Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa
File:                     c606622b-6f44-3643-8f06-b6443b12d216.roa (raw, json)
Hash identifier:          kAM9JO1xvQmrOtiWv33vZXMep4xQdSrWQsAJSidvefE=
Subject key identifier:   C4:7B:12:ED:B6:81:3E:28:73:3F:2B:88:C8:FD:6A:8A:DA:4C:25:98
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584972E2EA95610C24F84F322780
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa
Signing time:             Mon 07 Apr 2025 16:33:11 +0000
ROA not before:           Mon 07 Apr 2025 16:33:11 +0000
ROA not after:            Sun 06 Jul 2025 16:33:11 +0000
asID:                     81
IP address blocks:        128.109.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:e2:ea:95:61:0c:24:f8:4f:32:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Apr  7 16:33:11 2025 GMT
            Not After : Jul  6 16:33:11 2025 GMT
        Subject: CN=cc930f59-bf78-4ee3-a009-77bc4d546f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ae:96:6f:f0:ee:8b:4a:a5:17:44:8b:5d:41:
                    36:08:cf:27:a7:2a:2e:7f:ca:6b:45:4a:4a:74:88:
                    39:54:00:bb:08:91:22:cf:04:f9:78:42:bf:bb:e2:
                    96:87:6e:b1:d9:66:66:b8:43:0f:a4:c5:28:5b:e7:
                    a7:c1:78:e1:10:eb:2b:dd:72:70:6e:fb:cc:f1:2e:
                    25:65:e0:b6:61:0f:80:b9:01:db:79:56:e5:d6:4d:
                    36:21:bd:64:e7:e6:cf:bc:67:9f:63:14:09:4e:f1:
                    fb:d2:fb:98:e7:df:22:99:e4:48:91:05:34:ea:09:
                    6c:a2:56:55:da:b3:8c:c2:82:a3:5f:c5:35:89:22:
                    f5:a0:9e:cf:66:2e:36:dd:33:2e:40:aa:df:2b:b4:
                    e6:d8:a0:63:e8:86:aa:2c:36:43:7e:83:10:b2:66:
                    3f:71:5c:5e:58:25:46:c1:7e:1a:51:4e:4f:37:73:
                    76:48:c4:c2:3d:6d:02:3e:6c:b0:c0:b1:9a:c9:00:
                    d2:4c:b8:62:a7:e3:df:0c:f8:52:64:59:e9:72:4c:
                    82:3f:56:a6:03:e3:28:97:a5:2a:dd:17:97:9c:0e:
                    68:91:fd:b9:c0:9b:44:16:82:02:d5:ff:25:9f:77:
                    38:ee:b2:ba:1d:ca:66:ac:fb:22:b0:ff:b3:00:d7:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:7B:12:ED:B6:81:3E:28:73:3F:2B:88:C8:FD:6A:8A:DA:4C:25:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/c606622b-6f44-3643-8f06-b6443b12d216.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:7d:e6:34:2a:47:d3:77:57:70:ca:74:5d:09:5c:98:15:7a:
         d0:45:37:c3:b7:40:c0:63:ad:e5:29:b0:fc:66:bb:04:b5:1a:
         5c:72:1e:57:c0:e0:d0:63:73:75:22:0f:b5:3c:b9:f5:81:5a:
         68:f9:d6:b9:0b:d5:ac:bb:35:b6:c8:7f:59:b6:50:8b:b4:f4:
         75:f1:d0:6f:ec:e4:61:1b:8d:3b:08:23:ad:93:ce:c1:59:6c:
         3e:55:bc:1a:3a:6e:4a:1b:88:82:e1:13:33:7c:34:58:b3:54:
         ed:14:68:35:fc:e0:d5:88:09:80:15:39:24:4a:c4:bf:43:74:
         8d:6e:64:63:42:01:f8:5e:14:70:32:8e:b6:4a:9d:57:cf:eb:
         65:fb:40:15:22:2d:90:03:7c:31:1c:a8:83:1f:35:a0:e8:1b:
         5f:27:ae:43:05:22:cb:f7:08:4b:20:0b:f8:ec:c3:25:e3:e3:
         fc:c6:0f:1b:40:23:b7:b1:a7:60:78:69:9a:b2:e0:30:1e:ca:
         7c:f2:bc:fe:1c:82:91:a7:30:e8:8e:82:c5:3f:e3:15:ea:d0:
         c9:fe:86:e6:fc:e4:74:2e:18:be:ee:cd:38:c2:66:ba:a6:4c:
         0a:1f:ab:aa:b9:ea:d8:0b:90:2e:d9:fd:b8:2a:41:1f:73:38:
         36:66:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:38:11 2025 by rpki-client