Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0028205a-70c3-3bc6-99c9-dc1b9ce880ee.roa
File:                     0028205a-70c3-3bc6-99c9-dc1b9ce880ee.roa (raw, json)
Hash identifier:          YgDPAh77Sg4xT4uLn33v970cy+mBX9JsOYWrcLwm+F0=
Subject key identifier:   DE:1C:F7:66:35:AC:56:E9:CF:B8:D0:08:0C:AE:E2:52:85:5C:C6:C6
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849CE9A6BF03A99537DD9393480
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0028205a-70c3-3bc6-99c9-dc1b9ce880ee.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     53356
IP address blocks:        64.40.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:6b:f0:3a:99:53:7d:d9:39:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=21e81c2d-633c-4068-ba21-2f6d3b001993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:26:3a:7b:75:1a:47:22:ce:c2:4d:dd:96:92:
                    ab:26:f6:b7:fb:e9:0e:2e:3c:6c:18:75:3f:22:2a:
                    e6:ca:c4:81:60:28:7c:d5:04:bc:b0:f1:17:d5:9a:
                    e4:2a:14:60:e4:d1:5c:47:7a:80:e2:f8:38:fe:b6:
                    6a:26:9c:32:ec:64:f1:21:09:0c:f7:90:a4:1e:0d:
                    f9:e0:84:0e:ea:ab:3f:0d:a1:0b:56:b9:23:74:48:
                    2d:3a:8f:d3:6b:84:37:60:8f:35:df:22:f7:08:b8:
                    34:28:30:6c:01:87:3d:d3:0e:1b:4d:0d:a1:03:6c:
                    4e:1b:d8:df:13:80:5c:aa:24:b5:a5:aa:a6:b7:82:
                    3b:ba:9d:8e:65:80:57:e4:e2:b9:6e:ee:87:e4:6f:
                    e0:f9:30:20:a7:3d:0f:16:53:3a:b7:0d:a6:ec:a8:
                    49:49:32:8f:35:1c:a8:5b:89:aa:18:9e:94:a0:bb:
                    03:c3:22:5a:c6:bb:51:27:96:c8:35:7f:12:9b:33:
                    32:d1:16:e6:62:11:b9:22:43:5c:40:6b:d5:5a:4f:
                    6e:19:d3:a1:6a:ae:96:45:e9:13:1d:e4:04:cb:b7:
                    1f:4d:8c:45:47:80:73:e9:2e:cc:dd:f4:d3:07:43:
                    61:5b:bd:e3:9b:76:9e:ae:1d:7d:5c:de:5b:b0:ee:
                    94:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:1C:F7:66:35:AC:56:E9:CF:B8:D0:08:0C:AE:E2:52:85:5C:C6:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/0028205a-70c3-3bc6-99c9-dc1b9ce880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:6a:33:77:6f:b5:c2:f2:ed:d4:97:3a:60:90:0a:92:9d:d3:
         76:d7:67:32:aa:07:c4:b5:e9:88:4d:c3:e2:d9:be:a1:0c:22:
         85:c6:a4:02:ea:6c:e4:48:10:3d:42:85:cc:85:64:f4:04:c9:
         2a:e4:2e:28:15:1f:8d:a3:61:b1:b4:54:df:97:35:07:2f:9b:
         01:cb:fb:00:4e:62:1e:19:da:f4:94:f8:5c:33:8c:0f:fc:ef:
         b6:af:19:a7:a5:70:d4:81:81:93:d4:f5:49:4a:73:30:6a:6e:
         21:c2:44:5f:4c:ba:72:c7:23:b5:c7:f2:02:55:cc:08:87:90:
         b1:39:e0:bc:a5:ad:e2:6e:34:8d:f1:6f:7c:73:58:6f:5b:44:
         79:fc:c0:f9:4f:31:67:0c:cf:a8:b3:c2:e5:96:99:0d:ec:67:
         c7:c3:d5:9d:2a:a4:a7:40:51:8a:ac:d9:9e:e9:9f:78:94:b9:
         c2:30:06:5a:4c:1d:d8:83:f9:09:cb:41:10:92:ba:a0:22:2a:
         0b:d6:72:b3:da:3f:e2:b6:f4:8c:2e:0f:07:c8:01:55:e2:27:
         63:81:9e:d6:f5:70:74:b7:a3:1e:91:33:13:8e:00:f0:b9:2c:
         e2:11:0c:65:39:e9:22:b3:0a:cd:52:e3:93:01:bb:cd:15:1e:
         17:39:b0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 21:59:00 2025 by rpki-client