Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/26089a96-dd9d-365e-b38f-665724dcabeb.roa
File:                     26089a96-dd9d-365e-b38f-665724dcabeb.roa (raw, json)
Hash identifier:          XpiSwwjPL/ANiKXK2jL1C7ApuB2096c4z+MWbOEkxh4=
Subject key identifier:   58:74:52:3F:05:38:E7:4C:4C:A2:73:40:B1:65:8E:42:60:89:9B:BE
Certificate issuer:       /CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
Certificate serial:       010D0C9F43285849A8E9D965107AD9CB55ED1500
Authority key identifier: C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/26089a96-dd9d-365e-b38f-665724dcabeb.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     6994
IP address blocks:        204.10.72.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:d9:65:10:7a:d9:cb:55:ed:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ecbe2caf-afd0-4edf-a743-b350c23e307d
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=9b06713c-5deb-46be-8aea-5cd069f19e53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:bc:b1:1c:70:7e:87:a9:e0:e8:51:b9:f5:75:
                    c3:72:15:25:09:ae:ac:c0:4d:ca:08:5c:2e:ea:3b:
                    17:15:52:74:8f:e9:6e:c4:cb:16:20:eb:99:fd:a1:
                    4e:b1:29:78:36:fe:ab:a1:df:3f:7c:bc:74:28:dd:
                    dc:4c:06:42:b0:c9:5a:3b:b8:fe:ae:37:1d:30:e0:
                    99:b1:3b:f0:02:12:1b:31:d5:4a:53:4f:39:eb:5e:
                    86:3b:a1:6b:70:3f:0b:50:e7:9c:74:c2:cd:26:15:
                    76:28:8f:a5:4a:d4:58:c9:bb:fc:60:b8:e4:87:3d:
                    e8:75:7e:aa:07:ab:11:08:86:f9:11:f6:05:bf:7c:
                    08:fa:cf:9b:37:2e:51:e0:5a:bd:ff:3c:99:21:4e:
                    d6:c6:62:0d:3d:ce:35:45:bc:85:8b:cf:88:23:62:
                    ab:c2:84:b2:7d:f1:a7:17:19:75:c5:fd:38:57:37:
                    6e:37:fc:34:21:4d:fe:ec:6b:a9:72:8c:65:20:02:
                    5e:41:f3:86:28:a4:ac:f8:70:a9:30:19:6b:ee:e4:
                    f2:27:f2:c5:ae:7f:d2:74:40:e5:fb:3d:6b:b1:09:
                    81:c9:c5:b8:50:ec:e4:93:7f:39:a7:de:f8:ca:a4:
                    0c:2c:65:0d:9a:e0:62:bf:b8:b3:d0:b3:3a:8a:6e:
                    0a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:74:52:3F:05:38:E7:4C:4C:A2:73:40:B1:65:8E:42:60:89:9B:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/26089a96-dd9d-365e-b38f-665724dcabeb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d/ecbe2caf-afd0-4edf-a743-b350c23e307d.crl

            X509v3 Authority Key Identifier:
                keyid:C2:76:72:F8:A3:BA:3C:3B:04:3F:5B:E1:5B:0D:90:5C:D9:3A:58:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ecbe2caf-afd0-4edf-a743-b350c23e307d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.10.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:3e:57:db:34:22:7d:92:eb:30:00:07:98:bd:7f:51:91:bb:
         7b:b6:55:9b:f4:69:39:33:83:4e:12:78:cc:b3:dc:44:43:6a:
         4b:5c:a7:15:ce:33:05:ed:ae:00:77:e5:44:fc:cd:41:52:58:
         d9:47:a1:4a:76:76:2d:9e:37:7c:a4:f1:9d:8f:0a:9d:8b:40:
         a1:53:fd:44:f5:09:6e:31:f6:4d:6a:91:c1:17:46:e1:df:05:
         7b:90:34:0b:f4:ab:84:f4:ec:a3:72:1b:21:77:ce:4c:80:74:
         60:f5:2a:b5:a7:9b:69:43:60:e6:73:4c:db:39:de:9b:45:2a:
         86:0e:62:e8:c5:5a:2b:c4:a9:0d:ec:8d:39:96:5a:06:db:d0:
         0e:3b:7e:b8:74:65:01:af:25:bc:00:1a:06:59:0e:d6:00:bd:
         17:4a:0d:f0:a3:01:07:2e:cf:16:38:67:93:48:69:67:ca:61:
         60:0f:06:40:9b:fa:12:58:20:d2:87:18:ab:e8:3d:ce:00:a0:
         c9:8d:93:be:90:e8:88:a8:19:f0:d5:f7:8d:86:9c:a2:c4:61:
         6c:89:b3:90:8a:bd:aa:e9:8c:ec:b4:fc:a4:ce:19:1a:50:05:
         48:05:3c:4b:9f:16:d2:00:7e:dc:42:48:4c:12:36:1b:21:20:
         14:1e:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 07:09:38 2025 by rpki-client