Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
File:                     4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa (raw, json)
Hash identifier:          k883RiD/tF6Pxtl2xgCIvWuIJ0/w8AcGJL+dhdbCUHY=
Subject key identifier:   3F:72:EA:8D:5F:E1:79:73:70:A1:13:07:18:44:39:0F:9F:E0:96:7D
Certificate issuer:       /CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
Certificate serial:       010D0C9F4328584A0A9FD29AFFA61EDFA6A96C00
Authority key identifier: 45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa
Signing time:             Sun 01 Jun 2025 01:00:49 +0000
ROA not before:           Sun 01 Jun 2025 01:00:49 +0000
ROA not after:            Sat 30 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        204.57.240.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0a:9f:d2:9a:ff:a6:1e:df:a6:a9:6c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d80daa5-79dc-4c2a-8879-248a3f3e339c
        Validity
            Not Before: Jun  1 01:00:49 2025 GMT
            Not After : Aug 30 01:00:49 2025 GMT
        Subject: CN=918400de-ae0b-486f-a7e8-421f08055f45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:07:ec:52:e6:91:7d:9b:82:30:b9:ea:cd:26:
                    5e:a3:23:ab:0c:06:a0:5e:92:d6:4d:81:9e:18:b4:
                    95:c4:6b:6d:08:a3:f7:d6:ed:a3:06:62:dc:c1:a2:
                    9d:39:39:e6:1e:73:d9:05:45:c5:42:08:be:fe:1a:
                    16:f9:30:a8:d4:b2:2e:75:b1:4c:83:94:8b:09:52:
                    79:86:33:2a:2d:02:ca:f0:45:85:8b:f6:db:7d:05:
                    9b:83:0f:45:a7:09:41:19:6c:22:c6:b1:4c:e1:ca:
                    41:ae:91:dd:ab:57:94:f3:15:f7:83:93:7f:87:0c:
                    45:86:96:8f:c6:04:45:df:64:c3:10:ff:25:88:1c:
                    c7:da:bc:43:dd:a5:cd:60:97:65:86:e3:43:84:20:
                    3a:8b:c1:73:91:0b:56:83:d3:3d:1f:85:18:ef:22:
                    ae:65:a9:f0:87:22:d0:df:be:d0:c2:14:b7:17:65:
                    d3:38:bb:01:33:8f:85:78:50:97:57:7a:80:1b:45:
                    d3:73:36:30:11:8a:25:33:b2:ea:e4:d4:fb:b1:8b:
                    78:9b:fb:13:be:43:71:3a:50:70:00:5c:2b:43:de:
                    e6:d5:10:dc:01:94:04:13:c5:f8:62:68:1d:be:cb:
                    2a:c8:89:58:db:79:66:5d:a3:e5:04:a2:56:1a:bf:
                    8f:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:72:EA:8D:5F:E1:79:73:70:A1:13:07:18:44:39:0F:9F:E0:96:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4f268d85-829a-35fe-8ec0-cb85d47c12ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c/4d80daa5-79dc-4c2a-8879-248a3f3e339c.crl

            X509v3 Authority Key Identifier:
                keyid:45:24:B4:3E:8E:13:30:ED:D5:96:0D:39:A0:C5:0D:3D:96:C0:56:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/4d80daa5-79dc-4c2a-8879-248a3f3e339c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.57.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:7d:fc:17:7b:ef:01:25:ce:1d:9f:2f:be:7e:7c:30:1e:cb:
         85:b4:f5:8e:b0:80:90:27:e0:ce:b8:d4:84:7e:b6:12:98:d7:
         99:77:e8:5d:7f:a9:75:8d:f3:b4:4f:87:73:f7:a8:97:9d:84:
         18:f4:d5:9f:27:e5:ca:fb:fb:a2:79:7e:31:d3:55:fb:97:a7:
         0c:d0:93:3d:56:a5:2e:08:e8:c4:7d:bb:5e:f2:55:33:b4:75:
         81:ff:50:b9:34:f4:5f:21:30:d3:ba:ba:13:e4:d3:0a:17:60:
         14:98:5b:b7:6d:f0:26:b7:2a:83:18:fc:a5:9f:ef:ba:e9:04:
         9b:db:14:f0:31:a0:71:7d:b3:fd:e6:f6:7f:7e:4f:fb:f1:16:
         b9:11:bf:f8:3f:71:52:7f:b0:f6:90:17:54:a1:bb:1a:88:63:
         ea:3a:6e:6e:3b:52:d9:3a:0f:5d:07:9a:e2:64:01:5d:c9:10:
         06:e8:56:58:bf:09:1f:0f:ac:d6:2f:e4:ab:84:d8:22:b3:df:
         ad:06:a7:70:8d:a4:da:c6:a9:b5:90:73:a1:4c:39:01:34:cf:
         b2:b2:de:96:4a:f0:4f:1f:14:fd:21:5c:07:e7:f4:80:88:09:
         41:c9:21:22:94:08:9f:59:51:4d:10:54:33:85:a4:30:15:38:
         86:2d:e1:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:04:27 2025 by rpki-client