Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa
File:                     ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa (raw, json)
Hash identifier:          WEkYALsD8JyOnK5GEwf9GTqP2ygqgDWrzVbNnmNiAfA=
Subject key identifier:   F4:EE:01:8D:87:AD:05:BF:31:D4:6C:A5:E7:55:59:47:8B:1C:E3:5D
Certificate issuer:       /CN=80e43277-4490-4cc9-99ec-5726af08c8ab
Certificate serial:       010D0C9F4328584919417D67397E741C81128C80
Authority key identifier: F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     27696
IP address blocks:        63.245.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:7d:67:39:7e:74:1c:81:12:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80e43277-4490-4cc9-99ec-5726af08c8ab
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=844967f3-958d-4643-aa46-af832ac45dbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:be:62:15:93:7b:b5:83:c6:ef:3d:e5:3f:8c:
                    dc:2c:37:76:55:b3:0e:6a:31:a2:51:97:9a:e6:6c:
                    12:46:63:85:24:71:4b:ef:e0:38:12:ef:06:8b:64:
                    29:c6:7d:03:0e:a1:36:94:84:4a:a7:f8:27:ec:a6:
                    3f:04:08:75:51:a2:ec:e9:14:d6:80:e5:de:d2:12:
                    6b:f6:d8:58:35:71:52:ab:de:57:0d:76:6e:dd:97:
                    9e:85:ea:fb:d5:89:95:9a:be:bf:3b:3d:9e:2d:55:
                    4c:4a:69:e1:b8:4f:e3:fe:b4:9f:fb:9b:f9:86:78:
                    d3:57:72:c1:78:14:bf:a4:fa:79:80:9a:de:8b:c6:
                    73:ee:54:af:cd:53:8b:e4:b1:f3:9b:2c:3e:21:7c:
                    9a:79:5d:78:93:c7:fa:72:f0:4a:a2:66:5a:9b:f4:
                    e6:d5:dd:07:cf:06:cf:48:14:0e:a3:ce:09:ea:c3:
                    a5:b6:2a:bd:98:83:3b:a8:f4:25:31:10:6f:16:54:
                    da:aa:e9:b3:9c:cd:1d:d1:10:f0:13:c0:14:5f:dd:
                    d2:2c:80:0d:30:9a:98:97:80:08:85:04:9b:45:86:
                    9c:fa:3d:b2:1f:bd:c0:16:58:00:bd:87:5c:c7:34:
                    d2:56:de:69:0c:1c:31:5e:ce:a5:89:73:7d:55:df:
                    a0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:EE:01:8D:87:AD:05:BF:31:D4:6C:A5:E7:55:59:47:8B:1C:E3:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/ab3fc158-7dda-3124-86ab-15cf0f749c5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab/80e43277-4490-4cc9-99ec-5726af08c8ab.crl

            X509v3 Authority Key Identifier:
                keyid:F5:6E:50:29:70:10:AE:43:41:97:E1:FF:8C:28:E4:92:39:1D:DD:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/80e43277-4490-4cc9-99ec-5726af08c8ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:c3:a1:a8:49:0c:9f:e9:28:60:7b:b4:28:ce:f4:68:20:
         1e:a1:5e:2f:19:2a:50:10:ed:ec:f7:6d:9e:11:ae:87:ef:e6:
         c5:86:f9:fc:15:da:ce:3c:18:f2:c0:bd:61:33:1c:1b:36:c5:
         42:d8:24:ab:d1:50:c9:6b:e2:4d:84:46:56:9c:37:3e:43:66:
         8b:c1:2b:74:c1:5b:49:fd:93:b4:df:1c:f9:cb:f0:08:b2:b5:
         e6:7b:9e:74:ee:ca:a5:82:82:db:4b:58:03:3d:ad:3a:ac:ea:
         e0:52:dc:25:d0:db:a7:db:41:1d:1f:4b:50:de:d7:40:3b:a4:
         59:6d:1b:f9:d9:37:fb:26:63:db:20:16:20:80:55:e4:12:a7:
         11:e2:3d:c0:62:c8:80:b9:98:94:99:7d:e5:d6:d9:cd:67:1b:
         c9:75:c4:8f:5e:f9:0a:9a:28:fd:ea:26:2e:55:a2:05:3a:90:
         11:4b:05:2d:7a:10:d5:1c:f1:91:de:69:9b:54:09:63:ee:d2:
         a4:43:b9:6e:81:a7:ac:a1:37:80:a9:d3:dd:f4:21:48:c3:23:
         39:9e:48:a1:92:60:6c:46:03:e2:d9:64:23:ab:b9:04:70:6c:
         0f:5c:5c:96:0d:df:62:6c:53:bb:78:74:3f:10:bc:9a:0e:b8:
         d8:6c:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:05:17 2025 by rpki-client