Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa
File:                     2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa (raw, json)
Hash identifier:          bQ8dPIthQWumzFuh7vx2yNOqMefqmIA6J5NXVjrePZQ=
Subject key identifier:   79:AF:E4:7B:5A:68:D7:49:CE:0C:AB:C4:A3:52:9D:B0:0A:8D:BE:AA
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F432858498A345DE14D197CF185623100
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     396905
IP address blocks:        64.72.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5d:e1:4d:19:7c:f1:85:62:31:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=9691facc-2d73-43da-b2be-5ed3f3425e42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:4d:0c:1b:54:61:54:c5:db:20:bc:da:b4:1e:
                    99:b8:90:4d:ea:37:f1:f5:e8:e0:37:34:54:60:7e:
                    29:42:e1:3c:59:08:9d:1d:b6:4e:66:ab:4c:ff:69:
                    d8:b5:98:83:8f:28:05:ee:2c:7d:d7:cd:87:e1:e8:
                    22:94:85:b8:df:85:5d:2b:9e:d9:04:7c:25:bc:ff:
                    3b:56:7c:92:31:65:35:7d:db:30:39:a3:f2:42:cb:
                    0a:c3:55:4d:e1:9a:a0:c1:58:7a:13:18:43:19:23:
                    89:6c:2e:18:a6:41:34:5b:cc:8d:9a:1d:37:70:bc:
                    31:f0:ed:33:fd:d8:16:69:48:94:5c:f3:8c:54:60:
                    2c:57:c1:ee:f6:ef:ee:33:44:bb:74:72:a7:cf:7d:
                    2f:69:11:58:dd:0b:e3:e3:85:22:9a:07:51:06:e7:
                    56:bc:ad:90:d1:e2:bf:fb:f7:6d:81:07:1e:0c:f2:
                    0b:5a:67:5f:41:01:b0:f6:3b:15:7e:7a:8c:48:2c:
                    53:dd:31:37:52:b4:20:d1:d7:44:af:1c:3d:d0:d3:
                    ab:91:03:48:d4:f5:64:2c:db:59:d3:d7:45:55:fe:
                    3a:40:e7:29:69:62:73:13:c8:dd:b4:72:fb:d5:2a:
                    4b:a0:b9:56:3d:91:5b:3c:5e:b2:d0:07:c3:eb:23:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AF:E4:7B:5A:68:D7:49:CE:0C:AB:C4:A3:52:9D:B0:0A:8D:BE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2e4bbb74-ccbc-356e-8f35-e95f620c1c91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.72.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:04:79:19:77:37:77:95:94:58:37:d3:fe:c2:fe:a7:93:c6:
         eb:a7:38:8e:b8:2d:7f:7f:1f:c0:f7:fa:9a:6c:e3:41:80:59:
         90:c8:7b:d7:9f:81:1a:a2:ef:d5:b6:7f:42:7c:35:3d:ab:09:
         76:28:48:e8:b9:f7:08:63:a6:a9:9a:94:ec:cb:95:38:3a:31:
         ec:57:e1:9e:4c:99:9a:3d:a2:b7:e3:a3:7c:68:9e:81:93:02:
         7f:49:d4:73:9f:52:45:bb:bb:db:86:d3:45:73:ae:97:78:94:
         4c:c2:12:22:1a:67:7f:59:73:eb:d2:67:ef:2e:74:1d:c2:83:
         54:7d:12:ce:13:67:ea:cb:09:45:6e:6a:df:3d:32:03:a0:77:
         b3:fe:60:90:d4:a5:35:9e:b5:20:ae:f5:3d:d6:81:91:54:49:
         fa:10:77:01:7d:38:78:fe:a9:4c:12:8d:58:4a:16:a1:68:a0:
         d7:68:26:5b:d1:9e:c5:21:87:ff:71:2f:ff:62:97:96:b3:b5:
         5c:d2:a4:74:c5:9b:62:16:c7:d0:ae:43:35:22:a5:b6:6c:e7:
         eb:77:dc:15:6e:47:d6:03:9a:00:f8:0e:88:46:bf:4c:2a:cb:
         1a:e0:54:cd:1f:0e:cd:62:3b:c7:99:60:e7:95:72:ce:09:57:
         66:c7:8a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:43:06 2025 by rpki-client