Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa
File:                     85b18b62-aeab-38eb-af37-ca27cd92722d.roa (raw, json)
Hash identifier:          3n//hdPqUQ3sS/HcdNMyJ6MrFL3N1aQ8zP3+rV68L4s=
Subject key identifier:   6B:9A:E0:DC:A4:0C:9D:BB:AC:00:88:0F:2A:B8:F6:74:00:A1:DB:61
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285848EF616C0AE0D303E3491238C0
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        107.151.224.0/24 maxlen: 24
                          107.151.225.0/24 maxlen: 24
                          107.151.226.0/24 maxlen: 24
                          107.151.227.0/24 maxlen: 24
                          107.151.228.0/24 maxlen: 24
                          107.151.229.0/24 maxlen: 24
                          107.151.230.0/24 maxlen: 24
                          107.151.231.0/24 maxlen: 24
                          107.151.232.0/24 maxlen: 24
                          107.151.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:6c:0a:e0:d3:03:e3:49:12:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=71206303-b572-4a48-b3ed-94785dfdb16b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:f6:77:d2:13:20:86:b4:f4:dd:17:8e:a7:6a:
                    df:e5:fe:36:22:f3:4b:2c:df:86:de:41:5a:99:39:
                    b3:b1:be:10:52:43:f0:22:b4:21:98:ed:c5:9d:03:
                    a3:9c:7d:ba:11:26:99:43:aa:11:e4:03:58:ba:e4:
                    92:1a:90:6a:2d:87:76:86:e4:47:9c:d9:3d:52:62:
                    e0:a6:5c:b4:3b:43:06:2e:55:b1:b3:de:16:2c:43:
                    74:e3:b3:b1:e3:27:5b:40:a6:28:19:f4:d4:f6:62:
                    15:14:27:11:e4:11:cc:4e:45:89:e2:3b:eb:05:bb:
                    94:c1:d9:00:20:f0:f6:33:2d:a8:d6:8e:06:f4:d9:
                    69:27:9e:61:57:12:8f:27:84:fa:72:44:f0:01:1f:
                    71:8e:55:f8:ed:de:f9:70:d7:ea:32:e2:31:7c:8c:
                    b5:ab:2b:3a:f4:65:b6:07:07:f1:40:fc:93:ac:91:
                    ef:a9:7e:d6:a7:38:9e:38:da:e1:ac:ec:4a:33:22:
                    26:50:29:94:ed:b0:8d:23:53:df:1e:a8:93:2a:76:
                    db:0c:48:d6:9f:5b:4b:06:9d:1c:32:c4:f5:60:cb:
                    05:4c:45:f6:82:8e:b9:b5:38:b2:f5:89:c9:11:12:
                    8b:eb:b7:fb:3a:d6:88:e7:7c:cf:ef:c7:80:e8:db:
                    b1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9A:E0:DC:A4:0C:9D:BB:AC:00:88:0F:2A:B8:F6:74:00:A1:DB:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.224.0-107.151.233.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:b1:84:b4:80:9f:0d:a0:a6:c1:10:39:f1:3b:41:8e:7f:62:
         38:50:57:eb:0d:5b:0c:6d:34:e1:61:e3:0f:04:bb:d4:89:7a:
         28:69:6d:e5:bd:b8:c9:af:a1:88:3b:82:fe:8a:f4:4e:21:15:
         4a:60:4c:58:7c:5f:1b:54:0a:cc:17:d7:dd:9d:e5:f0:9d:c8:
         8e:c2:ff:11:b1:da:54:9f:23:ee:cf:c1:2d:3a:0d:8b:de:91:
         f3:8d:4d:dd:a8:c6:cc:e7:21:f5:bf:a3:51:4d:d3:7c:0a:77:
         1b:3d:93:d7:a3:d6:99:ee:86:04:2a:e2:82:c3:ad:00:ae:4b:
         9e:fe:15:c8:ad:81:9e:8f:80:25:e5:94:05:e9:5d:d9:65:4b:
         e2:5c:e0:84:df:99:3d:c9:ad:14:cd:d2:36:f0:69:a6:ca:c4:
         24:9e:cc:2b:03:23:33:de:fa:31:fa:2f:64:fd:b6:c9:4d:48:
         3c:ad:84:5b:ce:18:b6:fb:41:32:d1:d8:3b:8e:6d:b6:2c:3e:
         c7:8a:e5:36:e8:5b:11:ab:5b:13:48:24:02:d5:c5:19:b9:63:
         1d:a6:91:d0:e9:db:eb:73:a9:b8:b4:3f:eb:24:f8:1c:8c:60:
         ea:20:9e:a1:33:6e:56:96:82:af:6d:40:c6:83:b1:1a:11:21:
         df:16:90:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:48:18 2025 by rpki-client