Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa
File:                     ef6f39df-d42d-344c-b157-ee274f562c9d.roa (raw, json)
Hash identifier:          R4kqYCsAmgAxx2KsOpodA7x1tS0IP5wi5XKpDVU5mew=
Subject key identifier:   40:41:43:A2:A8:A4:79:30:0D:A6:D4:1E:70:34:C0:5C:28:8E:85:BF
Certificate issuer:       /CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
Certificate serial:       010D0C9F43285849419E8B6D59C3A37FD9F91280
Authority key identifier: E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     53356
IP address blocks:        216.40.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:8b:6d:59:c3:a3:7f:d9:f9:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11059267-bb4b-4d4a-b948-7f3b41b6b702
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=2b1d08e6-a164-4863-993b-0c0489340171
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cf:07:74:98:61:8c:c6:27:d2:97:f4:db:c8:
                    3a:ee:67:10:c4:86:d5:2e:99:c8:8d:7f:9f:49:a5:
                    a6:1d:e2:ca:aa:25:8b:a3:aa:5c:b5:ed:cf:5e:c0:
                    55:38:28:a0:e7:ef:76:24:42:e3:a5:0e:f0:c6:0e:
                    34:a4:0d:b8:d9:0e:95:9b:17:e0:9e:b1:46:73:96:
                    3d:60:8c:2c:da:7e:4c:bd:0a:ac:f2:a1:9b:17:69:
                    1a:68:17:48:df:2f:fd:1f:f9:8a:44:04:91:24:b0:
                    23:d6:45:47:6b:39:05:fe:56:c8:03:e2:39:d6:77:
                    57:2b:83:63:74:87:89:0e:a9:f8:99:04:f8:79:bb:
                    23:d5:e3:01:18:ff:1a:52:0b:0a:a4:a6:35:72:ca:
                    c3:c8:c5:83:aa:ce:1e:52:5b:3e:00:c7:3c:5e:f7:
                    58:5d:c4:dd:f5:a0:8e:e6:39:e8:81:a8:e4:22:19:
                    5c:09:2b:57:a0:30:e6:43:fc:85:97:4a:88:2e:0c:
                    2b:b0:fb:48:a3:2c:7c:68:47:49:22:a3:91:4f:25:
                    ba:a3:df:0e:71:18:82:f5:bb:37:06:9b:4f:c3:cc:
                    63:29:c4:c0:52:5b:64:63:70:e6:eb:ee:a4:46:d7:
                    d4:02:76:15:d1:2a:ef:3f:01:6a:0a:cd:54:f2:a1:
                    40:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:41:43:A2:A8:A4:79:30:0D:A6:D4:1E:70:34:C0:5C:28:8E:85:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/ef6f39df-d42d-344c-b157-ee274f562c9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702/11059267-bb4b-4d4a-b948-7f3b41b6b702.crl

            X509v3 Authority Key Identifier:
                keyid:E6:67:35:61:53:E6:4B:C0:04:DB:69:41:E6:4C:50:9D:73:DB:7D:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/11059267-bb4b-4d4a-b948-7f3b41b6b702.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:87:87:a2:a1:55:bf:cb:79:a3:f0:68:1f:a5:b9:9b:58:40:
         bb:7d:86:02:ce:8d:e0:77:8b:06:fe:ad:62:81:14:94:e5:e8:
         7c:65:57:3a:33:13:13:44:63:84:d0:70:8d:09:7d:4c:d6:5b:
         40:81:96:e0:b5:0b:7a:97:8a:81:62:f7:ae:ec:58:f8:fa:08:
         fd:63:29:ce:ed:c6:92:d8:16:78:49:cc:ff:81:50:63:d6:59:
         ca:25:27:77:08:11:df:25:17:59:01:bf:48:5e:c6:05:69:f7:
         75:69:0d:31:f9:da:c1:75:e8:da:4d:5d:8d:fd:9e:75:97:5f:
         9a:7f:26:3d:4a:be:cd:d4:ee:cf:43:44:c0:65:11:d2:be:db:
         de:6c:67:e8:0c:aa:6d:a5:7c:47:99:e0:39:f0:06:23:30:16:
         81:27:f2:92:fb:1f:c5:58:82:95:f6:51:e4:26:24:30:1f:1d:
         aa:31:d0:43:e4:74:fe:ec:c0:04:c9:05:6f:f7:07:ac:62:be:
         a8:38:68:71:25:ab:dd:9e:27:c8:8c:6d:6f:84:36:85:5c:7e:
         c6:4f:9e:14:54:5f:50:b9:50:76:d0:c6:c6:f5:7f:a7:da:e2:
         f7:97:22:fb:c2:a5:c9:57:4c:d9:46:ba:81:91:73:f8:c1:f2:
         15:cb:27:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:24:09 2025 by rpki-client