Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa
File:                     7591ed07-3e4f-34e7-983f-c68801299932.roa (raw, json)
Hash identifier:          us/Jx2OUaTzER6f+Y8ZGSErl4VFBWzWvx/t6jBlXE7g=
Subject key identifier:   7C:F2:1E:0A:51:4C:B3:7C:8F:C3:C0:8C:3C:EF:58:EA:C6:71:30:79
Certificate issuer:       /CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7
Certificate serial:       010D0C9F43285849955F2198D8501F383639A7C0
Authority key identifier: DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     11727
IP address blocks:        173.241.96.0/20 maxlen: 24
                          209.240.112.0/20 maxlen: 24
                          216.183.128.0/19 maxlen: 24
                          2604:5340::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:21:98:d8:50:1f:38:36:39:a7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7255484-0f74-45b3-b1d2-b5eda55e6ce7
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=4f5c3ddc-9d2d-4703-9bce-934c85701ce4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:1b:b1:4d:65:a2:2a:91:64:23:da:79:4d:8d:
                    78:d5:c8:dc:59:56:7a:36:4d:ef:81:10:92:c2:a1:
                    59:3b:cf:08:2e:02:fe:c1:62:15:d2:f2:d2:79:41:
                    08:1a:c3:1e:e2:3a:53:d0:56:d3:fb:6a:fb:3a:1a:
                    f0:58:eb:13:d1:b3:10:d6:68:ef:f8:31:c6:d0:19:
                    37:68:a7:10:7f:a3:e3:3e:17:ee:83:fa:9b:1d:5a:
                    34:7a:9d:58:8a:53:fa:24:b7:40:f2:30:07:e6:e0:
                    eb:1f:99:bb:1d:88:e5:eb:a0:5b:af:10:20:ee:ce:
                    2c:83:a9:7f:b6:0c:d7:1d:d0:55:6c:69:78:08:e8:
                    04:17:67:bc:a5:8a:8e:4b:2e:ab:f2:15:e5:7c:6c:
                    c3:3b:b7:95:be:6e:15:b5:fc:34:e3:dc:e5:73:e4:
                    b1:69:27:fd:8c:74:25:83:7c:e9:9c:58:b9:48:cc:
                    6d:72:0f:b2:8c:68:f1:bb:2f:b4:35:9e:72:96:ef:
                    08:7c:39:2d:af:61:dd:e2:e0:08:b4:f7:32:3f:d0:
                    af:8a:f8:8c:3b:91:d4:3c:09:32:67:33:d0:5c:de:
                    d4:e3:71:95:8a:f0:0b:9f:47:9f:f9:95:72:07:48:
                    08:a5:02:d5:a1:d3:1d:6e:74:74:b5:c8:7a:6f:ac:
                    8a:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F2:1E:0A:51:4C:B3:7C:8F:C3:C0:8C:3C:EF:58:EA:C6:71:30:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/7591ed07-3e4f-34e7-983f-c68801299932.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.crl

            X509v3 Authority Key Identifier:
                keyid:DE:AA:75:03:16:19:FC:53:EA:E3:97:BC:11:13:6C:90:61:55:FD:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e7255484-0f74-45b3-b1d2-b5eda55e6ce7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.96.0/20
                  209.240.112.0/20
                  216.183.128.0/19
                IPv6:
                  2604:5340::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:31:e0:fa:50:f5:c9:d6:86:ee:80:a0:40:47:0a:8a:1f:70:
         49:a0:d4:ca:66:47:be:38:c0:db:2c:cf:41:b4:f0:a6:cc:c7:
         2d:0f:a6:9e:e3:14:8f:7d:93:b1:5d:4c:ca:85:b0:4b:8b:8b:
         c4:93:03:43:bc:b9:b3:d2:a3:a0:bb:13:cd:0a:11:da:69:d2:
         0f:ba:c6:bc:7a:47:6a:00:0f:32:6f:19:f5:aa:b4:13:14:ac:
         f8:9b:ba:c1:03:6f:50:f3:c7:18:ff:a4:22:19:68:ba:75:91:
         e4:dc:98:22:19:83:83:54:c3:9e:3b:27:81:be:bc:d5:6c:47:
         e6:ec:d7:f2:59:d6:d5:cd:d4:81:58:5a:95:27:61:e3:29:7c:
         18:63:b8:09:24:eb:79:1f:34:0d:1c:25:c5:fb:4d:57:b9:0f:
         15:80:f2:06:7a:7d:82:4e:c5:e7:d8:9c:9f:cb:d4:09:8c:a1:
         bf:61:b4:42:6b:5b:c4:0d:6c:95:82:d6:bb:17:73:de:72:90:
         37:eb:01:f7:9b:0f:7a:3e:82:b8:0f:d5:b1:04:1c:56:c4:27:
         4e:29:28:9e:e2:70:c4:c0:52:5d:eb:ad:44:4b:1e:a5:ca:de:
         a1:33:f2:90:ad:26:54:d5:00:30:32:b0:d6:de:ab:1f:af:bd:
         7c:ef:8a:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 02:51:36 2025 by rpki-client