Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
File:                     7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa (raw, json)
Hash identifier:          EWWRNF+FFIILc0q6NrNPRvanmKD57ChEZq4V0QgiRGU=
Subject key identifier:   5A:7A:80:21:F2:81:68:81:F6:8B:35:5B:5E:5F:25:E6:19:2F:4A:EA
Certificate issuer:       /CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
Certificate serial:       010D0C9F432858495ABEB7B97762AD91FAAA6000
Authority key identifier: 59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        192.69.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:b7:b9:77:62:ad:91:fa:aa:60:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=d8059a6e-615f-4b51-908c-c394ea9e1dda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:77:7b:fa:73:a3:3e:25:30:b3:6d:eb:cd:01:
                    95:d2:06:c4:26:8b:60:9c:71:7b:fa:78:5a:67:02:
                    d9:b5:96:d0:4e:f3:2d:02:14:db:21:4d:72:ea:68:
                    8d:66:93:f2:3d:93:b9:b5:74:ea:64:c3:46:46:4e:
                    4d:b5:0c:ba:97:9b:53:14:4d:67:e6:e8:ce:e1:04:
                    b4:9b:e5:0f:e3:aa:78:16:45:7f:f9:24:3f:f0:92:
                    d6:66:ee:d6:90:60:1a:26:13:56:67:c4:c3:52:be:
                    f1:8d:55:cd:d5:69:db:48:9b:dc:4e:5f:39:2b:61:
                    f0:7c:cc:84:36:88:00:02:01:5e:57:00:27:f9:81:
                    ee:2d:21:0a:5e:48:9f:c6:71:d0:d7:32:f3:2e:c9:
                    af:8e:eb:81:19:7e:c8:61:9f:31:2f:9f:5d:90:92:
                    f6:20:fb:b9:0b:bd:2d:b7:36:84:c6:44:10:b9:a3:
                    9d:36:f9:ad:44:92:03:10:8b:12:9e:9e:24:59:a0:
                    e9:42:d4:b7:3e:f7:f9:f0:86:9e:77:f7:fd:aa:a4:
                    68:bd:c3:fa:a1:c6:66:89:6a:63:05:5f:5f:53:9b:
                    3d:8c:60:f5:4a:7b:7c:c8:bf:d3:49:d6:fa:46:b0:
                    ef:67:1a:b8:c2:9d:0e:75:23:e9:17:ee:9a:0e:5e:
                    f4:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:7A:80:21:F2:81:68:81:F6:8B:35:5B:5E:5F:25:E6:19:2F:4A:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/7dfe121f-65ff-3f76-b3c2-899fc2ffc0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.crl

            X509v3 Authority Key Identifier:
                keyid:59:2A:C1:49:99:F1:2F:9A:06:B1:E9:5D:DF:57:72:22:76:63:C3:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/eb5dc35b-145f-42eb-9c72-7aa9ec1b0bc1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:74:e6:67:b6:0e:27:34:2f:71:79:05:98:e6:3e:33:b7:55:
         27:1f:69:21:a2:04:9d:8f:88:ba:02:9a:53:19:07:ab:26:1f:
         8d:ca:d4:78:f5:ba:8b:2e:be:af:b0:7b:45:7c:4f:9a:f9:58:
         02:6b:fc:7a:d7:b6:fa:40:5a:1d:a7:39:7f:c7:17:ec:a2:cb:
         47:1f:4c:29:fc:07:4c:29:0f:6c:8f:d6:2b:41:3c:3a:bf:e9:
         b1:68:c4:9f:71:57:ee:05:f3:67:94:1d:6e:91:91:e3:35:75:
         e8:9f:da:60:b4:50:73:9f:08:06:77:53:e0:a9:6f:99:ed:42:
         50:f3:77:4c:78:4a:a3:3c:5d:6b:e6:40:07:5b:78:54:53:76:
         8c:54:2a:29:4f:86:f4:cd:13:08:9a:e6:4f:bf:4e:48:73:c8:
         e4:bc:c3:f2:9f:c4:97:2a:81:47:ec:f6:53:93:d0:76:e8:13:
         a0:18:34:99:ff:7f:2b:d5:f8:a9:48:30:39:64:94:23:10:c3:
         9b:91:32:ca:06:a3:4e:59:c4:02:f8:0b:bf:a3:52:02:24:92:
         b2:45:c5:90:9a:9f:1b:14:69:9f:ed:d0:5b:b5:36:60:c0:91:
         17:3c:5f:13:f9:1e:6d:d3:38:1d:9f:16:e0:69:32:dd:35:75:
         4c:a7:b0:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:56:37 2025 by rpki-client