Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/39500ce2-adac-3fa1-9706-bdef90807af2.roa
File:                     39500ce2-adac-3fa1-9706-bdef90807af2.roa (raw, json)
Hash identifier:          gQcQANaZoP29cDMQa6U6bpgkDaVJ6xIeg/g0qH4IEys=
Subject key identifier:   F0:C5:61:11:C9:8B:A1:4C:AE:28:4C:05:AE:EF:9B:0D:68:2F:A2:4A
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F2DC73D64D20374FCA80
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/39500ce2-adac-3fa1-9706-bdef90807af2.roa
Signing time:             Mon 07 Apr 2025 16:33:15 +0000
ROA not before:           Mon 07 Apr 2025 16:33:15 +0000
ROA not after:            Sun 06 Jul 2025 16:33:15 +0000
asID:                     81
IP address blocks:        204.84.112.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f2:dc:73:d6:4d:20:37:4f:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:15 2025 GMT
            Not After : Jul  6 16:33:15 2025 GMT
        Subject: CN=4519f9ef-7f88-43fb-8fc5-2cb34d6a382c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b0:1e:67:65:33:d0:98:22:e9:74:7c:b9:31:
                    be:94:c8:86:ef:0c:b1:ff:60:05:e0:ba:c2:94:e4:
                    68:73:a8:2c:d5:16:f5:78:ed:2a:50:36:34:ea:0f:
                    dc:91:17:9a:fa:1e:90:5d:3d:32:a2:d6:05:08:c3:
                    b5:21:11:26:be:da:92:04:dc:1a:08:96:89:94:59:
                    cf:6d:f0:2d:c2:e8:af:61:bf:14:14:54:a5:a4:66:
                    b2:e5:3e:fb:16:f1:62:d3:a9:79:d6:40:8a:34:43:
                    24:46:8a:93:07:07:7b:95:73:c5:bf:2c:66:2b:3d:
                    35:b7:97:ed:f6:ba:bf:2b:84:70:f2:b2:c3:bc:7f:
                    37:ce:8a:dc:54:27:4b:8e:65:30:58:e3:1c:54:5f:
                    7d:9f:0c:b8:f3:ed:83:04:60:80:8c:c6:6a:a6:7e:
                    32:a4:d9:89:95:a8:2d:8e:1f:36:8a:33:31:fe:39:
                    4c:ec:cd:f3:a3:11:7e:37:73:b3:69:43:cb:8d:e5:
                    da:f7:7f:ad:ec:a9:31:ca:eb:9d:79:e5:d6:98:26:
                    54:ba:0b:52:07:d6:72:b2:1c:01:1b:f5:4f:f7:f4:
                    6e:49:3c:12:cf:11:5e:a3:a6:5c:64:fe:da:69:5d:
                    b9:26:ed:85:52:cf:31:9c:5e:15:e5:a5:a1:53:8f:
                    c3:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C5:61:11:C9:8B:A1:4C:AE:28:4C:05:AE:EF:9B:0D:68:2F:A2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/39500ce2-adac-3fa1-9706-bdef90807af2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.112.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:f7:86:40:0c:7b:49:22:ee:e8:89:ca:55:30:bc:1c:8a:3d:
         07:f2:8c:bb:90:22:ea:c0:1b:d5:5e:ae:c0:29:52:3a:34:a7:
         72:09:f3:6b:de:95:50:48:16:0b:7d:20:ef:b0:d6:38:4e:ff:
         6f:ea:9e:fc:b0:44:b4:94:38:aa:5c:3e:0a:b8:0c:a9:e9:c5:
         02:07:5e:21:ce:82:1e:75:dc:34:52:e3:9e:23:57:2c:fe:ac:
         6c:ca:b0:3e:bd:25:38:53:05:5e:a3:1d:1c:be:64:d7:1f:fa:
         cf:b8:54:45:8d:ca:9e:c3:e0:e6:ff:44:d8:08:fb:50:c7:ea:
         dc:1e:67:4f:40:f1:ed:4b:8a:ce:42:dc:e3:a5:05:84:00:09:
         ae:ca:1f:2e:53:96:d4:82:dc:30:17:9c:4d:80:23:fd:cb:a6:
         62:9c:eb:5b:0e:45:47:01:a3:c3:2e:ee:d6:7a:a6:64:08:f1:
         a0:13:d2:8d:3e:09:8d:c3:73:48:87:ee:11:a0:ec:6d:b2:3c:
         9b:d7:8e:1d:b1:03:d4:ff:b8:4d:dc:60:86:3a:f2:8e:ec:cd:
         a3:88:aa:88:d6:79:4e:67:a9:00:e7:24:03:4e:ca:19:30:90:
         eb:47:fb:e9:23:cc:82:2d:8f:f6:f3:d1:01:bd:4d:9f:30:31:
         4f:3b:cc:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:36:30 2025 by rpki-client