Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/39cdaf3f-e77e-3515-b871-6dc0af05981b.roa
File:                     39cdaf3f-e77e-3515-b871-6dc0af05981b.roa (raw, json)
Hash identifier:          MLNF2lYvQUKmGAHN95Zn/6jdW3EpHVDDhfUSGXzoNlw=
Subject key identifier:   6F:A4:E3:C5:B2:C7:66:D6:FC:2F:7A:BD:54:D3:AF:F3:BF:29:30:84
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F432858498FC9C1787EEF5DD759572980
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/39cdaf3f-e77e-3515-b871-6dc0af05981b.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     2013
IP address blocks:        192.80.246.0/24 maxlen: 24
                          192.80.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:c1:78:7e:ef:5d:d7:59:57:29:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=4b4f51c8-974d-49af-93b4-47c357285b53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:97:e0:c3:5b:6a:a2:11:ac:cf:65:6e:2c:44:
                    ab:3c:0b:f2:1a:2e:2d:ee:dd:39:09:bb:b8:e4:5f:
                    f8:fb:0b:b3:75:0b:e6:4a:24:18:2f:88:98:b2:e1:
                    ca:a0:43:f1:ae:5e:fc:dd:69:de:4e:d7:d0:0f:42:
                    d8:85:d0:cd:de:c6:23:fd:54:62:f9:24:83:e8:1d:
                    16:b1:8a:65:2c:34:fc:fa:eb:91:fa:04:65:c7:96:
                    71:b4:0c:ae:03:d3:a6:f0:59:99:0a:6e:c2:a5:dd:
                    8d:dd:f9:45:11:be:8b:97:0c:67:01:67:97:49:6e:
                    0d:df:73:a0:b0:ed:54:f4:8d:bb:f2:ad:8f:fd:7d:
                    65:93:60:65:93:32:c2:7d:e8:04:69:4e:44:d6:90:
                    be:ce:f3:08:5f:3b:fa:b6:98:66:14:70:6e:87:37:
                    bd:f2:3a:9a:e6:30:0d:49:f5:ea:56:3f:47:47:c9:
                    65:fd:11:e0:79:ec:35:f0:21:b1:6b:d8:ba:4b:56:
                    a3:94:36:5a:49:1c:5e:27:79:b9:8f:45:74:ad:61:
                    0d:bf:2d:e9:84:7a:a8:18:3e:cd:05:8a:15:92:5c:
                    4d:b2:b9:5d:21:33:24:1f:a4:49:e5:18:4c:3d:95:
                    75:27:5d:e1:7a:0a:3b:cf:bc:6d:d1:62:d9:7a:8f:
                    09:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A4:E3:C5:B2:C7:66:D6:FC:2F:7A:BD:54:D3:AF:F3:BF:29:30:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/39cdaf3f-e77e-3515-b871-6dc0af05981b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.246.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:bd:6d:11:9b:77:90:d9:43:c8:ca:48:05:fe:c5:53:19:fc:
         4a:2f:ac:9e:6a:91:f9:a3:74:0e:95:a4:5a:dd:85:19:91:92:
         a0:83:ac:39:37:21:f2:e4:f6:f7:6d:66:7d:fd:43:14:45:de:
         61:70:49:27:91:5d:5a:10:a2:cc:75:a2:4e:a8:00:b1:3c:9c:
         0b:07:7d:49:37:1e:6a:97:fb:fd:6c:f8:ce:6a:42:9d:c2:7e:
         90:73:c6:5e:95:39:a3:db:a6:49:31:45:a6:d3:20:a5:1e:35:
         12:92:03:86:dd:6d:be:27:a0:7f:e1:05:7b:5b:09:29:e4:9a:
         ac:a8:a6:7d:90:81:60:3a:02:6f:d9:21:43:40:49:c6:fe:93:
         43:eb:a2:50:38:ef:f3:6c:49:f5:4e:04:7e:b3:7e:d5:66:d2:
         54:d7:f1:33:92:99:c6:d1:30:96:2c:49:29:0d:e4:ed:c7:57:
         0d:e6:e8:62:99:d9:b5:35:df:69:5a:9e:62:24:9f:c4:66:a7:
         34:5a:86:81:21:f8:9d:39:83:ef:0a:eb:d7:8d:9f:77:13:a9:
         a5:83:10:4a:ac:6b:11:2f:47:98:5d:4d:03:18:fe:c3:50:71:
         7a:90:b7:07:09:29:34:7a:29:74:9a:95:bd:19:97:5f:1b:00:
         ed:07:76:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:08:56 2025 by rpki-client