Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b71afaaa-5c9d-3c50-bcb4-5ce7afb06bab.roa
File:                     b71afaaa-5c9d-3c50-bcb4-5ce7afb06bab.roa (raw, json)
Hash identifier:          4B9xnT3ZdhZQcNm34DB/2aLvjtN8khH7Qlsjmpqu9PY=
Subject key identifier:   41:CB:BC:37:53:8B:EA:2E:45:C9:28:F7:49:F8:2B:B4:9F:EA:0C:7D
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DF86D3455329DD3D8376300
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b71afaaa-5c9d-3c50-bcb4-5ce7afb06bab.roa
Signing time:             Fri 11 Apr 2025 15:50:25 +0000
ROA not before:           Fri 11 Apr 2025 15:50:25 +0000
ROA not after:            Thu 10 Jul 2025 15:50:25 +0000
asID:                     137409
IP address blocks:        64.50.200.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:f8:6d:34:55:32:9d:d3:d8:37:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:50:25 2025 GMT
            Not After : Jul 10 15:50:25 2025 GMT
        Subject: CN=41714480-13f0-4766-ad71-44528f1f1b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:00:b3:ff:18:50:ed:af:2b:66:e7:7e:b4:22:
                    0e:1b:33:b6:bc:f8:16:61:27:cc:07:f7:c1:bb:98:
                    9b:06:4a:19:a4:af:3e:9b:a3:bc:cc:4c:c8:37:23:
                    ac:0f:56:e1:62:b6:e8:85:d9:03:be:80:a2:b3:f5:
                    40:5d:50:97:ab:d9:c0:4c:f7:54:38:e3:d2:f6:ac:
                    b4:0a:df:18:ff:08:bf:5c:f8:a4:91:05:08:db:41:
                    bd:91:19:69:f6:63:41:bf:92:b7:46:d4:47:99:e8:
                    6a:08:b9:84:ed:d5:91:7a:b1:cc:1c:40:9e:9e:90:
                    2f:6d:ed:40:04:5c:d4:01:6e:a3:43:f6:76:b4:d2:
                    cc:cb:5f:65:9e:1e:61:6e:cf:e0:60:19:55:50:0c:
                    e6:c0:36:d1:79:fb:2b:2c:06:0b:5f:0a:50:a9:2c:
                    6d:0b:5b:c9:de:45:21:5e:40:c1:4e:02:32:70:ee:
                    15:55:5b:03:1a:cd:5a:e2:14:5c:f9:03:b8:80:04:
                    86:6b:9e:f5:85:e5:a3:26:ff:c0:b7:ad:1d:a0:77:
                    3f:c3:fa:bc:c3:f7:f1:5f:2e:a0:a5:a7:1d:ef:37:
                    24:80:9a:ab:e6:2d:26:74:95:15:f5:55:2c:a2:8d:
                    ca:96:26:d5:d1:ae:e6:46:6b:4e:23:56:c8:68:f8:
                    bd:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:CB:BC:37:53:8B:EA:2E:45:C9:28:F7:49:F8:2B:B4:9F:EA:0C:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/b71afaaa-5c9d-3c50-bcb4-5ce7afb06bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.50.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:08:f7:5b:93:da:1c:e5:7a:8c:4e:1a:ea:c8:a0:65:a7:0d:
         9b:c3:01:22:e6:f1:13:19:79:ba:ea:5f:b5:89:22:c1:0f:ce:
         10:f6:8a:95:88:ba:53:16:14:91:58:d4:06:a0:fb:87:35:83:
         6d:61:5d:ff:84:40:d8:a9:af:f5:e7:57:d0:33:fe:87:ab:13:
         97:dd:34:52:75:7d:04:4e:d9:08:d8:6d:70:ac:ce:96:03:bf:
         14:d9:d3:b9:b6:b2:55:23:ad:20:28:7a:d2:62:46:b7:7c:3a:
         44:cd:a9:27:90:88:c9:fa:e1:17:7b:8a:b2:e1:0b:8a:a7:d1:
         6d:59:78:66:cd:54:eb:73:c6:f7:6e:61:4c:95:7b:aa:03:b7:
         f3:e5:9c:d9:48:38:c4:8b:eb:90:ce:a6:9f:cb:52:63:8c:d9:
         b7:41:72:e5:ec:60:cc:d7:28:0c:98:ff:2a:26:15:fe:ed:40:
         7d:10:7a:7a:bb:c2:cc:3a:35:b0:c0:e5:89:e8:8e:aa:b1:1e:
         90:13:e7:48:0b:b3:75:18:9b:d8:d2:e1:39:46:42:aa:f0:58:
         b4:aa:36:02:3d:16:53:1a:9a:b5:a9:41:af:a4:09:72:7a:6a:
         ff:5e:e4:76:60:1e:ad:a5:77:7a:c5:da:f1:4a:e7:b1:f7:e9:
         2b:24:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 11:34:19 2025 by rpki-client