Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
File:                     520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa (raw, json)
Hash identifier:          icZbkflaacB43hZZii4u8uvmjnuooOaS66qaK1akswo=
Subject key identifier:   33:35:CB:8D:F1:14:50:FC:E5:94:A6:BF:55:B8:BA:E4:75:70:9F:4E
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285849DC8FB1C2B76A137E737E52C0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     53720
IP address blocks:        24.246.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b1:c2:b7:6a:13:7e:73:7e:52:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=70ea5b2e-b331-4670-a446-a1dbac4d3074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f8:86:ac:bf:ca:35:fd:b4:93:53:68:86:b0:
                    cb:5c:12:f2:ff:d6:43:0a:d7:f7:ca:3c:f8:0e:02:
                    54:26:cb:a9:ff:62:4d:06:7b:36:3a:0e:26:ec:a6:
                    93:5f:af:40:78:12:ce:31:a1:1d:10:fa:c9:eb:4b:
                    dc:57:dd:4a:c8:a2:87:f9:14:e6:88:d7:a0:ab:69:
                    3a:a1:d3:a3:b7:8d:d0:d4:ef:ce:a9:d1:31:c2:7d:
                    13:af:58:29:02:c5:09:d0:a1:da:5c:d4:07:47:4b:
                    93:d1:98:a8:ae:c4:a6:e6:2c:74:6a:ac:49:80:bb:
                    a1:50:7a:ee:68:f8:74:86:ba:67:0f:58:81:b2:b0:
                    6f:32:54:06:4e:db:b9:cc:8c:dc:6b:88:eb:7c:20:
                    35:3d:6c:b8:89:76:ff:01:13:92:f1:ce:19:b0:6a:
                    eb:e7:e9:4c:85:5e:a9:68:8d:0d:38:eb:f8:e6:9a:
                    de:87:48:b3:fc:97:2f:6a:5c:da:0b:e9:0d:b0:00:
                    39:20:91:13:f3:e0:c9:28:71:f1:aa:fc:8b:87:e1:
                    eb:f1:c2:e7:e5:7f:9e:cf:e6:5f:01:83:ac:23:53:
                    27:1e:32:ce:db:a4:28:4e:c3:d3:ea:1b:6a:d6:dc:
                    ec:9a:eb:21:9f:d8:2b:cd:f8:90:c5:10:a9:70:34:
                    09:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:35:CB:8D:F1:14:50:FC:E5:94:A6:BF:55:B8:BA:E4:75:70:9F:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/520aca61-cb8f-3cfc-9536-71bb2424b3b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.246.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:7a:e5:4e:77:77:93:b3:6a:d9:67:bc:9d:40:c2:e0:4a:5e:
         77:d4:c0:dd:52:80:e1:96:8c:78:64:39:78:70:53:35:3f:54:
         92:1b:57:d9:fd:34:e4:82:fe:44:fc:28:dd:37:e7:95:5c:67:
         61:f3:b9:a9:c4:18:38:1b:1e:d4:ba:cc:0d:bd:5d:6e:c3:f8:
         24:62:0e:00:5a:b0:40:71:73:51:74:49:67:bd:b0:e1:02:4f:
         c1:3d:8f:21:58:46:f6:1f:1b:9b:65:68:b7:99:3c:f9:15:d2:
         f2:18:7d:a3:22:59:0e:b7:16:ea:97:67:3c:68:0b:8a:de:c8:
         0b:0f:be:75:3b:9c:c7:df:90:1d:32:a5:53:24:48:cc:8b:c0:
         f3:32:f5:97:c7:6c:59:84:d8:a2:61:1e:82:33:2a:cd:c3:c2:
         f7:61:1c:16:df:62:6a:a3:fe:22:65:d8:18:04:dd:db:2a:75:
         c5:62:a4:ea:d2:02:d0:d7:d9:cc:99:31:de:44:3a:30:c1:a4:
         a9:48:f2:79:42:4a:63:99:29:67:96:6b:bd:79:55:f8:23:24:
         8d:1e:73:72:3a:07:36:01:e0:74:f9:55:92:f1:3e:6d:9e:d3:
         1b:2b:99:92:30:16:3f:f4:cb:64:cc:b3:ce:ba:b7:64:98:cf:
         40:0e:aa:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 18:03:34 2025 by rpki-client