Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
File:                     a805dcee-de5f-32cd-8460-f5c507fc9aac.roa (raw, json)
Hash identifier:          o4yVEdEN7gau2fq/jiRXpB9MGN7BtByl3FSQtH3+7fA=
Subject key identifier:   46:C7:E0:43:6E:A6:ED:82:BD:EE:97:87:FC:9F:BB:46:7E:8C:07:03
Certificate issuer:       /CN=b8a29c46-e0f1-4edc-988a-9420affbc339
Certificate serial:       010D0C9F432858494733E9FFC1092ED2548442DC
Authority key identifier: AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     205627
IP address blocks:        170.2.122.0/23 maxlen: 24
                          170.2.124.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e9:ff:c1:09:2e:d2:54:84:42:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8a29c46-e0f1-4edc-988a-9420affbc339
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=87a5a549-a1c0-4154-94cb-d94afebf7f99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:37:6f:78:aa:98:8c:76:1e:56:da:35:67:80:
                    83:aa:c1:86:37:97:9d:75:41:43:94:4e:f0:b1:0b:
                    1a:25:75:45:2c:a5:4f:1a:80:9b:0f:ad:0b:5b:cd:
                    ea:2d:3d:e3:4d:c9:53:ce:7e:a1:05:0a:01:4c:9f:
                    fa:78:60:57:6d:18:cb:8c:42:f7:08:88:d0:0a:04:
                    c8:df:97:2e:54:a4:7c:32:8e:b0:ec:45:ff:3b:71:
                    fa:63:74:f1:7a:ae:64:4d:2c:85:ad:5d:7e:4b:d4:
                    57:9a:44:a0:33:e8:9a:80:0e:be:4a:ce:50:37:a0:
                    ab:c6:1a:d3:0f:cc:74:e4:a2:55:68:c8:4f:46:27:
                    c8:a3:6e:3a:f7:c3:35:70:17:43:a2:25:a8:46:05:
                    af:94:45:d7:00:6a:b0:d3:cd:a9:bf:d6:c1:0f:e7:
                    52:85:0a:03:3c:0b:9b:c5:38:3c:dc:1c:21:21:9c:
                    7b:a3:48:0b:c4:96:ea:67:74:60:76:70:f5:58:ab:
                    22:be:ab:75:a6:d7:c6:5a:62:75:dc:f6:c2:5e:6f:
                    41:4a:66:54:8f:7b:a6:24:74:df:60:58:eb:c2:2e:
                    9e:cd:29:a8:71:ab:79:21:0a:a7:59:15:0c:dc:69:
                    23:08:61:9a:70:1d:44:ac:e0:95:bc:c8:95:6c:de:
                    9b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C7:E0:43:6E:A6:ED:82:BD:EE:97:87:FC:9F:BB:46:7E:8C:07:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/a805dcee-de5f-32cd-8460-f5c507fc9aac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339/b8a29c46-e0f1-4edc-988a-9420affbc339.crl

            X509v3 Authority Key Identifier:
                keyid:AE:5B:91:0A:1A:F7:6A:0A:F9:C8:61:BA:B9:2C:80:AE:41:E0:79:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b8a29c46-e0f1-4edc-988a-9420affbc339.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.2.122.0-170.2.125.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:19:d3:91:e7:d3:04:69:d3:f4:8c:69:b1:b7:60:2d:b4:12:
         55:30:18:12:77:88:3f:d3:0c:1e:f5:0f:3e:f0:32:c3:22:96:
         15:65:8f:9a:72:44:80:5d:d3:4f:55:9f:29:6f:77:22:0a:87:
         fb:90:28:74:23:e5:69:97:38:a9:c9:fc:9f:39:e2:b9:79:d2:
         fc:e0:36:38:0b:19:42:47:79:30:07:fd:a5:97:ef:4f:8d:eb:
         17:da:d8:61:d5:d9:fd:fa:2d:f7:be:f4:1b:c2:7b:e3:5e:9a:
         3d:bd:c3:eb:51:38:07:2c:ab:f9:82:cf:50:33:ac:8f:e4:66:
         c2:1b:4b:de:fa:ae:18:7f:be:9b:fb:90:c2:84:d0:d7:98:91:
         b7:67:3d:25:ec:92:a5:df:29:90:f4:56:02:b1:36:87:57:85:
         6a:5f:b7:f6:86:0a:8a:b8:a0:9a:93:70:21:94:92:fb:2d:24:
         bc:29:57:37:62:de:dd:0b:00:b1:f1:f0:3f:c3:ac:b9:64:c3:
         39:5f:5b:e9:09:54:bc:e0:e9:ba:64:0d:7a:b0:8d:e3:12:c5:
         06:90:a1:75:28:58:49:6b:98:98:20:ee:76:e6:98:ee:50:12:
         e0:07:62:87:e9:f9:e2:32:6e:f6:45:62:b7:ed:0e:f0:a0:aa:
         fd:ee:c2:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:13 2025 by rpki-client