Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
File:                     45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa (raw, json)
Hash identifier:          EAuyy6g6Jx2gWGHzoXkuJVROSbrCJ+Y0GxW3Zq8mphM=
Subject key identifier:   AE:80:3E:B7:91:4A:CF:0D:F5:D6:52:72:82:D5:99:57:9C:EB:5F:CB
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285849A4BACB66FDC8CCC473861AA0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36492
IP address blocks:        209.107.179.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:cb:66:fd:c8:cc:c4:73:86:1a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=e6739509-9311-4f12-bace-7c418dd61512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:23:21:f5:b0:cd:79:5d:6a:a7:08:d4:2f:26:
                    0d:b4:72:d9:0f:75:72:87:93:f9:98:18:63:3c:32:
                    85:91:e2:e7:0c:65:a5:a2:be:2d:54:61:2c:13:c1:
                    bf:08:3b:f8:85:d0:0e:b6:1f:cf:bf:e6:5d:41:13:
                    ce:f0:76:f8:10:64:71:8e:4a:18:34:0f:e3:47:84:
                    3b:2a:9d:9c:7c:68:71:97:25:3e:98:3d:51:70:44:
                    21:b5:53:6d:52:c4:f3:33:8c:aa:a0:a8:09:13:d7:
                    6d:f7:36:53:ca:b6:2a:92:13:fd:79:0c:18:97:a4:
                    ea:c0:89:7d:0d:d8:08:eb:11:65:02:f8:12:14:0e:
                    12:0b:12:06:31:8e:48:e6:a9:63:a7:38:6a:d5:3d:
                    bb:21:ef:e3:8c:e8:25:fb:60:e2:b5:5e:68:d0:24:
                    31:38:bd:15:90:a2:a5:0f:31:1a:66:36:d1:65:96:
                    f0:39:1b:57:4a:68:c6:f1:58:6e:df:1d:b8:64:e0:
                    56:cc:7d:92:dd:f7:63:0a:6d:20:c9:4f:04:c5:ce:
                    bb:f9:6d:90:01:ce:4c:b5:8c:96:b6:22:a5:cc:e8:
                    7f:b0:0a:64:0f:fc:7b:e0:93:5b:f6:58:78:35:20:
                    b1:b5:7f:ea:c2:5b:c6:fa:b1:76:b0:66:29:c0:ad:
                    e9:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:3E:B7:91:4A:CF:0D:F5:D6:52:72:82:D5:99:57:9C:EB:5F:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/45b9a20e-7a1f-36a5-ab8d-0805d8d48fdd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.179.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:53:bf:c9:6d:fc:c3:70:8e:95:25:e3:c2:67:ce:2f:fa:e7:
         7f:57:d5:b1:24:27:ec:1e:2f:31:2b:dc:5e:30:6a:a9:e1:9d:
         21:24:51:5f:c2:04:b8:13:36:0b:40:4e:1f:e8:47:a3:a2:be:
         38:e5:33:73:8c:08:d6:e1:a8:51:6c:3b:2d:95:2b:88:ec:14:
         d1:d9:f9:89:6b:33:8a:a1:e5:53:22:72:ff:5d:a3:a9:7d:db:
         03:9c:e4:06:d9:29:dd:e9:80:02:59:c4:ec:fa:dc:d7:75:9f:
         e9:5f:20:a6:19:92:96:1a:b7:0f:9e:f6:da:97:f5:fb:56:91:
         f8:e5:32:f1:54:85:d8:78:b9:dc:0d:61:ad:6d:33:5f:cc:7a:
         15:d8:ec:d2:6f:ca:a4:ba:b4:61:9e:4e:ea:eb:b3:c5:e2:d8:
         12:8e:38:86:a7:5e:b0:59:1a:17:f8:74:98:c1:f0:63:47:5b:
         5c:36:3c:64:b9:dd:50:0b:47:15:fe:c3:a2:bc:6a:bc:74:5b:
         41:7e:09:d6:69:ad:3a:48:60:2b:3e:43:d8:35:62:bf:cd:ff:
         5d:e1:ae:18:b3:80:53:72:26:19:1b:60:06:42:33:01:2e:15:
         a0:4a:46:fc:07:93:49:ae:bf:ac:08:53:78:8d:e3:cb:95:18:
         1c:4e:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:01:42 2025 by rpki-client