Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa
File:                     7bdac249-8997-3979-82ce-44551943a4ea.roa (raw, json)
Hash identifier:          cpdyl0ibKY8Udm/B+A3g/YfBfK4fT40JtXmcUGwb5wE=
Subject key identifier:   49:8C:D4:77:16:69:FC:1B:EE:6D:13:0F:2B:F3:7C:B4:12:0E:8D:5D
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF57A00B9CDC2A17C6BD60
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        168.91.8.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 04 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:57:a0:0b:9c:dc:2a:17:c6:bd:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=a39ff135-2a3b-484e-a0f8-6589127110ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:48:ff:a2:1b:80:11:e9:c4:7a:b8:44:96:f1:
                    d7:60:47:81:ff:34:66:fd:58:43:a2:2a:e9:d6:8b:
                    b5:6a:03:de:52:18:fb:be:22:86:b9:83:7e:cf:be:
                    1a:dc:ec:9e:ca:0b:68:3a:41:72:8e:c7:81:29:9a:
                    82:07:04:df:4f:44:aa:7f:f5:18:f5:63:8f:da:a3:
                    92:d3:2d:28:ec:bc:1a:89:4f:dc:d7:13:70:11:be:
                    bb:11:2d:72:68:fe:92:50:d2:cc:2e:36:a4:f7:8d:
                    6e:e8:fe:9a:98:d3:cd:7e:0b:5b:e8:a2:cb:00:b5:
                    5b:5a:f3:3b:54:5f:ff:ff:26:d3:63:8c:1e:c6:cc:
                    b8:7c:43:9a:5d:62:4d:6e:b5:53:e4:57:f0:9b:9c:
                    53:cf:e8:f6:de:7a:c8:32:cd:d1:9f:44:77:3d:3a:
                    2e:c1:b9:fa:ce:8f:05:35:c8:0d:75:c0:de:3b:3e:
                    36:6b:9a:fa:83:66:6b:8d:3d:3b:f6:b2:dd:38:dc:
                    07:02:fc:dd:cc:55:2b:1e:ae:ff:c0:ec:93:48:d3:
                    c3:ad:7f:bb:8d:9a:7c:b8:63:97:7c:ea:08:81:91:
                    80:8d:cb:9a:cf:ac:2b:13:6a:b2:b8:a0:ad:ef:fc:
                    d5:cc:5e:06:ed:1f:9f:88:fa:0e:a4:50:75:c8:f0:
                    83:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:8C:D4:77:16:69:FC:1B:EE:6D:13:0F:2B:F3:7C:B4:12:0E:8D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7bdac249-8997-3979-82ce-44551943a4ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.91.8.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:96:45:2f:97:d5:eb:30:ac:68:6e:a5:2b:d1:27:f8:04:1e:
         5b:bd:f0:8e:f8:05:43:51:ce:a1:02:4e:00:6b:4b:df:c7:e0:
         27:07:c0:3a:fe:bf:e7:e3:fb:d9:ca:92:a6:47:01:47:30:83:
         74:5f:ad:17:8d:14:5a:99:e7:e0:d4:13:08:ae:ae:d9:7b:63:
         57:44:0f:75:50:e3:87:0e:fd:0e:59:39:e6:4f:53:cc:2d:b7:
         2f:6e:f5:70:aa:36:41:a3:06:54:3b:6f:ef:ac:39:ca:21:97:
         04:26:aa:fb:6f:69:b8:da:bd:30:71:f6:dd:4a:e7:90:ed:6f:
         26:63:5b:16:dc:f5:a4:63:03:ee:69:02:ff:83:f9:09:67:49:
         d7:49:80:f6:ba:b5:2a:53:03:ac:95:6d:81:f0:cc:85:93:24:
         09:04:b6:93:da:28:88:34:01:44:c0:43:99:b2:25:56:8a:a9:
         ba:d5:f9:8b:78:d7:f8:e0:61:94:93:e3:33:70:92:bd:0c:94:
         76:53:8c:40:8d:50:98:13:e0:43:e1:bc:f3:93:3c:4b:42:a1:
         d3:57:a2:12:85:e2:06:e1:38:39:8f:2f:67:c6:0e:e5:d4:86:
         38:7a:7f:fb:80:34:42:87:cd:65:32:9f:24:56:c4:84:7f:1a:
         56:5c:02:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 07:40:44 2025 by rpki-client