Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
File:                     546853d9-414a-3e2e-85ae-b99c281ac2b0.roa (raw, json)
Hash identifier:          U6B39AmCEwVcmr3utlLo/STcSt/j7x2E0fJnkdrJ6RI=
Subject key identifier:   B9:AF:F3:2D:3E:82:A2:9E:E3:65:FB:DE:5C:23:23:6E:68:12:83:9D
Certificate issuer:       /CN=db9c5868-bb9c-4fd1-9aca-05762a850994
Certificate serial:       010D0C9F432858498769B9E8803E95B9C4153740
Authority key identifier: C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     11872
IP address blocks:        128.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b9:e8:80:3e:95:b9:c4:15:37:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db9c5868-bb9c-4fd1-9aca-05762a850994
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=2ee166cb-9ca5-48a6-86c7-f12220e77c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:51:34:36:1b:ef:67:e2:b1:59:b0:c3:84:df:
                    1a:f6:87:03:eb:40:ee:c6:8e:de:8f:cb:85:76:85:
                    b8:ec:51:e1:16:71:51:68:3e:b9:2d:e9:de:76:39:
                    3e:6a:c2:b5:50:ec:b9:14:01:d5:17:29:3e:b9:ee:
                    fb:bb:cf:bf:2d:ac:25:3b:1b:fd:7e:68:9c:ab:66:
                    b5:3a:a8:fa:9a:0b:b5:7a:61:20:c7:35:e2:01:85:
                    e1:02:9b:71:c3:2b:e6:17:62:3f:b7:49:35:7e:25:
                    75:7d:72:53:aa:27:af:86:7e:55:1b:0e:bb:1f:c3:
                    cc:de:c1:14:91:25:40:06:88:9d:6e:92:a0:81:90:
                    ba:c6:33:47:24:eb:17:e2:ee:a6:e7:92:09:fa:bb:
                    35:45:83:31:85:19:65:3c:84:d0:dd:33:22:20:6c:
                    a5:6b:3a:ad:f3:dd:d7:f5:98:36:c4:24:42:b7:62:
                    22:91:9a:25:0d:5b:9e:6e:ef:b1:67:00:dc:d9:9b:
                    18:43:c9:37:ce:3d:b2:f1:f1:f8:c6:3e:1e:b1:4b:
                    e5:40:d8:45:80:43:db:86:64:61:fe:03:c9:ed:a1:
                    ca:40:7b:9f:7e:ba:24:e4:0b:e2:91:a3:e9:bd:27:
                    e4:20:52:0b:7e:6c:28:59:d6:ec:00:d5:fe:c8:7b:
                    95:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:F3:2D:3E:82:A2:9E:E3:65:FB:DE:5C:23:23:6E:68:12:83:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/546853d9-414a-3e2e-85ae-b99c281ac2b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994/db9c5868-bb9c-4fd1-9aca-05762a850994.crl

            X509v3 Authority Key Identifier:
                keyid:C2:E2:9F:49:29:F7:CA:7B:D9:1D:13:1D:DF:1C:9E:F3:39:BB:3F:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db9c5868-bb9c-4fd1-9aca-05762a850994.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:d4:34:2e:a3:51:ef:c7:fd:62:e3:d4:96:16:1c:45:2d:
         2a:9e:bf:24:3b:be:6c:75:12:b0:e9:f8:a7:d7:4d:38:b5:dc:
         f2:ac:8a:c2:b7:90:77:31:81:56:7d:4c:5e:7a:cb:cd:f2:a1:
         77:ad:8c:ee:eb:9c:74:45:9c:c2:80:6d:9b:0d:99:63:aa:ba:
         b6:44:c2:3f:95:b8:a7:0c:f1:34:3f:e2:36:2b:c4:a6:e3:b1:
         7e:05:ed:78:46:6f:63:d0:2a:62:95:5a:8e:45:61:a3:90:18:
         9f:ed:6b:09:7a:0e:3b:d9:73:bb:c3:b5:c5:a0:3c:47:56:a0:
         71:af:1a:0d:c3:6b:3a:3b:93:6e:63:3f:ce:6a:fd:ad:e1:81:
         cf:0e:74:28:89:ef:a3:47:09:2b:a1:eb:33:ae:19:62:1c:75:
         ec:3d:d9:e8:36:10:b9:28:55:f3:ff:f8:18:ba:8c:8b:8b:35:
         02:ce:a8:7b:2d:a3:84:be:7e:29:0b:66:ff:fa:cc:ef:d5:c4:
         82:7d:4c:c0:b4:9f:21:4a:c6:4e:98:15:af:66:6b:8e:8e:74:
         29:65:0c:a7:8a:a6:33:7b:21:a3:71:4e:40:d1:89:75:8a:4c:
         45:63:bd:31:5a:c9:76:57:2a:4a:f6:dc:31:a6:0d:58:fe:6e:
         2c:81:f0:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:57:55 2025 by rpki-client