Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa
File:                     8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa (raw, json)
Hash identifier:          94jZYU8eGPs4w7MCfAuQLJl6Yt+sGwVHh8rnpMmTHRI=
Subject key identifier:   E1:65:2D:8A:1F:3E:7A:60:CF:8A:8E:9E:03:E5:9E:D1:99:01:C7:7E
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BAC91FB80A5F600FC9C600
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        216.252.220.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c9:1f:b8:0a:5f:60:0f:c9:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=4d43f56e-4981-40e6-9431-f38afbd9b942
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1f:5a:e7:27:15:0c:0b:7a:ce:9f:1e:10:5b:
                    9b:63:ee:a2:1f:a6:34:a2:5e:2b:fd:55:3b:51:31:
                    7e:f4:59:e7:01:d9:6b:33:df:b1:d2:64:99:e0:e7:
                    33:b9:be:dc:74:f1:5c:40:09:d2:ca:ff:51:18:73:
                    57:c7:cb:15:e1:e2:32:ca:04:89:d2:36:16:88:cb:
                    5c:55:23:b8:88:1a:16:27:c3:ba:03:a9:c0:77:5d:
                    96:d2:80:eb:e0:06:07:9e:02:75:1f:15:0a:bd:13:
                    c1:7a:8c:7e:b0:77:f2:2a:f4:86:5b:b3:3d:62:80:
                    66:46:a2:5b:e3:56:75:88:cd:d0:da:7b:ff:3a:02:
                    f2:9d:70:21:e4:cb:4a:6e:ed:80:49:f4:13:ab:a8:
                    44:77:8d:9a:c3:4a:6e:6f:28:00:96:4b:b1:b4:71:
                    5b:22:05:89:08:a3:32:34:4e:5d:72:03:fa:0d:6c:
                    03:50:b8:99:42:62:0e:92:ce:de:a7:c4:37:4a:07:
                    fe:18:da:a0:3c:a0:a2:a4:e7:4a:f3:76:19:74:4d:
                    34:97:90:6f:09:a2:b6:03:ff:7d:6b:b1:d5:7c:7f:
                    31:7a:d2:0b:d2:e9:12:6d:a1:4b:e3:a6:ed:20:3c:
                    b8:f4:60:5e:d3:9c:2a:1f:89:6a:d7:94:5f:19:bf:
                    3e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:2D:8A:1F:3E:7A:60:CF:8A:8E:9E:03:E5:9E:D1:99:01:C7:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/8b3ae5ad-89e3-3f5a-b346-255b9f34e950.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.252.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:bb:76:a4:6e:e1:66:a6:7c:0d:d6:f6:a9:8c:e8:fb:c9:1d:
         3b:68:9f:20:9f:e2:a3:93:09:27:81:56:d0:0c:2e:23:e7:90:
         11:0a:00:3f:8f:47:00:64:05:bd:c5:4e:71:d9:77:71:cf:8b:
         36:d3:4a:1e:75:54:b7:83:9c:93:c1:ad:95:86:4d:89:e0:35:
         32:68:15:4a:9d:8c:f4:29:3d:fd:7d:a4:6c:04:3b:4f:3b:0b:
         e4:e1:7f:99:32:60:6a:cf:37:d7:ba:9b:90:2f:44:76:df:8d:
         7e:4a:92:dd:7a:4b:2e:5f:0a:ca:f8:85:80:b9:7a:54:7f:45:
         2d:dd:61:71:c6:e8:ca:1b:55:ca:5a:76:b3:7e:9f:0d:af:7e:
         91:8a:dd:ad:00:fe:f5:be:5a:0d:63:5f:39:00:ae:ff:33:0c:
         ad:3b:a9:95:2e:7d:46:c1:fa:b5:91:ec:85:cd:1d:32:5a:c0:
         37:7e:ba:3c:ef:5b:43:f6:e1:98:2b:bc:8d:92:ba:a8:6a:39:
         58:b9:a6:b3:e6:82:04:fc:c3:0e:be:41:67:71:b1:ff:20:9b:
         38:40:d7:d9:4f:d7:5f:e5:d8:a7:0c:e1:26:32:2f:cf:9a:0e:
         f3:6c:7c:b6:8a:03:4f:03:65:b3:37:df:bd:4b:f5:af:42:af:
         8a:55:bf:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 12:59:34 2025 by rpki-client