Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa
File:                     8d251837-4740-3e23-b8dc-deedcd830b5b.roa (raw, json)
Hash identifier:          aKlLvabVgf3FvhD+7bgHAhsJ06b6D4VoBEb9/hQgHH0=
Subject key identifier:   B4:3D:7C:A5:41:D4:FE:9A:2A:E1:AA:AD:77:58:CD:A4:F9:21:1E:30
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BA5BC50C0C4D55940F8900
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        70.41.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:5b:c5:0c:0c:4d:55:94:0f:89:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=04779592-e6d9-480b-9a2f-be590f5aeee0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:cd:da:24:27:34:69:2f:04:d3:2b:5a:02:
                    a0:fb:4d:4b:e9:31:e7:a0:b4:ea:24:36:00:fb:be:
                    b0:3c:a2:dd:8a:8c:57:ec:05:30:2e:1f:17:39:c5:
                    91:7e:b1:5a:e3:b5:2f:d5:de:16:9d:9a:54:a2:f6:
                    7a:72:ae:77:ab:6d:36:70:5a:f0:27:61:92:a3:b1:
                    ea:08:01:9f:53:fd:1e:4a:6d:d1:7a:ac:ec:62:5d:
                    2a:56:0b:20:18:ad:0d:70:1c:39:2b:29:6f:b0:90:
                    14:31:f3:34:20:c9:20:af:8f:6a:93:50:bd:d3:50:
                    8e:4a:31:4c:13:0f:7a:b9:97:e7:c6:73:84:58:80:
                    e8:7c:df:6c:7c:de:ca:3b:6e:9a:32:91:12:18:61:
                    cb:6e:e8:01:f6:cb:15:c6:e6:56:20:e5:4c:d6:6d:
                    a1:f5:60:ac:de:f5:c6:92:59:a0:2c:87:e4:ab:ee:
                    17:ec:13:c2:c7:23:84:c1:01:cd:56:3e:39:c5:85:
                    5f:98:57:3b:cd:77:06:52:b2:f1:0c:65:fd:91:1b:
                    89:e6:08:20:c4:18:6f:1b:b5:13:9e:06:6a:3d:5b:
                    89:e6:da:64:37:88:5d:e0:71:e7:68:bf:b6:b9:3d:
                    49:a2:6a:a4:a2:c9:c4:75:b2:91:2a:e4:28:a5:89:
                    c7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3D:7C:A5:41:D4:FE:9A:2A:E1:AA:AD:77:58:CD:A4:F9:21:1E:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d251837-4740-3e23-b8dc-deedcd830b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c2:02:f4:1b:ae:06:c2:d9:e4:75:d8:2e:57:2e:5f:a0:b8:dc:
         5b:62:25:c3:69:33:16:f3:4c:69:2f:e6:9b:fd:bf:67:80:52:
         f8:3a:80:62:7e:2a:9b:70:d3:de:9f:b7:c3:95:b5:aa:9f:21:
         a4:11:c9:0e:a7:a9:92:50:c0:39:a0:47:e4:8c:4a:6a:4f:bc:
         37:f0:85:91:e2:78:d9:ef:af:cd:75:65:d3:af:22:d8:b5:0c:
         40:66:64:44:ac:44:81:42:40:17:c6:7e:0e:a5:ab:53:77:2b:
         ab:12:45:b1:e6:b1:c0:ca:09:de:97:5d:3a:d9:40:ed:71:26:
         32:cf:8c:94:6b:a4:c1:4a:27:3a:41:09:7c:9b:14:35:d4:b4:
         d9:26:9a:9b:f1:17:43:16:65:b0:76:fa:22:3e:fe:cf:12:c4:
         51:af:a1:13:33:23:eb:83:86:2a:07:07:94:a7:da:a8:12:fb:
         ae:f4:26:a8:eb:52:b9:9b:a0:ca:f1:6f:a9:0b:c6:40:8a:e7:
         c8:11:87:03:1c:c6:c4:f4:ef:bd:0e:c4:d4:74:15:12:ad:19:
         a0:43:17:75:c9:1e:02:5b:33:bd:d8:34:2d:c7:a3:28:1f:09:
         56:84:01:df:ed:29:7e:5b:e3:54:2a:26:9c:10:09:57:27:e2:
         26:7a:8b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 14:33:10 2025 by rpki-client