Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa
File:                     d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa (raw, json)
Hash identifier:          dx6JmZtpeh+dj7TT6m3vIjSuNGzBC5pDiADKr+b69to=
Subject key identifier:   3C:A9:86:36:2A:58:12:D1:BA:B7:D3:44:EA:E6:8B:E3:84:B6:3E:75
Certificate issuer:       /CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
Certificate serial:       010D0C9F432858499DBF322AEF6F8ACB73727800
Authority key identifier: 9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     7029
IP address blocks:        64.112.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:32:2a:ef:6f:8a:cb:73:72:78:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=f444f8cf-55b4-4c3c-bb45-c1bc9c7c57a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b1:ff:4f:13:9c:da:44:0e:d3:15:c0:c9:43:
                    5f:91:4d:53:0d:ab:f0:5b:80:e8:ca:f6:c5:de:33:
                    6c:fa:65:61:b6:da:68:7e:44:6a:3f:a9:ef:6d:b0:
                    42:c1:d2:67:c6:b1:ee:dd:64:36:6c:32:3e:b5:d9:
                    35:4f:98:05:80:d4:f9:4e:98:5b:cd:d9:1f:2f:0c:
                    66:64:f0:56:83:c2:8f:ec:09:6a:80:5a:04:03:91:
                    67:22:b7:e7:1d:a5:73:9a:28:8f:1b:7f:7d:71:19:
                    03:03:78:fa:73:f5:90:b7:7e:ee:50:25:7d:fe:47:
                    51:ff:e9:5b:72:f7:29:e3:39:cd:25:35:26:34:0a:
                    c6:22:24:e0:93:ae:db:f7:72:fc:be:79:45:ee:3e:
                    2c:c0:dd:2c:1b:7c:40:e0:db:3e:16:51:56:3c:96:
                    52:66:45:d3:c0:b0:b0:60:e7:e8:d0:27:a0:d8:ff:
                    02:cc:51:6b:2b:6d:29:c1:ae:0e:ac:40:0a:85:1d:
                    e6:d5:37:7b:75:43:2d:b3:57:e4:51:07:e4:5f:46:
                    8d:10:be:7d:a7:9e:78:a5:7a:b6:99:b3:ad:99:98:
                    2b:e1:25:d9:04:63:23:b1:32:63:63:00:c1:46:5a:
                    0f:25:29:f6:f9:6d:e0:6a:5f:65:89:72:3b:39:c5:
                    f2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A9:86:36:2A:58:12:D1:BA:B7:D3:44:EA:E6:8B:E3:84:B6:3E:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/d20aeba6-8d55-319e-b9b3-5e33bac9481c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.crl

            X509v3 Authority Key Identifier:
                keyid:9E:38:09:5E:28:4A:C7:3E:24:49:4E:E9:86:9E:61:4A:42:0F:ED:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c023ffaf-b2b2-4382-849c-2bc5bfd1a3c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:fb:de:e2:2b:f9:7b:ac:60:80:56:a8:02:44:bb:a0:15:05:
         e5:00:1a:60:fe:8a:72:12:8c:f3:73:6e:d0:c4:94:78:c9:80:
         8f:c0:13:cb:42:60:1d:67:77:5e:cb:ac:67:b4:f6:38:7e:17:
         0a:a3:cc:6d:29:bd:57:16:00:55:ba:53:12:f4:29:81:77:99:
         be:39:ff:af:b1:1d:be:ad:52:1c:07:d1:23:01:bb:e9:cc:6f:
         2e:87:f4:72:f9:7f:78:f7:3c:79:8a:c4:57:36:01:c9:4d:44:
         60:9a:c2:df:f6:fe:cf:c9:31:90:1e:1a:3f:ba:c1:8c:d3:d9:
         ee:f9:d3:01:81:e0:2f:21:ad:09:67:04:d5:4c:38:46:3a:0f:
         99:fd:60:5a:36:69:65:de:fc:63:2d:b2:0b:86:51:5c:0a:a2:
         dc:b5:03:08:71:d4:ce:e5:3e:00:e5:bf:f6:64:56:e1:2e:ad:
         5c:b9:7a:cc:6a:bc:ca:d2:a5:74:67:e8:4d:ec:5a:af:b4:c1:
         9a:36:eb:b7:0f:d1:98:1c:90:f1:8c:75:0c:e1:ec:e2:f7:0d:
         d7:b8:f9:87:dd:42:96:9e:48:6d:e5:d9:1e:6b:47:2f:e3:45:
         57:f2:eb:c1:e5:a4:44:a2:bf:aa:3b:5c:0a:aa:7a:25:56:1a:
         75:ce:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 09:01:29 2025 by rpki-client