Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
File:                     1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa (raw, json)
Hash identifier:          oWn3bjTB/lTcNUJpTstYpsHTBbrtmrBb8DowVPIK/3w=
Subject key identifier:   37:F2:7B:E7:C7:21:7B:EE:37:78:E7:38:3A:66:61:32:49:A4:59:58
Certificate issuer:       /CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
Certificate serial:       010D0C9F43285849B6DF5B76E0C0E6616A00EB40
Authority key identifier: EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     36667
IP address blocks:        198.35.120.0/21 maxlen: 24
                          2620:c:8000::/48 maxlen: 48
                          2620:109:6000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5b:76:e0:c0:e6:61:6a:00:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afd1fe3b-7e24-4d27-bb10-beb9ce2d6922
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=0b2d191f-acdd-4cc3-adb1-580ee7a286b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6a:1e:63:e6:d4:75:57:3e:f6:d4:29:8d:80:
                    17:d8:7c:7f:00:b8:1c:d1:7d:b6:32:4a:c0:54:63:
                    d5:92:16:f0:52:73:ad:c3:4d:3c:58:1f:9a:ad:6b:
                    f0:6e:ad:91:09:aa:51:63:97:b4:fd:59:46:7d:8e:
                    60:07:27:64:d7:5c:e3:3f:c0:1c:db:4f:86:8e:cb:
                    2d:e8:4f:d2:72:0a:20:de:02:f5:79:65:d6:05:d5:
                    b8:3f:66:87:1f:77:23:d5:66:14:0a:65:25:29:a1:
                    36:b3:3f:12:43:55:f4:33:67:80:95:0a:8e:fa:f7:
                    02:c3:17:5b:92:a5:be:f3:c5:69:5c:41:12:d6:95:
                    b9:e3:5f:3f:f5:e1:78:74:33:c7:0d:9a:ae:4b:fb:
                    e6:52:01:79:5a:15:c0:c6:95:33:3c:7b:83:28:75:
                    d2:4f:68:25:e3:97:55:0f:ce:9e:cc:0c:84:90:b2:
                    08:96:60:e3:8e:92:4d:f7:34:79:6a:b5:15:dd:05:
                    7a:be:bb:af:4e:e0:5d:ba:8e:c6:31:95:7e:49:1d:
                    2d:5c:a4:96:6b:58:3c:b5:e4:bb:93:02:c5:98:4c:
                    3c:5c:f6:bd:4c:0f:06:a8:ee:4c:d2:9d:a3:b2:bf:
                    2f:17:a9:8e:fd:a1:c6:98:08:05:9a:f5:24:5d:40:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F2:7B:E7:C7:21:7B:EE:37:78:E7:38:3A:66:61:32:49:A4:59:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/1c8e55e4-a977-35e7-a98f-eb28b6fa911b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.crl

            X509v3 Authority Key Identifier:
                keyid:EF:A3:2C:1E:56:34:10:F2:9F:36:33:5B:E1:73:DD:E6:59:C4:89:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/afd1fe3b-7e24-4d27-bb10-beb9ce2d6922.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.35.120.0/21
                IPv6:
                  2620:c:8000::/48
                  2620:109:6000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:d1:5b:e5:4d:5e:02:6c:da:d2:45:1d:64:1c:5a:77:5e:21:
         e2:29:9a:51:75:c4:3e:fe:6d:3c:29:b9:f9:c5:64:3f:45:85:
         b2:60:58:a5:89:f4:d2:ff:50:ca:5e:d7:d3:e2:46:81:d9:10:
         34:0b:aa:f5:52:ae:ed:a5:dc:3b:d4:63:f3:b7:bf:0c:76:cf:
         dc:8c:d7:63:f1:bf:c1:fa:a5:c0:b4:74:1c:00:32:12:c4:1d:
         f2:da:98:d1:33:7d:be:85:15:2d:33:6b:20:af:01:5c:b8:67:
         d9:37:f4:c6:7b:4b:b4:45:8b:e5:31:4c:50:72:72:ee:d6:2e:
         fe:d2:d7:7a:68:af:b0:17:0c:4c:99:60:a1:9e:ef:d3:37:aa:
         1d:a8:83:d7:6b:aa:5f:d3:69:79:ad:5a:82:be:75:d6:4f:f0:
         bc:f3:91:27:52:d1:a4:1f:4c:d3:76:b1:91:ab:26:65:47:d3:
         03:25:48:20:cb:68:94:be:bb:54:ea:f6:8e:e7:03:42:60:3c:
         cd:2e:ee:e1:fc:34:04:5b:f2:3e:2a:c2:75:bb:2e:bc:0f:48:
         a5:e6:52:80:eb:2d:10:5f:2d:0a:45:98:00:ed:a4:b2:67:4a:
         93:a2:0d:3c:eb:c9:82:2b:83:18:9d:14:24:d3:12:a4:39:c3:
         16:38:1f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:21:53 2025 by rpki-client