Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa
File:                     e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa (raw, json)
Hash identifier:          Cij0yee3DQaiMFn1ACqut+c/0HD5QZE5RVL9FNJwqlM=
Subject key identifier:   3A:9D:0D:B2:97:7D:43:AD:FF:DC:E4:47:C8:C1:84:53:E2:A7:D8:71
Certificate issuer:       /CN=83451658-cf40-47b6-b4dc-03c0565c4a64
Certificate serial:       010D0C9F432858498769B16CD50ED6E4EE3D2620
Authority key identifier: 2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     40345
IP address blocks:        204.44.138.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b1:6c:d5:0e:d6:e4:ee:3d:26:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83451658-cf40-47b6-b4dc-03c0565c4a64
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=f9101c69-1a30-4b60-858e-6c91124b87d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dc:d9:d7:b8:47:65:09:27:96:bb:0d:f5:b1:
                    03:76:5a:64:c4:c5:db:1d:7f:2f:8c:ca:60:4d:e0:
                    ce:de:eb:8c:6b:0c:d0:a3:f6:f6:fb:a2:f2:f2:13:
                    d2:b7:09:41:4d:0f:2f:ce:34:65:86:b3:6d:a0:e9:
                    64:cc:20:ff:16:ba:44:93:b6:00:ea:4b:4d:13:b8:
                    b5:b2:66:a9:dc:24:fc:6d:ff:4e:53:45:74:ae:a9:
                    9e:17:67:41:2f:9d:87:5d:15:5c:7c:bf:3a:0d:8b:
                    c9:11:56:2d:fd:13:c0:29:00:d8:df:d8:a1:ee:f9:
                    38:37:ea:28:d9:77:c6:1c:3c:66:13:9d:e3:92:18:
                    57:ab:9a:c2:1b:5e:d5:63:e4:2b:4c:ff:cd:74:57:
                    b8:d9:69:bb:68:8b:1f:8d:0d:1f:4e:10:62:53:51:
                    ab:25:1b:d0:1c:47:e1:c5:f9:f8:2e:cb:f2:41:f3:
                    90:ae:26:a1:83:78:fb:21:b0:58:53:9c:d1:62:52:
                    6d:1b:ea:f3:49:7a:85:36:be:cb:7a:21:27:32:33:
                    86:2f:8b:26:ef:0e:4b:20:a1:52:29:6c:83:e9:91:
                    a8:ea:86:29:94:5d:cb:78:7f:a4:f6:e9:e6:ee:0a:
                    24:47:e0:90:8a:c7:12:7f:d3:2b:69:6b:01:d9:ad:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:9D:0D:B2:97:7D:43:AD:FF:DC:E4:47:C8:C1:84:53:E2:A7:D8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/e025cdbd-a92a-3df9-9b05-f409d0eef0bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64/83451658-cf40-47b6-b4dc-03c0565c4a64.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:59:E8:C9:56:1B:32:DE:A5:D0:0C:BA:E2:09:A2:CD:24:F3:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/83451658-cf40-47b6-b4dc-03c0565c4a64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.44.138.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:14:3d:41:40:98:14:a7:21:e1:31:a8:85:c3:f7:2d:32:35:
         35:0d:d9:ac:05:70:6b:c7:f9:9e:3e:73:aa:9a:34:24:33:84:
         e4:c5:22:8f:c0:19:6b:93:56:67:35:22:89:ab:94:d4:3a:e2:
         ab:5b:39:5b:a9:f8:55:84:44:f2:62:ce:74:e9:81:cb:d8:ab:
         c8:f4:c2:dd:29:fa:c0:0e:a4:8e:8d:26:88:dc:30:0d:30:23:
         f2:81:a4:6b:ea:e3:25:df:2d:1b:45:50:40:5b:5e:51:03:4e:
         27:a0:a8:2c:ad:89:7d:38:ff:ec:aa:7b:51:6d:ff:34:ec:88:
         60:b9:66:56:4f:62:06:11:a6:6a:ff:db:22:86:6d:94:4f:8d:
         76:f4:ad:bc:3e:70:e2:4c:08:8f:4a:bc:50:17:dc:0d:70:cc:
         18:9a:9a:0e:fc:1c:af:7e:fb:57:df:26:3e:f5:ab:27:0d:f0:
         78:93:7c:17:09:3c:58:08:11:b4:6e:e5:d5:fb:30:c4:fa:2b:
         a6:01:1e:fc:d3:b8:45:4c:70:b5:1b:48:3f:68:80:eb:0e:87:
         45:cd:21:7d:b6:77:41:f3:b6:00:38:cb:a3:db:cc:d3:34:fc:
         b6:7c:b9:51:23:a9:6c:24:4b:d1:5f:b6:c3:60:12:28:26:7c:
         5b:37:3a:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:49:35 2025 by rpki-client