Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa
File:                     79ffae39-c441-3349-87d3-7332a90646b3.roa (raw, json)
Hash identifier:          bM9mywo8uPlLJtoPuk+oyQM/8P3SQksPzEFCwqgoz/Y=
Subject key identifier:   75:8E:29:A4:D9:68:94:53:59:77:DD:A5:54:5C:CB:47:BA:2F:8E:AB
Certificate issuer:       /CN=1add3b23-5fb0-4412-be17-98450d352516
Certificate serial:       010D0C9F432858498CFF0EC4DAC899D92FF7FE40
Authority key identifier: DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     393441
IP address blocks:        207.54.151.0/24 maxlen: 24
                          209.221.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:0e:c4:da:c8:99:d9:2f:f7:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1add3b23-5fb0-4412-be17-98450d352516
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=37b78d1d-ff08-4246-932a-3230b7c79f8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a8:6d:4a:9c:28:77:9c:0d:bf:ec:ce:84:c7:
                    f8:c2:53:4d:58:67:31:65:3b:5f:c7:7e:18:1f:cc:
                    fe:1a:8b:17:86:29:ae:d4:ee:b8:cb:42:e2:38:de:
                    f7:ae:42:3d:ab:9f:db:8d:8b:73:e7:2d:73:a9:4f:
                    36:60:49:76:5e:4f:91:0d:fc:5c:00:94:2e:07:3e:
                    0f:aa:8c:af:f8:d0:29:2f:83:0a:87:7a:dd:0f:9a:
                    5b:5d:fa:63:3a:df:d2:60:a5:70:da:e5:4e:f9:5e:
                    c3:9b:7b:4b:c9:ab:67:28:da:27:21:6f:4b:f5:99:
                    4c:57:b2:bb:d4:84:fa:42:92:d8:ec:3e:e4:ee:20:
                    97:09:37:64:94:e9:46:02:18:cc:92:cc:ae:af:e5:
                    bd:db:4c:f2:4c:be:93:b4:d3:89:0a:c1:06:50:36:
                    13:26:c1:50:b1:29:53:74:f9:ed:e5:c8:c4:04:98:
                    c9:9f:4d:b0:29:e6:4d:de:06:93:94:5a:8e:de:48:
                    de:29:40:27:70:2f:ca:b1:b4:fa:82:85:2e:87:4b:
                    69:8f:0d:61:0f:21:f5:cc:48:31:6b:db:e0:8c:57:
                    d3:66:c8:01:b0:b3:a8:88:2e:62:a7:66:78:68:ca:
                    cb:46:00:a6:60:f9:3d:f3:3e:c3:6d:33:9f:62:af:
                    00:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:8E:29:A4:D9:68:94:53:59:77:DD:A5:54:5C:CB:47:BA:2F:8E:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/79ffae39-c441-3349-87d3-7332a90646b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516/1add3b23-5fb0-4412-be17-98450d352516.crl

            X509v3 Authority Key Identifier:
                keyid:DF:D6:AB:35:08:C4:67:A3:69:8E:4B:5D:EA:87:78:C0:7A:1D:8E:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1add3b23-5fb0-4412-be17-98450d352516.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.54.151.0/24
                  209.221.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:0b:d3:2d:83:7b:3f:46:4b:c5:54:06:5e:3a:df:f8:fe:a4:
         6a:ef:51:3e:90:7a:2f:dd:76:89:04:36:1a:40:6f:df:d3:a9:
         05:58:bb:45:b5:df:0b:a5:2f:3f:c6:52:b9:6b:25:8a:6f:7d:
         6c:a0:ff:eb:d7:83:b0:a9:e3:3b:cb:bc:2c:32:33:07:35:87:
         d0:99:60:81:7b:1b:87:e3:31:55:50:ba:0e:a7:bb:39:a4:0c:
         cb:f7:5a:4c:e3:f6:4a:a2:d8:da:79:3a:91:9a:b8:70:0f:b9:
         59:98:7a:d4:85:68:71:65:99:ec:93:b3:15:33:18:a2:57:4f:
         e2:50:a5:a7:b6:ae:95:a9:9f:ca:82:04:8f:76:04:18:11:61:
         47:2b:5f:1c:e5:f9:9c:61:51:c0:2c:5c:f2:2b:6e:50:ce:19:
         17:72:2e:ee:2d:bc:26:93:9a:a1:58:d6:b4:79:55:87:66:a8:
         8b:90:45:b9:37:6e:eb:bd:73:a9:b7:e4:75:0b:3c:10:09:fd:
         29:43:f0:4a:68:f1:84:49:17:4e:22:f9:f1:7a:94:a2:c9:b2:
         b7:5c:e3:cd:68:a1:57:9d:11:37:49:53:c7:c6:38:4c:93:c6:
         5b:13:c3:2d:a4:39:7d:4e:0a:24:bc:2f:1a:89:97:23:f1:d7:
         e3:36:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:41 2025 by rpki-client