Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
File:                     ac51639f-c8c3-3a86-b744-244b120994f7.roa (raw, json)
Hash identifier:          wnJNb36qecvh8CGzpfHxUSkseWCGaVOcPKZgFCuQx+s=
Subject key identifier:   3F:37:07:5F:41:AE:8B:7E:AD:71:B2:45:D8:4B:05:99:50:E0:95:C8
Certificate issuer:       /CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
Certificate serial:       010D0C9F43285849C4D4BF19A68D0AF738F7D100
Authority key identifier: 06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     11525
IP address blocks:        74.112.112.0/21 maxlen: 24
                          204.8.8.0/21 maxlen: 24
                          208.70.40.0/21 maxlen: 24
                          208.88.248.0/21 maxlen: 24
                          2606:5d00::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bf:19:a6:8d:0a:f7:38:f7:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69e9bd0e-daed-4b94-96a5-e28b698e9d37
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=f1db021e-a117-48da-af20-a1f5c09a59e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:cb:e1:e1:8f:c9:fb:c5:4e:b6:9b:e0:99:94:
                    83:3d:a4:af:7d:bc:f5:a7:2c:73:df:e8:dd:33:3d:
                    d0:a2:97:19:96:b8:ed:4a:84:6f:78:93:a9:d7:a3:
                    e9:33:30:c6:ff:9d:e9:d0:fc:69:54:0f:58:b9:30:
                    83:cd:65:61:66:89:f6:f1:b3:5f:56:dc:5b:ac:ff:
                    05:49:d0:cd:0f:a1:fa:0e:da:06:7b:6f:50:fb:7a:
                    44:df:82:1b:a5:2d:26:53:19:42:4d:c4:89:74:0b:
                    76:1b:cf:1d:4e:cf:c9:a3:68:1a:ae:78:62:73:d8:
                    70:d1:d3:cc:d7:ef:92:5f:45:7e:0a:fb:65:32:27:
                    89:03:2d:78:00:09:70:95:58:bc:0a:69:11:cb:4d:
                    5a:7c:93:08:d1:bb:53:12:fc:52:b0:73:c5:a6:7b:
                    52:01:83:b3:b9:e9:0d:99:6b:aa:9a:f5:18:69:4b:
                    46:65:c0:c2:98:a6:9e:a3:08:a7:d2:06:da:ca:1b:
                    a5:17:fe:3f:d1:e2:7a:e4:03:a3:c4:3a:b5:8a:ef:
                    ac:c2:3b:c0:e0:67:ec:5c:88:8b:5d:c5:51:76:31:
                    29:1d:52:04:88:91:f2:b8:ca:61:43:c2:32:9d:0d:
                    dc:51:85:47:80:e9:c9:df:1b:52:3d:0d:b4:1f:0b:
                    e1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:37:07:5F:41:AE:8B:7E:AD:71:B2:45:D8:4B:05:99:50:E0:95:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/ac51639f-c8c3-3a86-b744-244b120994f7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37/69e9bd0e-daed-4b94-96a5-e28b698e9d37.crl

            X509v3 Authority Key Identifier:
                keyid:06:EE:74:E1:3C:F4:AB:F9:07:8C:76:D9:29:2B:9A:E4:8D:73:AE:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/69e9bd0e-daed-4b94-96a5-e28b698e9d37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.112.112.0/21
                  204.8.8.0/21
                  208.70.40.0/21
                  208.88.248.0/21
                IPv6:
                  2606:5d00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:ef:d1:4b:33:80:34:ac:2b:65:0f:37:01:83:72:41:2f:75:
         a1:a7:dc:29:b5:cf:25:a4:26:99:49:69:9c:e4:19:37:f1:d7:
         d5:44:05:36:16:41:6a:a5:15:4b:22:1c:ba:7e:10:b7:8b:bb:
         84:dc:6e:d2:ee:bc:7b:67:2f:fe:be:4d:9c:10:98:76:5f:03:
         3b:d4:95:b2:3e:2e:b9:b4:3c:b6:10:a4:73:87:76:ce:f4:bb:
         16:ab:92:2d:f2:22:84:2c:bc:67:9d:31:b2:f5:45:2c:62:1a:
         d7:12:59:15:af:b3:20:90:9f:87:37:0c:4d:de:2c:cb:56:12:
         9e:53:11:9d:90:6c:cb:a5:1e:4c:ac:8c:c0:5d:27:b3:5a:17:
         3b:57:11:1b:8d:29:4f:e9:70:64:58:dd:3e:98:af:73:2c:70:
         0e:0f:fc:f4:7c:ce:a1:21:fa:4d:12:be:75:fe:b6:62:7e:09:
         8d:4f:42:79:21:ac:1a:25:38:a2:23:cb:36:3c:c6:00:00:21:
         8f:3c:a3:df:b3:98:c3:5d:a6:04:66:3c:da:70:78:5b:3d:9d:
         8d:50:92:10:40:77:53:27:b4:b4:4d:42:20:44:69:56:85:69:
         3c:55:92:e8:91:df:b9:d5:ff:a8:c7:af:19:a3:e9:c1:21:6d:
         60:c0:95:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:07:53 2025 by rpki-client