Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ed32eeff-6c87-3d7e-87eb-c30cb6d0aa13.roa
File:                     ed32eeff-6c87-3d7e-87eb-c30cb6d0aa13.roa (raw, json)
Hash identifier:          IZaZNsG1C6DVJc+QR7br982GlkLocCl1sGHwULU1W7k=
Subject key identifier:   D7:06:31:C1:81:AB:78:45:5F:38:76:C9:46:DB:D4:56:D0:E8:C6:74
Certificate issuer:       /CN=88842878-1050-4df7-822b-ea8ec25db83d
Certificate serial:       010D0C9F43285849C0A4E1634713E8F665490E00
Authority key identifier: 0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ed32eeff-6c87-3d7e-87eb-c30cb6d0aa13.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     11317
IP address blocks:        164.113.254.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e1:63:47:13:e8:f6:65:49:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88842878-1050-4df7-822b-ea8ec25db83d
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=fce682dd-8fa0-495e-8ce4-30848218977d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b2:5c:21:bb:5c:c7:90:d7:ff:b2:cb:ef:74:
                    19:94:d7:1f:f4:3c:a8:43:83:99:d0:99:80:5d:72:
                    f3:19:bf:97:e6:b8:1e:d9:b1:f8:03:ff:18:e7:3d:
                    de:61:b2:94:c4:82:29:05:15:59:41:e5:3f:84:18:
                    1e:d6:28:cf:51:09:3e:4c:b3:37:a7:33:44:17:4d:
                    2c:5f:f5:ce:ad:d3:ce:2a:00:91:9e:b6:d9:bd:ca:
                    09:b2:da:52:ec:d7:23:10:8e:0d:0e:8a:f9:1c:7c:
                    28:96:ff:1e:ab:78:a8:6d:89:a6:e6:fd:05:fc:d1:
                    71:a6:53:5b:c7:3e:76:83:53:75:67:88:81:a1:14:
                    41:d8:0c:64:55:ec:88:9e:c6:34:bc:33:17:84:5c:
                    56:a6:0c:28:85:c7:b0:1f:0e:c1:86:52:5a:9c:c2:
                    33:42:89:f4:df:ea:ae:b2:de:06:21:7a:f4:65:95:
                    f0:7d:c6:18:99:ac:c3:36:48:9b:9b:38:06:fe:e1:
                    95:5a:3c:da:e4:8c:e9:d5:83:c7:30:05:f7:df:2f:
                    d7:66:ec:4e:f1:1d:d9:4c:08:4f:72:19:f7:28:d1:
                    b7:30:79:e5:de:f2:2b:ac:83:52:f6:df:bb:e8:fd:
                    7f:e7:75:32:a2:07:08:ea:b3:9f:87:53:ce:62:42:
                    0b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:06:31:C1:81:AB:78:45:5F:38:76:C9:46:DB:D4:56:D0:E8:C6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/ed32eeff-6c87-3d7e-87eb-c30cb6d0aa13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d/88842878-1050-4df7-822b-ea8ec25db83d.crl

            X509v3 Authority Key Identifier:
                keyid:0A:F4:2F:69:20:F1:AA:D7:6D:67:3C:86:9A:04:C8:80:1E:AD:7D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/88842878-1050-4df7-822b-ea8ec25db83d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.113.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:3d:92:8c:48:33:e3:ac:c6:42:1a:65:e5:6c:cc:59:00:71:
         7b:1a:c9:c6:86:27:bb:d9:a5:89:a3:8f:cd:aa:87:b1:72:44:
         e0:bb:48:01:71:4c:81:75:ea:4e:4a:2c:1e:a1:e0:1e:db:ba:
         fc:56:36:8c:b2:92:4e:a0:9e:aa:49:fa:7d:04:d7:e2:64:e5:
         a2:72:62:ed:41:b1:1d:a9:5d:29:bc:0b:a6:ea:b2:83:1a:25:
         69:0a:27:cf:55:b0:5d:db:08:4b:66:2c:ed:50:74:00:85:2a:
         ab:ae:90:4d:d0:fe:d9:84:72:84:0f:11:7b:5d:0c:75:41:b3:
         a7:c0:5c:97:50:14:1c:26:81:3f:e9:fe:a5:e3:12:e9:f8:d9:
         8b:de:86:c8:6b:22:02:c6:81:63:df:f1:bc:b7:74:39:2b:2a:
         ba:89:81:00:95:a3:84:8d:93:8a:c2:60:b7:f3:89:0a:7c:6c:
         e1:0d:85:53:0b:ce:e8:47:e0:90:ac:9e:a2:d4:89:02:19:05:
         99:15:45:89:64:56:49:c3:ca:61:9c:8f:91:7e:6e:ba:f2:19:
         4e:d7:9f:5a:2f:14:dc:01:c9:f5:03:e9:a7:be:f5:cb:47:56:
         96:eb:5b:64:d5:19:30:e8:86:94:97:11:71:d4:9e:8b:80:ef:
         eb:4d:7c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 04:16:19 2025 by rpki-client