Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fec1fea-860a-3525-b6b9-65ade4b42740.roa
File:                     3fec1fea-860a-3525-b6b9-65ade4b42740.roa (raw, json)
Hash identifier:          aV0g00JnsKukPDX0YefPlHvWosVuNK4Re1kfAQz44MA=
Subject key identifier:   28:18:ED:9C:E5:02:FF:A1:64:B4:1D:4D:A5:E5:C2:A8:26:33:4B:58
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849AE7F442BA0E77760D0257F80
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fec1fea-860a-3525-b6b9-65ade4b42740.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     397630
IP address blocks:        172.81.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:44:2b:a0:e7:77:60:d0:25:7f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=20ea9177-5d24-43ac-a8c4-ff82aaa2654f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:89:3a:1d:fc:16:42:db:ce:7e:3b:a2:bd:c4:
                    c1:85:10:07:b5:8b:2e:b3:9f:c1:1f:dc:dd:43:d9:
                    6b:97:0b:13:25:7e:5a:75:55:ae:bd:29:9e:70:74:
                    af:e9:2d:c3:0f:17:47:43:9f:1a:81:b6:28:69:5e:
                    65:a6:bc:6b:00:d4:79:1b:0c:fe:62:41:29:33:ad:
                    60:e9:27:3c:0c:20:a3:be:d5:a1:5c:e2:f6:53:88:
                    a2:98:98:d6:86:1f:48:b3:e0:be:d1:dd:03:77:94:
                    a4:81:16:fc:60:53:5a:e4:45:92:13:c2:3f:1a:d7:
                    ac:b4:24:f6:e3:31:fe:91:88:95:db:cb:dd:ac:95:
                    d9:a3:63:95:03:6c:04:ce:1f:3b:cd:d0:af:71:69:
                    f0:6f:02:0c:0c:af:cb:58:a7:2e:05:58:a3:5c:fc:
                    51:56:0c:3a:23:20:40:0c:e3:7e:3f:5e:f6:62:06:
                    27:69:8f:07:3e:d6:23:cd:10:52:58:71:36:96:49:
                    9e:f0:8d:a2:2f:a9:13:bc:ec:90:56:34:88:d1:c3:
                    27:97:d8:f6:1d:eb:10:33:e9:2e:66:ce:fe:c7:a7:
                    c6:59:ff:41:ab:e6:1f:e5:ab:fb:27:10:b7:c6:f8:
                    ea:51:51:88:02:60:26:59:b8:9c:58:b0:ea:14:3b:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:18:ED:9C:E5:02:FF:A1:64:B4:1D:4D:A5:E5:C2:A8:26:33:4B:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/3fec1fea-860a-3525-b6b9-65ade4b42740.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:64:72:32:54:30:53:78:d7:e4:9b:6d:d8:c2:7d:29:a3:
         53:e0:05:ca:55:cc:44:33:7b:69:17:d9:66:e5:69:02:be:da:
         15:06:cf:4a:42:23:ae:21:ef:87:e0:2a:98:f5:d8:2d:73:f3:
         fe:9d:22:7f:54:ec:a9:3a:13:12:8c:11:9b:49:85:88:9e:db:
         16:b1:25:79:b0:64:76:f9:ba:02:b9:81:ea:a5:40:af:56:f1:
         91:f4:76:98:86:8e:f1:25:e6:24:91:52:2f:6d:1c:f3:b4:25:
         5c:4e:c8:c8:3a:5b:08:d0:5b:29:55:ee:f5:6a:8b:e8:e9:48:
         c3:d9:c8:33:ae:ed:50:a3:85:ae:31:ae:d2:61:59:19:0a:51:
         d3:5e:c0:ef:32:a2:ec:7f:41:8c:ac:fe:af:ff:f9:c9:17:65:
         81:71:83:a5:8d:f5:67:7e:0b:49:5a:4d:04:07:b2:ee:7c:cf:
         13:e4:c4:fb:74:fa:be:55:bc:07:07:2e:cc:37:75:c3:f7:0b:
         eb:e1:12:ad:67:47:62:88:67:6b:84:e1:4c:8e:6c:e3:41:2b:
         8f:8b:33:4d:fe:fe:4b:0b:6d:1b:27:c6:cd:54:04:6e:a9:97:
         a8:86:05:3b:97:af:e3:5e:bf:a5:90:ac:fa:e8:50:31:1e:41:
         35:ec:42:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 01:06:50 2025 by rpki-client