Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ac31bc20-02f0-3ea0-8404-99c8516a115f.roa
File:                     ac31bc20-02f0-3ea0-8404-99c8516a115f.roa (raw, json)
Hash identifier:          fU6lbmeR9mNoSZb/bhXrjNKExdK/Wo/wfWGQc8wk+V8=
Subject key identifier:   52:63:AB:B7:8E:2F:8A:76:81:64:C2:35:FA:66:F3:A5:A8:4C:16:7B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849B6DF59E1EB782A6BDBA31F18
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ac31bc20-02f0-3ea0-8404-99c8516a115f.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     64267
IP address blocks:        207.182.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:59:e1:eb:78:2a:6b:db:a3:1f:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=01ec34c4-d6db-457d-9140-27b328404608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:be:66:d6:8b:aa:66:84:d4:79:ef:4f:28:c0:
                    18:aa:23:7d:c7:74:5e:02:5c:f4:99:57:25:41:91:
                    01:47:c4:4b:83:92:88:7f:51:98:5d:70:9e:04:08:
                    ab:e2:bb:ca:c7:38:d1:6e:a4:aa:98:e7:72:9f:aa:
                    35:3f:9c:b2:bd:b4:ba:b0:02:b0:40:6b:60:1e:40:
                    56:57:50:0c:a4:22:dc:84:c9:9f:eb:a6:c7:d4:47:
                    c7:a8:71:af:48:d5:b0:f4:63:5b:31:04:5c:c9:e6:
                    36:6b:69:d6:c2:ee:bc:d4:1c:eb:5e:b4:08:5c:9f:
                    ec:02:cf:6f:b1:43:95:dd:29:ca:1d:45:57:db:4a:
                    c2:b8:45:0e:16:95:6f:d7:45:bc:8e:44:c1:13:ef:
                    28:25:cf:6f:f4:e3:7a:e9:b2:e0:06:2a:7b:9e:fa:
                    88:7c:de:42:5c:1a:8e:9c:f4:d6:b0:54:01:11:40:
                    de:56:e7:73:cd:96:d3:78:47:c0:71:fa:72:ea:c4:
                    7f:7a:09:bc:4a:6c:30:03:e1:ff:ef:31:21:70:89:
                    52:0e:c1:9a:ad:80:c2:ba:fd:6f:ee:12:4c:93:94:
                    1d:a1:c1:3f:d5:4d:80:69:7f:8f:33:a9:fd:5f:e1:
                    a7:89:9a:cb:b9:6d:d5:fb:11:42:e2:27:53:2e:b7:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:63:AB:B7:8E:2F:8A:76:81:64:C2:35:FA:66:F3:A5:A8:4C:16:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/ac31bc20-02f0-3ea0-8404-99c8516a115f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.182.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:06:0a:c4:55:ce:d7:26:96:01:5f:7d:0a:d5:5e:0f:cf:a0:
         07:20:ec:05:f7:3c:96:98:c7:f8:96:e4:eb:c1:d0:df:b5:f3:
         87:4c:0a:c7:a6:60:a9:a0:55:51:46:ec:72:fc:d6:a4:1c:9e:
         e3:11:99:6a:5b:7b:3d:6d:76:cf:fc:77:6b:44:73:d5:f8:af:
         e5:82:2c:b6:a4:ef:0f:b7:bc:06:41:e4:9d:eb:ef:27:b0:1c:
         4c:16:d5:96:88:57:71:10:f0:72:97:73:8e:7c:01:47:ba:7e:
         d6:24:fa:11:7a:aa:98:6c:34:27:ca:80:89:ca:25:28:ee:89:
         79:cc:22:e6:17:96:6c:23:a7:63:f5:ee:1a:f1:00:74:c8:ae:
         c3:27:84:19:71:d8:9d:59:6c:c0:56:b1:df:5b:ef:07:12:f1:
         05:e9:1d:33:87:d5:f1:d8:08:9a:5e:50:14:f4:18:ac:96:65:
         fb:d3:af:55:8f:86:14:5b:e2:81:8f:3c:72:d8:10:07:1a:61:
         e3:7a:55:b4:fd:5d:df:03:dd:95:78:74:8d:59:13:e0:4a:03:
         21:ca:7f:04:07:c3:98:02:aa:7b:bd:bc:14:6e:0c:0b:60:8b:
         f9:e0:57:10:5f:d4:05:ab:9f:a0:31:1d:b4:bc:a9:91:38:8a:
         16:90:e2:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:50:53 2025 by rpki-client