Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ca7fa6e-9eef-305e-ad16-bd45100b1135.roa
File:                     3ca7fa6e-9eef-305e-ad16-bd45100b1135.roa (raw, json)
Hash identifier:          qi74uLMcqAVep/8WicyuZ8fyjVy9d6R7Ca2XQv8oDkI=
Subject key identifier:   9C:31:FB:D7:CD:89:05:44:01:0F:E1:D9:E8:5A:CE:9B:30:A6:BF:FD
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2F3650F484BBE101D2580
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ca7fa6e-9eef-305e-ad16-bd45100b1135.roa
Signing time:             Mon 07 Apr 2025 16:33:15 +0000
ROA not before:           Mon 07 Apr 2025 16:33:15 +0000
ROA not after:            Sun 06 Jul 2025 16:33:15 +0000
asID:                     11442
IP address blocks:        204.84.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:f3:65:0f:48:4b:be:10:1d:25:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:15 2025 GMT
            Not After : Jul  6 16:33:15 2025 GMT
        Subject: CN=db99aa81-7b35-4be2-9bff-0b9796bfb30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3b:6e:62:12:9f:8a:12:c0:a6:f7:02:e0:37:
                    97:81:ce:51:db:37:87:3d:5a:cb:31:75:9f:a4:0e:
                    e4:cc:6c:57:65:ac:2a:ab:c7:72:e2:83:6d:d2:fd:
                    ce:d4:7b:a4:8f:4f:e1:7f:64:b8:54:10:49:e0:cc:
                    e8:c4:cb:c6:05:23:b4:2a:8a:67:d0:5e:b5:89:0c:
                    9b:10:07:70:a4:20:ba:93:6b:1f:72:32:79:4d:cb:
                    dd:ea:e7:9c:a2:0a:ae:9a:da:eb:1f:b1:37:6a:ad:
                    38:d2:97:fe:be:c3:cd:82:b7:69:9c:5e:10:c3:e6:
                    8c:b2:c0:e7:f3:58:29:44:6e:d3:51:e1:86:c2:05:
                    a4:ad:b1:5d:04:67:6d:f8:e1:55:20:f7:d4:66:3f:
                    53:fc:f4:4f:16:c5:cc:dc:56:8f:e7:0c:49:79:fa:
                    e0:9b:17:9a:bb:e4:d3:e1:2f:e5:00:71:1c:1c:9a:
                    2b:bc:be:c8:17:91:3a:a7:77:8e:0d:4b:58:9f:01:
                    a2:d0:96:5d:25:9d:39:05:93:33:17:1c:cb:c0:e4:
                    76:5f:cd:28:59:7f:53:3a:bd:e7:68:e7:3f:07:16:
                    d8:01:ee:92:f2:c1:95:d6:2a:95:c7:7f:ba:67:27:
                    95:cc:d1:58:46:1b:b0:16:2d:8c:5b:47:b0:9f:d2:
                    38:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:31:FB:D7:CD:89:05:44:01:0F:E1:D9:E8:5A:CE:9B:30:A6:BF:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/3ca7fa6e-9eef-305e-ad16-bd45100b1135.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.84.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:0c:7c:e1:85:20:dc:73:36:a4:05:75:55:5e:2c:86:7d:32:
         15:22:66:ae:00:5a:fc:51:c7:28:4e:7c:f9:2b:a2:28:23:af:
         c5:ec:a4:62:97:f7:40:7e:e5:03:1d:14:0b:97:88:58:27:08:
         03:74:d6:53:29:1c:69:72:8a:fe:d5:a0:88:93:e0:34:32:fd:
         5a:34:8a:b5:92:4a:24:93:47:6a:44:90:3d:80:88:26:c6:7d:
         a8:bf:32:c4:d7:ea:c2:fd:9c:d0:42:30:0b:68:b0:ed:b4:01:
         3b:8d:31:9b:56:ff:fa:ce:41:2f:e7:9b:da:2b:30:b8:a7:98:
         c1:a1:c1:ab:ba:1a:fc:9d:fe:1f:40:bd:6d:d0:ab:80:39:ff:
         a1:3a:38:b0:69:c2:c8:a9:6e:01:f3:5c:8e:a9:8b:2b:85:01:
         5e:e5:06:89:f8:a1:d1:bf:04:0d:c2:79:82:ba:04:cf:e8:1d:
         68:b1:0f:b9:df:6a:6f:e6:94:29:88:0b:aa:b5:11:b0:40:69:
         90:f0:a3:44:de:f8:be:fb:63:52:af:f5:d4:bc:95:7b:a2:9d:
         28:90:2e:92:9d:71:8e:06:48:e9:82:37:ce:ab:09:bb:ca:33:
         c6:96:04:0b:7b:6e:27:54:89:ab:6a:c7:15:41:18:52:eb:7d:
         da:27:c7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:27:29 2025 by rpki-client