Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa
File:                     95366fd2-39e1-36cf-bf1d-12cac6b84422.roa (raw, json)
Hash identifier:          SzrPUWTTjsTe842nPv9MQgrJk1sMibOu+aK5qPJJkDw=
Subject key identifier:   B3:0F:B9:70:43:CD:30:88:B3:AD:2E:22:AF:DC:62:26:43:5E:FB:EF
Certificate issuer:       /CN=036d6da4-f590-4da8-a22f-55511da98ee5
Certificate serial:       010D0C9F43285849C20A1321EAF7A653E16F5C80
Authority key identifier: 69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        52.128.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:13:21:ea:f7:a6:53:e1:6f:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=036d6da4-f590-4da8-a22f-55511da98ee5
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=1e6d5b24-502b-446a-913b-7a41774c0356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:d7:e6:f4:0b:bf:81:10:79:66:ef:39:01:
                    4e:95:dd:70:cb:9f:fb:83:12:5b:9a:90:7b:a2:ef:
                    93:72:68:26:de:04:f8:de:1c:cc:df:a1:e5:04:ed:
                    f1:a5:a4:7b:ff:aa:ea:af:7d:d4:f6:b9:4e:07:a5:
                    a5:9f:b8:e5:55:fd:e5:98:80:72:1e:e1:f6:2c:15:
                    f2:67:eb:ab:45:7f:f9:93:50:a3:04:1c:4f:cd:a7:
                    c8:df:fa:c4:92:53:d3:73:15:c5:28:e3:ef:05:e5:
                    8b:0d:e0:fb:57:dd:46:61:0b:67:fd:9e:e1:1c:29:
                    e6:31:c8:ff:54:05:10:db:97:94:1b:2b:00:46:93:
                    33:c5:32:97:be:68:4a:88:08:49:40:7f:37:9c:fa:
                    96:59:52:1b:a1:d2:be:5a:1b:ee:80:4d:5f:bd:46:
                    1e:9f:5b:14:a0:c6:85:4c:b2:a1:77:16:23:21:cd:
                    44:2a:1d:e5:f1:ee:df:6d:6b:09:f2:cc:60:e9:18:
                    0b:7f:0d:23:fb:2b:20:bd:e8:fd:04:04:a5:13:6f:
                    22:c9:ae:e1:ed:52:6d:c5:48:86:60:8c:3a:c6:ef:
                    75:9d:73:98:43:06:1a:be:1e:2e:f8:dc:7f:f9:3a:
                    fb:44:e5:7e:c2:25:7d:dd:b3:25:3b:cb:83:80:13:
                    20:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0F:B9:70:43:CD:30:88:B3:AD:2E:22:AF:DC:62:26:43:5E:FB:EF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/95366fd2-39e1-36cf-bf1d-12cac6b84422.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5/036d6da4-f590-4da8-a22f-55511da98ee5.crl

            X509v3 Authority Key Identifier:
                keyid:69:C1:9F:60:3D:B3:5F:15:2E:C1:82:5A:D2:A3:17:B7:12:24:3B:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/036d6da4-f590-4da8-a22f-55511da98ee5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  52.128.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:86:f7:26:19:d6:7d:6d:68:e6:9e:fe:56:b2:ca:51:c5:af:
         55:80:31:44:f2:78:29:0e:58:80:e4:98:ed:45:0c:ae:9a:61:
         91:44:4a:4f:81:7c:4d:89:80:04:6d:d8:9a:4a:d1:f4:b5:f0:
         72:81:46:bc:05:6c:e1:c7:e7:78:59:76:c5:77:95:10:c1:0b:
         25:64:c3:e1:c6:57:05:d1:6e:f6:7a:96:76:aa:32:45:1c:b4:
         a7:8f:90:e2:d1:31:10:e6:ac:af:6c:0f:1e:c4:f3:0d:e6:5a:
         d9:04:a2:a1:0b:4b:2a:bf:28:41:0e:c1:79:50:c0:dc:83:a9:
         b0:5c:93:5a:bb:1d:f4:40:6d:4c:06:60:96:88:51:bf:87:0c:
         85:1a:f5:fb:b1:18:29:3a:0b:bf:53:ba:24:83:34:cf:1e:7b:
         0d:26:8b:a8:3e:c0:43:3a:32:11:be:95:87:b8:c7:71:34:38:
         00:80:fa:cb:c3:46:c1:01:b3:7b:bb:21:cd:4c:0c:07:9f:d2:
         a1:ca:0c:66:90:84:05:f6:c7:00:32:7b:0c:c4:7d:8f:44:f2:
         d2:43:48:4d:ac:b8:02:1c:07:23:94:ef:ac:fe:35:ce:97:33:
         17:ae:a2:d9:0a:f0:a5:c3:5a:22:14:06:8d:07:68:81:b5:d0:
         c6:a8:1b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 00:07:58 2025 by rpki-client