Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/eb92975f-0180-37ec-a946-3555d86117a3.roa
File:                     eb92975f-0180-37ec-a946-3555d86117a3.roa (raw, json)
Hash identifier:          0x47DlQcVBCCj4y3sHzLku+QyYsXFyWvVWPTxgWIiyI=
Subject key identifier:   D9:4C:F1:71:B1:3C:8F:48:C2:06:A7:10:2B:60:D5:E1:60:AC:F5:56
Certificate issuer:       /CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
Certificate serial:       010D0C9F43285848A400BC0D24E2CF2924945A80
Authority key identifier: 31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/eb92975f-0180-37ec-a946-3555d86117a3.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     399331
IP address blocks:        64.127.132.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:bc:0d:24:e2:cf:29:24:94:5a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473aba48-e57f-40d4-b25e-8e59a1171ae8
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=e142bedf-5fdf-42f6-bb79-6ef172be39cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fd:c8:f8:be:7c:c7:65:e2:e1:84:d2:25:6d:
                    d1:94:50:9d:e6:b7:fb:83:c7:2e:7c:40:eb:71:f7:
                    94:aa:f5:9f:a3:e8:a3:79:bd:f7:31:c8:13:39:22:
                    32:18:45:67:17:0b:f5:1c:90:ea:ee:37:7e:bf:ae:
                    6f:73:26:40:ba:f0:a1:94:dc:1e:d2:71:be:59:d9:
                    41:a8:6d:3c:ab:3d:ea:6a:79:8e:12:b5:27:15:15:
                    42:1e:43:aa:81:f2:cd:cb:e2:60:ee:57:7e:95:02:
                    c6:c2:55:39:10:63:ca:47:0d:b6:bb:a6:a5:ec:04:
                    86:bf:91:e7:91:0d:ca:f6:c4:ca:bc:68:9f:cb:63:
                    f7:7f:15:87:80:37:4b:40:f4:d9:0b:a3:0f:5c:3d:
                    8b:bb:59:7f:c2:7c:b1:9a:b0:44:9a:58:c2:e7:47:
                    3e:ad:70:19:18:24:68:c4:0f:0f:ad:b0:d0:61:8a:
                    5f:84:c5:b9:63:fb:29:2e:15:49:07:ef:36:8f:17:
                    2d:ee:79:c8:98:56:3f:65:c3:67:2c:c6:e9:98:db:
                    16:db:6f:73:47:92:26:96:3c:df:1b:e2:8e:59:3a:
                    ae:69:44:a2:ad:b3:e1:07:cf:7f:c1:ca:64:79:e4:
                    3e:27:53:7a:5b:12:8f:10:51:4d:cf:3f:25:a0:7f:
                    43:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4C:F1:71:B1:3C:8F:48:C2:06:A7:10:2B:60:D5:E1:60:AC:F5:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/eb92975f-0180-37ec-a946-3555d86117a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8/473aba48-e57f-40d4-b25e-8e59a1171ae8.crl

            X509v3 Authority Key Identifier:
                keyid:31:D8:E4:89:EF:82:5A:7B:E9:37:04:AB:E6:B3:60:F1:3C:92:1D:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/473aba48-e57f-40d4-b25e-8e59a1171ae8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.132.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3f:70:37:20:6a:32:ee:2b:d3:c9:5e:4e:43:8e:31:bb:78:
         3c:e9:00:94:3a:e8:5c:5e:a6:1c:2e:29:66:20:65:29:92:9d:
         8e:e8:38:1e:08:82:ef:fb:f7:70:b9:d3:0e:d6:c9:f2:a1:5a:
         0c:fc:87:f1:28:c1:14:58:36:03:12:d1:a2:ca:10:8d:6a:ce:
         90:94:63:d8:1a:70:bd:15:74:97:1d:d3:58:89:83:6c:97:fc:
         65:04:0e:b7:f4:30:91:a4:2a:db:92:6c:ae:b1:5f:3b:bc:a6:
         f2:59:30:f3:88:19:64:9f:9e:5b:c8:bb:09:74:bc:9a:69:11:
         f9:53:ad:6d:24:16:a4:f5:37:7b:43:38:31:8d:1d:6a:82:b4:
         2e:07:b2:16:f4:53:cb:9e:0a:b8:09:88:dc:5b:39:07:94:51:
         75:ac:28:92:6a:d8:22:be:eb:eb:4b:7e:4c:22:03:69:19:87:
         88:37:63:da:bb:61:ac:56:e5:1d:dc:fb:c8:c5:89:7b:4a:20:
         89:b8:fa:5e:0d:a1:56:86:53:93:1b:93:5a:96:c3:9b:d6:33:
         f1:f2:da:65:5a:80:4c:a3:52:2c:b6:00:76:b1:b3:26:e1:0e:
         d6:d6:66:41:92:8e:f4:d0:30:a9:0b:b8:57:85:bd:39:ef:f0:
         cc:4f:32:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:01:28 2025 by rpki-client