Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa
File:                     18e5e7ff-0798-3773-91dc-d89f41ce616a.roa (raw, json)
Hash identifier:          61e9Wn2OXGJ+JQokCY5m2Ok3Oyr3jJLOstJ2Mwlkxkg=
Subject key identifier:   89:CB:06:B7:31:6A:FE:7A:B2:AD:A9:B0:94:F5:20:3A:EE:1D:81:7D
Certificate issuer:       /CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
Certificate serial:       010D0C9F4328584992949A0F6E4EE8AC7CA3CB00
Authority key identifier: E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa
Signing time:             Sat 19 Apr 2025 01:00:48 +0000
ROA not before:           Sat 19 Apr 2025 01:00:48 +0000
ROA not after:            Fri 18 Jul 2025 01:00:48 +0000
asID:                     27419
IP address blocks:        207.111.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:92:94:9a:0f:6e:4e:e8:ac:7c:a3:cb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a12fcbe-b691-4ac3-b0db-8db0c27f3554
        Validity
            Not Before: Apr 19 01:00:48 2025 GMT
            Not After : Jul 18 01:00:48 2025 GMT
        Subject: CN=0c18ab62-c694-42e0-b065-6e44f75d1462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b8:09:c3:88:90:59:76:ad:25:3c:80:86:6c:
                    a2:77:f9:85:50:27:10:a7:85:01:66:a1:c1:9e:6d:
                    4f:cf:46:a8:eb:d3:fd:c1:1f:d1:dd:23:4c:30:4f:
                    03:0d:e0:08:63:6e:44:2e:5b:9f:1d:fe:f3:f7:3a:
                    24:fa:5a:44:aa:7d:d0:33:7a:43:44:b6:94:7f:be:
                    f5:8d:cb:2a:5a:7b:54:6c:63:97:98:90:c5:61:5a:
                    7a:d4:b0:81:1d:1b:da:b6:14:46:c1:71:10:cf:fc:
                    9f:75:5c:ab:aa:55:c6:58:f2:94:87:af:ac:45:d4:
                    e2:14:f8:97:4c:3c:5a:78:f0:e0:6a:5a:93:39:7f:
                    e6:df:17:34:6f:9b:a8:7f:31:62:10:b1:48:77:03:
                    ef:43:5b:c5:d0:24:2f:ea:06:ec:b5:21:fd:77:be:
                    55:72:11:63:4e:6d:74:5d:1a:e5:c8:38:1d:17:4c:
                    08:46:58:c6:0e:2f:9d:29:38:57:ae:79:39:0a:05:
                    60:24:d5:71:56:f8:77:36:e5:ee:9b:56:ef:26:b4:
                    a3:d7:32:04:55:5a:e4:85:1b:5f:42:23:1d:57:55:
                    f9:bd:6f:9a:bc:26:7d:5f:20:9d:51:1c:11:d4:a7:
                    7b:c4:24:15:98:9b:7b:94:72:09:86:f1:5b:f4:b1:
                    29:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:CB:06:B7:31:6A:FE:7A:B2:AD:A9:B0:94:F5:20:3A:EE:1D:81:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/18e5e7ff-0798-3773-91dc-d89f41ce616a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.crl

            X509v3 Authority Key Identifier:
                keyid:E6:48:65:89:B5:23:1C:2F:74:04:1A:CE:F9:CC:ED:E8:23:91:B5:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7a12fcbe-b691-4ac3-b0db-8db0c27f3554.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.111.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:de:9c:89:5c:03:ba:3f:c1:53:51:d1:94:9d:b5:17:b0:ff:
         79:92:5f:f0:f0:03:16:62:01:04:90:fa:ec:84:4a:43:ff:23:
         5a:88:49:2b:ee:53:bc:ec:12:40:27:3e:c9:fb:cd:6b:29:e0:
         c4:87:6c:76:60:31:e9:41:5a:59:18:37:4f:40:d0:3b:60:60:
         a7:8b:f8:52:01:6a:28:01:c4:42:e8:29:53:c0:89:8f:69:f4:
         fd:75:4b:7a:0f:e0:15:61:02:ba:cb:96:14:da:c6:be:90:b7:
         e6:e6:37:10:6d:7f:0d:a6:7f:2a:79:d6:fd:52:ae:72:cb:f9:
         6b:35:8b:09:96:63:52:eb:08:da:1f:a9:2a:ac:e3:95:78:4e:
         8d:5e:35:9b:f0:53:7a:6f:63:93:65:83:37:0f:44:0f:0e:54:
         bf:bd:0e:0a:7d:38:60:ba:a6:8e:02:ac:38:8e:96:ea:a2:56:
         30:90:25:dd:fb:89:80:3f:0e:58:92:23:eb:87:4e:c7:48:14:
         78:45:ac:97:6a:93:ab:1c:17:26:ca:10:86:28:f1:44:fa:bf:
         e8:7e:60:26:f7:97:ba:c6:aa:e0:fc:98:1e:1d:32:f1:56:18:
         b8:e3:1b:fa:65:fe:32:6e:0c:7a:56:a2:fd:54:7b:fe:b4:da:
         84:7f:1f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:03:30 2025 by rpki-client