Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/7a3cf317-375a-391d-9ea6-5b0c3f515ddd.roa
File:                     7a3cf317-375a-391d-9ea6-5b0c3f515ddd.roa (raw, json)
Hash identifier:          wgyqgCsqkuFNyME/8jHRjYq2IplBOEBeGQGJTIY1PZM=
Subject key identifier:   81:38:76:2A:FD:68:26:58:C7:0B:92:92:E1:52:51:8F:F4:2C:3D:D9
Certificate issuer:       /CN=24e52767-6012-48fa-94d1-fdf7be879715
Certificate serial:       010D0C9F4328584971142EAB3ACF2DFF7A0358C0
Authority key identifier: 4A:03:AF:BD:E4:43:FE:8C:DF:70:A5:05:98:F0:4D:82:25:35:DC:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/7a3cf317-375a-391d-9ea6-5b0c3f515ddd.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     26129
IP address blocks:        69.54.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2e:ab:3a:cf:2d:ff:7a:03:58:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24e52767-6012-48fa-94d1-fdf7be879715
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=db56d3fb-3a3f-4721-ade7-423933ce5226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:84:2e:a3:c3:7d:f5:95:89:c1:3c:16:3b:1a:
                    38:d4:cc:30:85:1a:d9:18:c0:3c:06:d1:f5:1c:c7:
                    97:c9:8a:82:bf:fd:6e:f2:a1:14:db:b8:00:f9:1c:
                    00:f5:f1:ff:33:16:ee:d8:2f:20:69:b4:f1:cc:47:
                    00:40:a8:ae:3c:a1:41:5e:0f:64:96:4b:1b:2d:37:
                    78:d7:c3:2b:fa:46:58:47:ea:11:d0:26:28:ff:2d:
                    16:ec:fd:2a:7a:28:89:94:9e:2e:e8:c4:6e:b2:62:
                    d3:c5:41:d7:85:81:86:35:97:01:27:ba:19:1c:9b:
                    75:cd:9a:b2:1d:22:53:4e:f2:66:84:aa:42:3f:a4:
                    e2:0e:7b:1f:60:aa:59:5f:b3:81:0f:92:59:d6:6e:
                    5a:b6:77:9c:82:34:55:dd:c4:2b:7f:69:fa:69:63:
                    c2:31:f1:0d:93:b9:6d:78:06:75:46:a5:db:d9:36:
                    d5:90:c2:88:9d:aa:ba:c3:9d:f2:73:fb:b6:82:01:
                    26:cd:ac:2e:47:c4:c2:b1:3e:ee:73:47:57:34:01:
                    75:e0:1b:39:d0:5e:d3:76:ff:6a:76:25:6d:c5:06:
                    ce:26:b6:ce:f8:ca:c8:48:30:5a:42:4a:91:15:33:
                    01:4c:06:b2:d6:ca:c7:90:fd:a5:0b:16:27:8e:ab:
                    81:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:76:2A:FD:68:26:58:C7:0B:92:92:E1:52:51:8F:F4:2C:3D:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/7a3cf317-375a-391d-9ea6-5b0c3f515ddd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715/24e52767-6012-48fa-94d1-fdf7be879715.crl

            X509v3 Authority Key Identifier:
                keyid:4A:03:AF:BD:E4:43:FE:8C:DF:70:A5:05:98:F0:4D:82:25:35:DC:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/24e52767-6012-48fa-94d1-fdf7be879715.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.54.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:33:9b:61:20:d7:c2:61:88:37:14:df:45:42:99:92:e8:c9:
         9b:ee:b6:5b:d6:1d:ae:1d:15:ce:36:f9:07:37:6b:a1:3f:03:
         8a:67:91:79:d0:c4:95:72:85:1d:42:c4:e0:2d:1d:72:43:25:
         43:71:33:2c:59:c5:ae:ff:e5:5d:ea:93:d2:3c:da:60:f0:81:
         0e:0d:da:20:bd:72:71:8e:40:45:e7:85:53:f8:de:05:b3:a5:
         58:bc:b8:5b:74:05:91:73:f6:bd:01:dd:6f:57:a2:c9:33:ad:
         3e:d6:bd:31:32:ae:3c:e9:25:20:e0:86:9e:d4:47:00:f4:74:
         07:77:e9:03:1f:05:b6:e2:d7:d2:09:dc:6b:94:04:b7:97:f7:
         1c:17:c9:b6:2d:09:57:26:c7:74:c6:00:75:1b:a5:c0:be:65:
         bb:4b:e6:71:86:4e:be:8f:77:1a:c4:7c:7e:e3:bb:44:c2:8a:
         7d:27:b7:39:ea:93:65:bc:e3:43:ae:9f:40:9c:a2:15:e5:98:
         3f:a4:21:ba:07:0d:f1:ed:a1:9a:cb:6c:c4:0a:be:37:79:83:
         c1:fa:e4:82:c6:3c:75:6d:41:ff:69:16:57:55:35:9f:67:70:
         33:1e:c4:19:8d:eb:15:86:3e:01:7d:b9:b3:be:0c:3a:3b:ed:
         0e:71:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:46:24 2025 by rpki-client