Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/01b4bdb8-f1b1-373b-ac49-c24fb177e0f6.roa
File:                     01b4bdb8-f1b1-373b-ac49-c24fb177e0f6.roa (raw, json)
Hash identifier:          jgkRNl/wEhqN8dR9k3VWAPKfF56b8CPHgkTeRFZXoZY=
Subject key identifier:   60:FF:EE:79:CF:25:73:73:E7:7A:5E:DA:DA:09:FD:65:1A:4D:37:18
Certificate issuer:       /CN=07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7
Certificate serial:       010D0C9F43285849DC8FB249B7120BAFB7F28C80
Authority key identifier: BD:E6:A8:CC:DB:7C:43:7B:F6:E5:3A:22:F2:08:D1:9D:EE:2C:89:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/01b4bdb8-f1b1-373b-ac49-c24fb177e0f6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     62866
IP address blocks:        134.195.207.0/24 maxlen: 24
                          2602:fd28::/36 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b2:49:b7:12:0b:af:b7:f2:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=ebe98477-05bc-4b7e-8cb5-dc5f93f98974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:4b:6e:ca:34:12:30:04:8e:52:51:3a:9c:c5:
                    b7:0a:22:7a:ca:55:2c:c2:b2:a2:c3:a0:c1:a1:65:
                    f3:d9:33:dd:d0:90:7b:5b:96:0e:ef:6d:0a:6c:22:
                    b1:b2:1a:1d:69:d8:40:a4:c3:e8:1b:c9:69:0f:eb:
                    6a:1a:77:40:d3:ed:43:cd:94:1e:f0:31:9f:ea:36:
                    a8:e1:b3:47:c4:cf:f6:de:9e:18:50:04:58:26:7a:
                    92:fe:e1:8e:57:46:d5:b4:21:72:a4:2b:32:a2:10:
                    c0:fc:0c:40:1c:da:c4:5c:f8:fe:74:83:f1:98:0f:
                    00:41:ca:4a:ab:02:9a:51:63:b4:47:40:c1:10:61:
                    04:d3:84:33:3e:39:cf:a5:30:d2:66:54:1a:d3:9c:
                    e7:c3:52:da:7b:84:8b:8e:ca:a1:39:ce:77:3e:68:
                    a1:e7:21:cb:a2:c6:4b:4a:df:a4:04:0f:aa:3d:75:
                    32:2c:ee:ea:f7:81:4e:cf:54:fe:ef:98:c4:78:c5:
                    36:b1:09:d6:fe:09:28:b2:bd:db:c2:92:a0:07:61:
                    5c:72:c8:66:1b:21:a5:19:f7:47:ae:3d:fb:14:f5:
                    c2:96:e9:38:c7:de:ed:19:57:1f:4c:81:c9:2f:45:
                    8c:67:e8:56:af:33:e8:1c:3a:2f:25:76:f4:68:58:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:FF:EE:79:CF:25:73:73:E7:7A:5E:DA:DA:09:FD:65:1A:4D:37:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/01b4bdb8-f1b1-373b-ac49-c24fb177e0f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E6:A8:CC:DB:7C:43:7B:F6:E5:3A:22:F2:08:D1:9D:EE:2C:89:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/07b910ab-2cb3-4c22-8d8a-7ce90c5b65c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.207.0/24
                IPv6:
                  2602:fd28::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:ea:2b:a6:4c:de:e8:e7:9b:8c:c2:d5:84:b0:72:29:38:5a:
         0e:a2:b6:f0:36:47:ad:4d:ea:e7:9e:24:6e:47:c9:22:cb:4d:
         ac:3a:24:00:b7:73:42:36:b6:f5:3a:66:34:4d:15:4a:8a:f6:
         ba:b6:96:2e:ed:47:ab:15:2f:c9:da:ba:d2:71:f5:cd:e3:35:
         3f:c4:d4:5f:38:12:3a:f5:8b:da:fd:17:41:d5:eb:3c:0f:20:
         92:b8:a9:fd:01:47:0e:dc:2b:29:bd:ec:44:75:6b:fa:d6:bf:
         7d:19:01:bd:93:b9:fc:87:eb:8e:ec:12:57:78:06:7e:05:33:
         11:83:b8:0f:83:a9:5c:5e:55:14:21:4b:51:f7:a0:7f:ea:b2:
         e3:fe:ff:27:89:e3:54:30:3d:85:81:cb:de:27:da:6c:94:34:
         78:d1:55:74:db:54:f0:59:7d:c9:c9:f0:42:f6:fc:fe:ea:34:
         86:f8:66:1c:b4:8a:68:a4:29:22:9b:7f:ff:58:d4:9b:bb:89:
         63:f4:65:f8:b6:90:61:b3:bf:e9:7c:f6:ba:fa:6f:d3:21:9e:
         ef:f4:ea:e4:a5:ec:b1:f0:62:d0:2b:df:d6:a3:b3:6a:2a:7e:
         1b:9b:db:89:25:0b:57:81:90:e9:03:80:7f:08:49:ca:db:18:
         3c:e3:e5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 05:04:58 2025 by rpki-client