:d6:9d:fe:42:5f:5c:c3:49:a4:a8:
         1a:3b:20:20:42:0e:c1:9a:6b:e9:24:25:d5:cf:da:4c:82:17:
         7a:76:dc:f9:09:28:67:bf:8d:3a:f1:1f:4f:fb:d0:f4:bc:f3:
         99:ee:0f:ff:2e:45:9b:ba:4b:e8:ed:37:d1:fe:f4:4b:7b:a3:
         c3:5b:a8:c4:a3:e4:6d:4f:88:c4:9d:b6:16:f3:43:27:b5:74:
         a9:6b:56:57:ca:5c:71:0a:0d:51:f8:d9:1f:81:b3:39:42:4d:
         ee:20:61:89:9a:09:f9:7d:b3:c5:98:68:b7:e0:e2:4b:a9:7d:
         e2:96:d7:6a:1c:d0:b7:48:8b:b6:22:8a:1f:a7:d3:aa:0d:e4:
         e4:30:84:fd:85:77:bf:34:97:c2:0b:fb:78:dc:94:c3:fa:18:
         c9:d2:6c:61:ea:36:99:51:a2:c7:d6:f1:60:87:fc:a4:11:fa:
         70:8c:9f:b5:51:c6:e8:47:36:51:0d:c5:f0:27:63:77:11:b7:
         8b:36:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:00:40 2025 by rpki-client