Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
File:                     22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa (raw, json)
Hash identifier:          NbyPKyGgpi/6yADcQTzM86io9VUywRtU9pryqH8XT9w=
Subject key identifier:   9D:A0:D7:21:4D:63:42:7C:E8:02:12:7D:07:AE:D8:1D:C6:97:93:2A
Certificate issuer:       /CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
Certificate serial:       010D0C9F43285848CEBA18DC6562A137963086C0
Authority key identifier: B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa
Signing time:             Fri 07 Feb 2025 21:18:22 +0000
ROA not before:           Fri 07 Feb 2025 21:18:22 +0000
ROA not after:            Thu 08 May 2025 20:18:22 +0000
asID:                     2615
IP address blocks:        147.1.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ce:ba:18:dc:65:62:a1:37:96:30:86:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab8eafa4-f71f-4bae-9825-e56948a2f523
        Validity
            Not Before: Feb  7 21:18:22 2025 GMT
            Not After : May  8 20:18:22 2025 GMT
        Subject: CN=39e67c08-e677-447f-a521-7d25b791baf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:54:4e:14:13:8d:cf:7c:23:4a:9f:37:86:db:
                    7a:fd:40:2b:7a:ce:58:65:4c:a7:02:4c:c5:d1:33:
                    a5:ce:6f:1d:80:b8:fe:56:6f:e6:17:07:08:e9:ad:
                    84:1b:32:92:7f:1f:b1:7d:28:fc:13:1b:06:d5:c4:
                    d8:72:2a:33:e3:bc:3c:ae:4d:b5:26:de:95:91:65:
                    0d:2a:26:84:6a:bd:89:a7:d6:7b:5f:3a:e8:f8:80:
                    29:8d:1c:59:45:b1:4e:c6:4a:cf:65:92:03:0e:b9:
                    23:eb:84:c9:a5:80:84:09:6c:8e:88:91:3a:ed:b7:
                    fc:22:6e:4b:10:55:37:25:c2:25:25:42:96:b6:48:
                    d3:3e:f0:84:d5:e1:f1:a5:c6:9d:c0:b4:49:69:7d:
                    6d:db:73:66:f6:e3:31:67:f8:99:39:4d:f2:06:e9:
                    f0:36:47:23:88:be:bb:47:ba:e3:09:56:68:d2:c0:
                    63:79:a6:68:22:fb:ae:01:d1:d5:1a:70:3f:27:b2:
                    79:6e:8b:c2:44:fa:48:23:44:34:7d:8f:4d:12:b3:
                    35:c9:0f:85:6f:7f:cf:05:df:c5:a3:0c:9c:e1:c6:
                    fc:71:81:61:fb:3f:3d:1b:4d:fa:69:3d:7b:08:b1:
                    a9:e7:a4:af:46:40:08:2c:01:fb:f8:0e:1d:9f:ac:
                    53:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:A0:D7:21:4D:63:42:7C:E8:02:12:7D:07:AE:D8:1D:C6:97:93:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/22d1cb07-db2d-3c7d-8202-e63ff7a8f0cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523/ab8eafa4-f71f-4bae-9825-e56948a2f523.crl

            X509v3 Authority Key Identifier:
                keyid:B7:3F:2E:F1:AB:2C:52:CD:41:29:36:CE:CD:64:B5:79:7A:EF:11:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab8eafa4-f71f-4bae-9825-e56948a2f523.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.1.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:67:3f:44:c9:53:f2:15:bb:2b:90:a5:05:96:5f:fb:a3:10:
         f2:1f:a6:53:51:0e:87:2e:af:30:bc:6b:04:25:17:5b:32:4c:
         77:ab:b5:51:56:91:43:3a:8e:99:2d:b4:78:4f:ac:41:76:7a:
         24:d6:28:71:63:b3:e0:e5:60:6c:9b:0b:4c:bd:3a:db:bb:02:
         4c:ac:7f:ce:d7:af:3d:fa:75:0f:c9:22:e3:ea:2b:e7:ef:c1:
         62:a5:09:1b:03:10:58:46:28:0c:ba:9a:1d:35:30:20:1a:3f:
         89:28:23:a6:2d:c5:ee:5f:9e:69:0d:3a:4f:2d:c9:fa:31:ee:
         f4:6e:54:c3:d8:49:33:78:0e:b4:9f:c5:c0:fc:c6:29:61:af:
         bf:d2:3d:00:2e:8b:1f:e5:a0:d0:18:dd:e3:4d:b6:23:17:80:
         5c:ae:10:10:dc:fb:22:5f:83:09:9b:46:6a:5b:45:bd:24:52:
         da:9a:1b:5d:c0:3e:b9:0c:71:1e:a0:4d:92:c9:61:84:eb:84:
         ea:2c:ba:19:9a:18:37:ff:de:9e:af:4a:91:aa:45:8c:66:b8:
         84:c0:7d:b2:60:13:e4:a1:97:3e:cb:c1:c3:8f:61:0d:48:13:
         95:16:a9:21:3e:c0:14:94:ed:38:d3:6d:b8:59:85:3d:7d:3a:
         9b:39:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:29:41 2025 by rpki-client