Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7e56cff3-da39-31f2-a59a-1a580b742f05.roa
File:                     7e56cff3-da39-31f2-a59a-1a580b742f05.roa (raw, json)
Hash identifier:          kjydCdn8ukyuw5VF8yozlacKF+u0AZArZSqBGYCbhp4=
Subject key identifier:   FF:84:4B:4E:62:7C:3E:EC:9F:B4:8B:44:C5:EE:95:AE:CB:E6:66:6C
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584987B076F433EB09C17EC6E900
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7e56cff3-da39-31f2-a59a-1a580b742f05.roa
Signing time:             Tue 15 Apr 2025 03:23:30 +0000
ROA not before:           Tue 15 Apr 2025 03:23:30 +0000
ROA not after:            Mon 14 Jul 2025 03:23:30 +0000
asID:                     62610
IP address blocks:        107.151.213.0/24 maxlen: 24
                          107.151.234.0/24 maxlen: 24
                          107.151.248.0/24 maxlen: 24
                          198.44.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:b0:76:f4:33:eb:09:c1:7e:c6:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Apr 15 03:23:30 2025 GMT
            Not After : Jul 14 03:23:30 2025 GMT
        Subject: CN=5a36500f-51c4-486b-807a-46f064868cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:e2:2d:dd:cb:d9:46:25:a1:33:f2:7a:a7:
                    7b:86:2d:93:27:5a:3a:b8:d6:a7:05:67:45:ba:dd:
                    3d:84:79:31:32:7e:19:8a:f9:3f:e0:0d:53:78:33:
                    77:32:f4:f0:55:8b:8b:42:e5:04:11:cc:1d:6d:28:
                    a4:9d:79:9b:1e:2e:cb:56:e8:0c:67:3f:72:dc:c1:
                    ff:6c:46:c5:79:37:62:ee:32:4e:a0:f0:94:09:09:
                    52:66:c7:a3:e8:d6:94:89:8f:33:4e:09:40:70:03:
                    3f:9d:be:87:da:13:ef:43:fe:57:35:35:45:68:91:
                    d4:a3:6c:2c:19:52:f6:66:1e:a5:38:29:cb:19:bd:
                    4c:fd:5d:ee:12:b3:e4:8a:b9:5e:d1:12:48:1d:47:
                    8b:7f:95:95:54:11:1d:5a:64:68:7c:fa:81:39:75:
                    55:93:4c:d8:9a:55:38:78:7d:1d:44:c4:84:92:39:
                    14:c0:50:a6:be:0e:82:a9:cb:a2:a1:73:bd:ee:3f:
                    1c:a0:f4:83:eb:45:09:d4:9a:69:dc:ac:43:6a:a8:
                    a3:7b:7d:44:2f:42:75:96:d7:00:65:15:62:39:d6:
                    b4:f7:d1:86:42:ec:45:67:64:f2:9c:35:82:bf:86:
                    3b:c7:84:d2:4a:0c:b7:06:fe:1e:ad:4d:55:39:40:
                    c8:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:84:4B:4E:62:7C:3E:EC:9F:B4:8B:44:C5:EE:95:AE:CB:E6:66:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/7e56cff3-da39-31f2-a59a-1a580b742f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.213.0/24
                  107.151.234.0/24
                  107.151.248.0/24
                  198.44.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:2d:bd:dc:d3:8f:99:b0:8e:0b:9f:ef:83:d9:b6:72:19:99:
         91:58:49:77:f5:95:a7:1a:62:b6:13:2d:44:b6:13:ad:1c:50:
         7a:55:50:c2:fa:b7:a0:c8:1b:e7:ee:2d:cf:69:3f:36:2d:31:
         b9:4d:df:1b:51:7e:28:81:c2:a8:98:f4:91:a9:d7:02:d2:6c:
         69:a7:b8:2f:e5:6d:c4:e9:5c:f9:87:4e:b9:56:cf:cc:81:ed:
         91:ac:69:c3:88:64:3d:40:e1:43:11:32:fd:77:d7:14:02:0d:
         dd:7c:00:f3:8c:51:55:ff:e6:34:75:dc:d4:72:6d:3b:6e:82:
         bf:63:a4:37:4f:d1:c4:36:91:b2:a4:9c:8d:81:93:85:ac:68:
         4a:93:2c:6e:61:23:cf:ff:dd:d7:b9:85:45:d0:80:5a:be:29:
         8b:35:63:a9:34:3a:98:b7:eb:8b:12:aa:bc:ee:c8:1f:3d:58:
         37:38:e7:9d:85:03:dc:db:52:19:09:0b:32:71:88:5f:43:9a:
         f7:79:ad:2a:8a:fa:10:c8:17:8a:61:08:20:7b:fc:aa:f0:52:
         a8:1d:0c:4f:90:4c:df:a3:0c:ac:0a:b4:f4:62:19:cd:89:e0:
         f1:12:34:de:86:78:36:d8:64:40:97:5a:3f:85:40:2a:e5:79:
         d1:f8:33:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:51:54 2025 by rpki-client