Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/677aae98-737a-3182-adc1-dc54dacaff86.roa
File:                     677aae98-737a-3182-adc1-dc54dacaff86.roa (raw, json)
Hash identifier:          jTL3xqrIV+554E22sonX1D1/OWL7HaeajU0OLQV7AII=
Subject key identifier:   06:26:F9:D8:1D:DF:88:31:AD:83:9F:74:04:47:F5:A3:BB:4F:4C:F9
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584955294F9DF23C3A15FBAF7000
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/677aae98-737a-3182-adc1-dc54dacaff86.roa
Signing time:             Fri 28 Mar 2025 01:00:41 +0000
ROA not before:           Fri 28 Mar 2025 01:00:41 +0000
ROA not after:            Thu 26 Jun 2025 01:00:41 +0000
asID:                     397423
IP address blocks:        64.84.112.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:55:29:4f:9d:f2:3c:3a:15:fb:af:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Mar 28 01:00:41 2025 GMT
            Not After : Jun 26 01:00:41 2025 GMT
        Subject: CN=88232d64-81d9-4a7e-aa56-de4aca7ff5fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:01:25:ff:79:d0:9c:41:7a:85:65:83:c7:3b:
                    b4:a8:77:74:14:ff:d3:bf:05:86:72:86:7e:3e:a1:
                    09:b8:3b:5d:c0:5d:f8:bd:f8:8a:01:3c:b6:a6:85:
                    a4:5a:38:70:01:a0:f9:96:cf:f3:86:b0:54:fe:0a:
                    7c:80:8e:4d:7b:58:36:00:68:0b:89:f1:70:69:d0:
                    f8:24:b9:5f:2f:67:98:1d:a4:7f:4f:f5:4b:40:95:
                    ba:70:1c:86:0e:2e:04:f6:28:41:51:ee:12:5f:6b:
                    b2:49:4d:9d:e7:84:06:5d:05:bd:20:1a:c6:8d:85:
                    e2:a1:47:9d:b4:98:47:73:a6:bd:1d:2d:22:d6:e9:
                    8c:c9:e4:20:40:ea:23:8a:4a:52:2f:0b:bf:dc:fa:
                    f6:d9:5d:e9:0c:db:1a:2f:a5:ad:23:23:7d:8d:68:
                    cd:53:fc:45:37:5c:b1:be:b4:d2:2d:7a:4f:c3:16:
                    da:16:a6:e6:f5:79:22:13:d9:35:ea:c4:c8:b1:00:
                    40:d4:61:bb:2e:0e:af:4b:7b:60:c0:8f:c2:71:eb:
                    15:0b:54:37:a3:d6:1a:05:06:b8:e3:76:d8:5c:a8:
                    0c:95:16:b1:2c:5f:af:dd:a6:f2:78:f5:b6:c2:94:
                    41:cf:7e:a5:0e:21:44:08:df:50:10:24:34:c8:15:
                    c0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:26:F9:D8:1D:DF:88:31:AD:83:9F:74:04:47:F5:A3:BB:4F:4C:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/677aae98-737a-3182-adc1-dc54dacaff86.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.112.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:40:59:67:ca:71:b3:e3:42:19:b6:d6:21:eb:82:0b:a2:b5:
         72:f8:3d:09:d3:37:31:97:f3:36:a0:d4:33:ad:2b:b6:39:96:
         e0:7a:f4:3a:09:fa:42:e8:1c:fd:e0:ed:6e:6d:d2:54:ad:34:
         4d:2b:68:fd:38:d4:53:1b:31:71:dd:8d:cb:7b:4f:5b:a9:c7:
         50:bf:13:df:8f:a7:ea:0c:d5:48:95:8b:a2:0d:14:37:bd:22:
         5d:52:e4:08:ba:af:5a:dd:8f:34:6b:47:85:56:39:88:ed:d7:
         e5:9c:46:c5:e6:d5:61:9b:b5:a0:a2:ca:01:fa:4e:4a:fa:a6:
         d1:78:60:2b:26:42:c0:ff:31:80:b7:49:6b:0b:6f:6d:b7:83:
         a8:72:60:5b:e4:c4:5a:cc:b7:c6:44:f0:a0:8f:8c:ea:28:df:
         3d:69:0f:fe:10:86:f6:84:75:e0:8d:1c:5d:7c:1b:9b:c1:1d:
         71:7a:c1:78:7f:c1:25:a6:92:48:17:ae:05:bc:d9:a2:b4:0c:
         e3:16:83:d0:1d:f1:10:e1:bf:bc:da:e6:ba:d8:be:d2:90:8a:
         70:cd:3b:8e:f9:85:21:cc:5d:6a:ca:3e:e2:9b:ac:ae:14:7c:
         4d:28:ba:53:08:26:85:9f:12:29:22:49:d8:77:43:71:6a:0f:
         7d:97:b7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:49 2025 by rpki-client