Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc948a-fb30-31f6-8926-05e763bf2d04.roa
File:                     b2bc948a-fb30-31f6-8926-05e763bf2d04.roa (raw, json)
Hash identifier:          /3QaUd4OKwKeSnUAA7dOGe4SOewSLStgODIQCcS1Boo=
Subject key identifier:   DA:D1:9E:68:FC:2F:95:08:2E:8A:EA:7D:99:BA:87:C4:6C:4F:71:97
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA4A546846AA4509E010DF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc948a-fb30-31f6-8926-05e763bf2d04.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     22909
IP address blocks:        174.161.6.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:a5:46:84:6a:a4:50:9e:01:0d:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=26a9d533-da19-4502-9fcc-e8bce2b8645e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:2b:a1:09:9b:9b:e5:e1:36:5b:b8:ec:7c:d4:
                    61:56:d5:12:ff:ab:86:99:53:74:6a:40:fa:b9:d5:
                    d3:ec:55:16:9d:ad:dd:96:f1:e4:f2:d4:df:88:aa:
                    ce:e3:b9:6f:96:06:2c:01:ed:46:c1:9f:cc:ee:71:
                    5b:28:40:51:ae:b3:81:56:33:14:df:27:ac:ac:f7:
                    5e:72:99:f7:f6:92:07:ed:80:29:af:79:d1:42:a8:
                    b7:cc:d1:71:f8:3f:21:89:e6:19:2b:6a:ea:ce:41:
                    b9:09:7a:a6:8a:f7:2c:e5:ff:cf:a9:c3:07:d5:ac:
                    aa:66:86:8f:ab:f6:31:5a:80:7c:9f:ba:7d:cb:91:
                    28:ff:e1:bc:1b:b5:d2:d3:4c:7a:73:2c:52:35:a8:
                    e3:13:94:53:89:79:66:3e:b5:f9:4e:83:b4:9c:92:
                    1f:f1:97:eb:8b:77:78:39:49:78:eb:fb:69:3c:08:
                    74:ef:43:75:e0:00:0c:54:2b:6c:95:7b:00:b7:42:
                    06:b9:50:71:2f:ed:ed:66:5a:b7:39:0a:66:4c:c2:
                    77:ff:01:60:66:23:ac:09:c4:ca:2d:1f:e0:69:5a:
                    f3:73:73:7a:e2:63:be:68:7f:b5:bb:58:c9:07:53:
                    f3:1d:02:9e:c2:b5:5b:81:19:fd:92:5f:79:76:59:
                    96:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:D1:9E:68:FC:2F:95:08:2E:8A:EA:7D:99:BA:87:C4:6C:4F:71:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2bc948a-fb30-31f6-8926-05e763bf2d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.161.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:4d:66:93:45:35:ea:35:d1:41:e8:92:7f:3c:ef:d1:72:4f:
         fd:13:a7:58:d7:26:87:fc:00:44:14:88:80:0a:fa:b8:21:20:
         1b:36:fc:2e:f0:6d:b1:c5:f1:6d:bf:82:38:4a:0d:07:29:a4:
         f1:d9:21:0c:24:4e:f0:c4:ca:19:47:00:22:d1:0f:9e:05:85:
         ba:3a:d9:10:f6:d7:3c:62:3e:09:b1:de:69:d3:6f:5a:3a:cd:
         4a:17:4b:66:eb:15:f6:a2:70:a2:ca:88:3a:3d:d3:04:85:96:
         b5:cb:b2:a3:85:8a:2a:e5:55:ff:57:d9:0f:a1:b2:63:bf:d2:
         08:18:4a:35:15:f4:56:d5:70:b8:b8:01:48:aa:fb:07:27:8d:
         2b:03:80:c3:59:eb:b3:5b:c5:ed:18:14:91:42:e7:03:d3:f1:
         1f:9a:6a:9c:b1:18:fd:70:1a:c8:70:c3:01:49:c0:f4:09:aa:
         d8:2e:37:b6:68:a8:27:1c:61:c1:0e:5a:e9:7f:19:ad:ab:aa:
         61:84:ec:48:38:60:d5:08:05:3f:c7:36:59:54:94:5e:0d:bb:
         0f:0c:e5:22:da:fc:ef:74:98:f9:36:b2:72:b4:cc:fc:30:20:
         5b:11:d1:05:02:26:36:a1:b2:42:1a:64:f2:21:6a:61:c0:d3:
         f1:fe:ce:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 13:09:51 2025 by rpki-client