Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
File:                     c31be989-e6da-32a1-bc88-9cfec65bed62.roa (raw, json)
Hash identifier:          8vvCO66AG1Iq5U0DH9Jk3DEZ/4Qeu0240CSD2Pw/EN0=
Subject key identifier:   61:7A:73:F9:B7:9C:60:10:88:5F:D1:48:A1:8D:87:81:53:07:F1:BB
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F43285849287E62615868087B47463940
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     397423
IP address blocks:        104.255.173.0/24 maxlen: 24
                          155.254.16.0/23 maxlen: 24
                          155.254.28.0/23 maxlen: 24
                          2605:6c80:6::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:62:61:58:68:08:7b:47:46:39:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=dbe4af42-b9c4-4ac8-8c92-79444a015765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:99:ad:82:04:64:84:6c:4d:0a:fb:a3:70:a6:
                    e4:48:46:10:0c:46:2c:f8:31:46:c8:49:16:2f:4f:
                    a7:77:e2:ea:2f:dc:70:24:89:ab:38:32:75:19:29:
                    ef:73:d7:9a:f4:da:4f:66:e4:80:07:57:3e:eb:3a:
                    a6:b3:cf:3a:f6:ab:07:9a:7e:48:13:c2:df:ac:af:
                    72:fe:5a:f0:68:8d:18:9b:25:89:6a:98:af:36:05:
                    ad:5a:bd:aa:18:06:63:60:b7:9b:56:6c:25:4e:30:
                    6d:e7:ee:b0:d2:f0:13:f1:e1:6f:26:6f:af:dd:6a:
                    9e:4f:e3:7d:66:0e:bc:cf:b5:4a:f7:c5:9d:45:80:
                    d6:18:32:9f:70:e9:1e:3b:e0:2c:9b:40:b2:66:97:
                    20:bd:4c:8f:b8:7c:a3:b6:e0:07:dc:08:94:f8:8d:
                    7b:45:44:6d:bf:5d:a9:b4:c0:e8:79:08:f8:11:26:
                    45:ab:ff:89:a8:d7:44:e0:d7:19:33:0b:1f:9f:8c:
                    68:1f:62:d5:25:08:26:be:0f:d6:bf:7e:31:35:ad:
                    b8:c9:6b:b8:7d:57:af:62:88:d3:c8:89:38:81:60:
                    7b:76:e1:35:a7:17:f2:85:ba:6a:61:3f:86:2c:4c:
                    0f:5d:01:b3:f5:88:94:fb:a5:6c:01:5c:a0:0f:11:
                    1f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7A:73:F9:B7:9C:60:10:88:5F:D1:48:A1:8D:87:81:53:07:F1:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/c31be989-e6da-32a1-bc88-9cfec65bed62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.255.173.0/24
                  155.254.16.0/23
                  155.254.28.0/23
                IPv6:
                  2605:6c80:6::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:2f:44:ef:82:c6:44:fb:94:ff:18:3d:1e:2c:e6:2e:8a:71:
         d2:a3:0f:3f:53:79:44:4d:63:5a:16:4f:46:f9:a3:79:19:d0:
         ad:a1:4a:8f:2f:2d:5e:19:a9:a7:4a:17:fa:08:66:0b:36:15:
         f8:52:4d:70:38:21:58:86:69:ad:ef:76:c2:6b:1c:c4:a1:d8:
         f8:e1:7b:8f:be:b9:c2:ef:31:92:0a:21:0c:15:80:59:de:fd:
         70:7f:35:7e:86:01:8e:cd:80:ba:be:b8:63:24:d7:55:99:5d:
         4e:3d:9d:f4:19:c4:b4:0e:a8:70:5e:e6:95:c2:77:83:81:84:
         3e:d4:b7:09:ba:68:ce:f2:47:e9:0e:e8:bc:be:9b:e5:e7:a2:
         56:23:a0:6e:4e:1a:82:9a:f9:e3:08:db:58:cf:82:c9:fc:71:
         c1:ce:c0:f4:60:ce:17:cf:ec:d6:77:8e:4d:8a:d6:13:06:b9:
         0d:bd:ce:60:9f:f5:00:7c:b3:be:70:3a:14:d7:66:39:e8:f1:
         c6:f3:92:ce:db:d4:ca:89:18:f9:0e:ec:80:d8:cc:cf:a7:a0:
         7c:b8:7a:e5:b4:ab:6b:a7:90:d4:30:fb:92:fe:ee:69:b4:e7:
         41:9f:34:1e:2b:72:6d:2d:58:69:ab:b9:b1:e5:eb:e2:a3:8f:
         44:ab:d4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:18:25 2025 by rpki-client