Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
File:                     e1a9ff98-118b-3699-8349-1030069f9822.roa (raw, json)
Hash identifier:          Q5yua9bagONtLpnqLCV/Bsquhe6M0zEvfsMvGvZGWaI=
Subject key identifier:   03:3D:0A:DD:57:45:4B:FC:ED:6F:3B:ED:66:05:FA:43:55:BA:FD:40
Certificate issuer:       /CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
Certificate serial:       010D0C9F43285849A784C1E1F759CBB7DB0341C0
Authority key identifier: 1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     398290
IP address blocks:        167.32.0.0/16 maxlen: 24
                          2605:d840::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c1:e1:f7:59:cb:b7:db:03:41:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=ad99c061-2b97-472a-af2d-89b6b575d9de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:75:81:8d:d9:20:fd:31:cd:68:e3:9d:7b:
                    ff:c8:a4:26:76:87:88:42:f9:be:13:73:cd:1f:c3:
                    a4:c4:8e:2e:e2:36:94:01:14:78:64:6a:35:60:01:
                    e4:e6:ed:19:0f:c2:08:45:5c:06:1c:8d:40:71:e2:
                    b9:c7:13:96:05:9f:3a:ed:0c:75:f4:0f:ee:bc:ec:
                    78:e1:5d:69:21:28:f2:06:f2:8a:5c:51:ce:cd:ee:
                    f6:16:a3:ce:e8:c2:a5:ec:ed:09:1f:d1:27:05:9d:
                    41:12:ee:f0:0a:49:0b:b8:14:59:df:34:cb:ad:90:
                    b9:54:88:8b:45:79:b0:9f:8e:84:f8:1e:01:cd:43:
                    83:62:02:1e:9c:63:3a:91:41:64:8f:64:74:2a:d3:
                    1b:4d:33:85:ab:23:b2:bc:1d:75:20:a4:52:40:26:
                    c8:66:7f:fc:1a:dd:0a:a8:83:0e:db:47:32:a3:c0:
                    f0:5b:ca:0a:b3:50:d2:83:f2:20:2c:19:f8:2d:4d:
                    b8:76:8d:35:e3:06:e1:13:30:ed:24:90:cd:50:39:
                    79:c2:e1:d0:bd:44:fd:54:f2:0f:cb:28:99:2f:18:
                    35:88:fc:d2:49:e3:34:42:c9:d9:9e:ed:0e:de:c0:
                    d0:1e:7f:d9:97:d8:67:5c:56:ee:6d:f1:2b:7f:6d:
                    9b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3D:0A:DD:57:45:4B:FC:ED:6F:3B:ED:66:05:FA:43:55:BA:FD:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/e1a9ff98-118b-3699-8349-1030069f9822.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.crl

            X509v3 Authority Key Identifier:
                keyid:1D:7E:0D:C7:98:45:62:0F:48:2C:AE:A3:7B:B1:0B:35:63:99:25:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b41d2ffb-fa8a-4daf-9ea7-e2cc46dceedb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.32.0.0/16
                IPv6:
                  2605:d840::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:a3:f9:17:7a:ff:6b:4a:78:fa:b6:c1:9e:19:df:42:a8:9b:
         fd:1e:08:50:02:0b:85:5c:c4:ed:3c:6d:1f:8f:79:19:be:b8:
         f1:1e:0f:a9:4d:f4:53:b9:be:77:07:14:18:21:ef:dd:44:11:
         72:4e:87:0f:8c:ce:db:dc:b7:8a:d0:a4:60:ca:21:6f:f0:16:
         97:38:5a:aa:98:22:95:fb:13:d8:c0:ba:c3:fe:05:de:b9:98:
         4c:15:e6:50:e4:32:8c:71:bb:2c:ec:6c:ed:87:f7:b6:f0:b0:
         f8:4f:eb:70:c7:26:99:7c:ac:95:a2:f9:a8:79:45:07:ae:32:
         31:9a:a6:2e:25:5c:c2:2a:90:cf:96:5f:fa:c3:eb:2e:d2:16:
         71:ab:b2:88:95:8e:5c:8f:95:da:80:ee:d6:36:27:fd:8d:02:
         05:5f:4b:3a:54:65:36:c3:6e:1e:0d:50:61:6f:3d:26:96:e0:
         c9:6c:ab:f8:65:e2:c9:e2:a8:83:9e:09:f5:05:b2:97:f9:be:
         60:38:55:e8:51:a3:1c:0c:c2:66:94:0e:54:2a:d0:95:68:12:
         b5:f1:8b:38:ed:5f:10:a0:2d:2d:5f:9b:3d:cc:a3:b4:4e:a9:
         75:6c:99:75:f7:2e:01:9c:a3:4d:e8:cd:9f:8a:14:d4:01:6e:
         1a:5b:1c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:17:27 2025 by rpki-client