Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa
File:                     0bd8ae8c-926a-3326-b752-65b165f04694.roa (raw, json)
Hash identifier:          rtCbhI1owh9Z2T69JEV/0aiAOdzXi6NDwdC5bVlhaUc=
Subject key identifier:   2E:15:44:86:62:C2:81:C4:4B:39:8B:0F:9C:23:84:DB:E1:F9:7E:E0
Certificate issuer:       /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial:       010D0C9F43285848BE656B257BDA2B8EE0071B80
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa
Signing time:             Sun 02 Feb 2025 00:54:49 +0000
ROA not before:           Sun 02 Feb 2025 00:54:49 +0000
ROA not after:            Fri 02 May 2025 23:54:49 +0000
asID:                     46365
IP address blocks:        23.152.56.0/24 maxlen: 24
                          198.135.179.0/24 maxlen: 24
                          2602:2cd::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:65:6b:25:7b:da:2b:8e:e0:07:1b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Validity
            Not Before: Feb  2 00:54:49 2025 GMT
            Not After : May  2 23:54:49 2025 GMT
        Subject: CN=26cbc6ad-7eb7-41e9-8df7-f3a809f324af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7a:ed:fe:ac:2e:ec:45:7f:f6:e1:32:14:b7:
                    76:49:1a:a7:6d:a4:1c:83:e3:6c:9f:0e:09:b3:6e:
                    ca:cb:0a:48:54:77:0d:a1:98:fb:c2:bf:2e:e7:17:
                    70:de:3b:99:04:60:c7:16:51:e5:5b:46:f0:f3:a9:
                    7e:66:b2:67:86:71:34:dd:f8:a0:52:99:77:e7:03:
                    42:3e:00:ba:cb:ef:b2:99:cc:28:57:67:b1:4e:e4:
                    6a:2d:eb:be:b7:de:79:fb:ec:f9:3c:c6:68:55:bd:
                    7a:01:fe:82:db:fd:fe:d2:f1:28:6c:04:a6:d0:d7:
                    46:45:c6:95:e9:6f:51:b3:91:59:b2:97:66:68:c2:
                    a5:96:35:89:f9:60:24:af:2c:e9:d4:31:b6:7e:e6:
                    6f:ca:4f:29:37:7f:d8:c3:13:86:3c:79:19:a1:2b:
                    17:fd:b5:d7:5e:f2:10:44:b7:27:5b:54:13:83:ae:
                    cb:43:c4:45:38:ba:8a:6a:db:7b:45:87:df:e1:fd:
                    f6:0b:5a:82:d9:e6:77:b3:0b:c5:48:27:07:11:69:
                    82:96:e8:32:b6:f6:8b:17:85:61:de:b9:97:07:46:
                    ba:24:c9:1c:7f:14:af:85:d1:08:77:56:7d:8e:ad:
                    6f:92:17:93:d0:65:08:a3:8c:78:a1:6d:a5:ff:87:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:15:44:86:62:C2:81:C4:4B:39:8B:0F:9C:23:84:DB:E1:F9:7E:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/0bd8ae8c-926a-3326-b752-65b165f04694.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.152.56.0/24
                  198.135.179.0/24
                IPv6:
                  2602:2cd::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:9e:88:f4:4c:95:f1:41:70:2e:45:32:12:9d:0c:c1:c6:fb:
         8c:86:cb:11:28:29:83:68:c0:17:c7:a2:13:6d:64:f8:65:4a:
         18:e6:67:30:1e:4d:9a:fe:6c:7a:0b:c5:3b:0d:8d:5f:e9:38:
         60:55:ab:b3:f7:6e:16:bf:44:29:e1:69:f3:9b:5b:9e:91:a4:
         95:a6:c9:ab:ed:44:97:3e:10:1d:ed:f7:e2:b0:48:49:dc:2d:
         60:63:e4:2d:1b:6b:0f:74:c3:43:d1:c8:ec:94:e7:e7:98:3b:
         70:57:c6:53:6f:dc:d4:54:f0:46:4e:e4:4a:02:c5:ec:ae:ef:
         78:23:bb:f0:c2:76:10:0f:c4:39:f5:64:5f:1e:8e:ac:bb:00:
         8f:2e:98:26:e1:b5:c9:0f:8f:37:70:2b:07:18:16:f1:01:4d:
         ec:6b:89:26:ae:ba:b4:4b:fe:cd:ee:87:bb:5f:25:5d:2a:be:
         cb:25:ae:7b:c2:77:d7:a9:0d:8d:60:45:df:3a:1f:74:36:fc:
         80:ab:a9:e6:64:83:d2:11:82:4c:4c:f9:38:00:22:e6:19:f8:
         11:61:10:af:2f:82:88:f8:0b:81:b2:f7:e6:f7:15:7f:16:24:
         64:fc:7c:06:ab:bf:7e:1f:01:ed:39:44:33:4a:1b:38:cb:35:
         c2:fe:fd:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:07:10 2025 by rpki-client