Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa
File:                     003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa (raw, json)
Hash identifier:          phsY95GrKhr28zrRJjEEjjGUsKl4MoEFl94atmcn6wU=
Subject key identifier:   DB:48:0F:3C:D4:D4:5F:D2:7C:25:D9:13:21:88:2F:65:59:29:76:2E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C42EC31CF84641FC5B7BC0
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        172.111.121.64/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:2e:c3:1c:f8:46:41:fc:5b:7b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=792eb7c9-863b-4ab9-b06c-109456ef677b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c6:f3:8f:64:bb:cb:ea:a4:20:fe:74:e2:62:
                    86:4b:37:1b:4c:10:b6:e0:a4:98:3c:90:2b:b3:d9:
                    91:e0:4a:87:20:ae:e3:df:e2:49:48:ce:bf:71:99:
                    42:83:f6:b4:54:82:e5:a8:d5:1e:7e:b5:db:99:8c:
                    40:39:89:38:ef:50:5a:a8:ce:2a:f0:66:9f:3b:eb:
                    8a:12:cc:15:3d:28:76:d9:f2:c7:10:a4:b4:42:00:
                    b7:39:89:97:55:9a:4d:76:3f:38:dd:9b:71:40:c2:
                    b4:74:44:7f:e1:7b:d8:e3:8b:0d:1d:e7:a8:90:2a:
                    43:87:22:40:04:14:91:5e:ed:5d:20:c1:30:88:98:
                    5e:4a:66:a7:54:07:b9:cc:cd:ae:37:9a:c8:92:df:
                    a7:d5:5d:43:8a:69:82:21:bd:90:cb:9d:a9:77:80:
                    8e:b8:7d:64:ce:d6:ba:e4:12:54:d2:3c:c7:53:4a:
                    25:56:3a:49:bd:26:a0:94:7c:bd:73:22:6f:33:a3:
                    32:65:46:b5:e9:78:e2:4e:62:21:5a:c5:a3:17:8d:
                    1b:d5:eb:e2:97:36:4a:54:ab:23:2f:4f:85:ea:68:
                    27:1a:ac:20:97:b3:9e:86:fb:58:23:78:7a:1a:80:
                    63:e4:84:d9:33:02:ca:1d:bd:c6:af:28:5f:ca:bb:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:48:0F:3C:D4:D4:5F:D2:7C:25:D9:13:21:88:2F:65:59:29:76:2E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/003a0959-c2a7-3daf-a86d-ff53afbbd0a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.121.64/26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9a:f2:1b:9d:46:ad:93:63:26:b6:4f:48:9e:22:84:52:2d:
         cd:40:fa:7b:f5:15:73:b5:b0:20:1b:b1:ca:98:d3:92:6e:3d:
         4c:30:a1:9d:e2:4b:cb:38:f9:b1:69:16:88:f3:50:85:b8:17:
         70:3c:ea:eb:ea:df:e3:f0:b2:35:a9:19:8a:c6:30:f2:9b:75:
         e0:c5:c4:1e:de:5a:78:5a:35:ac:59:be:d7:74:e4:23:33:ce:
         c5:b7:48:e0:e0:3e:10:e6:8a:ee:f4:84:d4:99:3f:b0:f3:ba:
         fe:6b:07:1b:23:00:e4:31:b2:61:09:13:b7:4d:ad:a8:bf:80:
         6f:2b:94:f9:3d:be:9b:5d:50:34:01:3b:73:e9:29:83:71:b4:
         d7:6c:25:c4:c9:52:78:4d:d2:3f:8b:62:bf:84:a3:2c:5c:fb:
         96:d5:e1:89:70:42:b7:21:ae:44:c1:dd:ab:0c:6c:2a:ee:c3:
         ab:55:90:ac:c2:b5:1b:03:20:55:b1:d6:26:aa:3f:cf:67:48:
         96:ca:50:4d:3f:60:8b:38:af:34:39:91:ef:89:16:82:65:5f:
         12:86:5a:35:85:0e:a1:86:f1:50:9d:ef:50:01:0e:e6:1d:18:
         3c:af:b4:c1:ab:d2:b7:33:83:15:c1:7a:8a:be:88:30:a8:50:
         93:32:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 02:47:22 2025 by rpki-client