Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
File:                     2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa (raw, json)
Hash identifier:          DW8H39B7wUqFeKZ1oi4OHbxAuHi0gOUr2id5WVjxh8k=
Subject key identifier:   A0:D0:B8:83:B2:72:91:7A:5F:16:4C:A3:92:E4:F4:7B:79:2C:35:D0
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285849CBCF8C684870CBCD978005B8
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     11317
IP address blocks:        164.113.255.128/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:8c:68:48:70:cb:cd:97:80:05:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=d3e30d58-a39a-4c27-a9a0-3fbe900bb764
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:e3:3f:0c:d3:dd:8f:76:a5:c4:88:3c:75:
                    55:26:c6:fd:a1:0f:89:6a:a5:b6:77:03:c3:fd:46:
                    8e:d4:26:cd:f4:a7:a5:22:23:26:89:4e:1b:d4:a7:
                    a3:6c:53:02:e9:6a:b6:bb:eb:2f:ee:22:57:31:7d:
                    71:b9:d6:98:88:93:19:db:f2:80:82:91:33:9d:a9:
                    d6:50:32:17:dd:2d:22:26:39:00:36:f1:e5:6a:d6:
                    b7:54:25:81:ec:49:c7:30:01:a5:1b:c4:d3:4a:6c:
                    8e:2e:53:9c:51:98:f7:bb:49:d3:a0:a1:52:d8:c1:
                    b2:4c:35:d8:91:1e:2a:79:ea:f2:46:a6:fe:25:1a:
                    a4:33:d1:bc:c1:be:c6:a8:d0:fe:54:59:6b:ff:0e:
                    b9:96:d6:2f:f2:bc:1d:58:7c:72:e6:d1:bf:4f:69:
                    ab:aa:9e:b4:33:a6:83:d0:d1:e0:52:c4:8a:85:cf:
                    b2:f1:f6:43:9c:c1:2e:94:78:2f:f5:fd:de:35:d1:
                    85:62:f9:fb:23:3c:8c:ac:56:25:30:7c:18:68:82:
                    94:3b:7a:d2:49:b6:48:86:ba:35:59:47:74:9e:eb:
                    25:d4:f2:6c:6f:6c:6a:43:18:4b:49:d6:12:ce:ee:
                    27:a3:7f:e3:dd:82:08:bf:83:19:d0:97:57:19:e2:
                    ff:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:D0:B8:83:B2:72:91:7A:5F:16:4C:A3:92:E4:F4:7B:79:2C:35:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/2e6e5776-9e96-3cc4-84c0-99402971fc6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.255.128/27

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5c:2b:27:cb:e6:55:3a:25:b8:1d:76:20:df:d4:22:bd:67:
         65:3c:bb:63:10:c5:e9:62:7b:6d:36:c4:5d:29:20:f5:83:56:
         de:ad:bd:a7:8d:62:38:da:b1:b2:76:d5:04:76:88:d2:f2:9c:
         61:10:d5:7a:8f:dd:63:67:3a:9b:49:98:a7:01:ec:8c:49:ff:
         c1:7c:78:4f:6d:a9:29:f2:a4:4b:55:63:46:09:30:c9:0c:b0:
         cd:0a:5f:c1:6e:58:1b:b6:2d:ee:f4:d5:9a:30:5f:a5:8e:a2:
         c0:c9:cb:30:3c:95:5e:6a:64:fb:ca:12:61:f6:5e:36:82:41:
         de:66:b4:7f:fc:4f:81:6e:2a:72:5a:5a:d0:28:54:22:0a:14:
         47:ff:32:48:df:14:bd:df:76:fb:45:25:43:41:60:03:6a:ba:
         01:cc:0f:a2:56:ae:cc:27:a9:b4:8e:0e:92:1a:3d:ab:11:68:
         da:fd:87:2c:34:0e:33:2a:63:99:e8:05:d9:f6:3d:69:8a:8a:
         16:17:ed:74:07:a8:00:da:fe:2e:ef:9c:54:86:b7:11:29:3d:
         a5:6a:00:d3:cd:6d:08:00:ac:52:68:92:11:56:ad:23:06:42:
         12:48:22:b0:33:39:82:74:dc:81:e7:43:9e:07:da:6b:ff:30:
         47:ed:49:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:50:52 2025 by rpki-client