Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa
File:                     4541975c-59be-3abc-9393-18b2eb9ee90b.roa (raw, json)
Hash identifier:          WH0TQvVNc5OZo8ycvrijY+y+xPiWa+8fciZN/9Hzf00=
Subject key identifier:   39:CB:9F:66:38:6B:E7:75:8A:7A:C0:C0:A1:CF:B6:6B:80:E9:2B:DD
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6A6F4DAF2BB30433A520
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        69.48.156.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6a:6f:4d:af:2b:b3:04:33:a5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=37ab1291-b2f1-46e6-b438-12e5db5208af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:fb:3b:4e:11:7e:26:d8:97:88:bf:60:4a:1c:
                    45:2d:db:3a:78:c2:ca:da:1f:5f:c8:91:38:aa:71:
                    1b:70:ca:9b:0a:22:9c:c0:2e:11:1f:86:1d:70:91:
                    72:42:2a:54:7c:74:0d:e5:7c:5b:57:a9:71:31:54:
                    0d:ef:5c:d0:7a:0f:54:90:d5:5f:ad:d3:e5:4c:b0:
                    bc:79:b7:af:c0:8e:15:fb:c4:5a:5b:55:3d:52:e2:
                    2e:c7:04:e1:36:11:61:88:8d:42:d8:96:65:5c:c0:
                    d1:68:dc:d4:15:ad:7f:36:e6:21:a9:f2:cf:8d:85:
                    38:a8:17:92:37:b2:81:e0:95:3a:d5:77:86:71:e2:
                    8d:cc:0f:cf:42:fe:ac:24:65:dc:33:d2:9d:1e:9c:
                    af:1c:92:4d:0b:7c:d4:7f:cc:f9:08:af:a2:fa:b4:
                    20:de:f9:d3:6b:9d:07:5f:14:f9:00:32:11:6f:45:
                    2a:2d:80:42:0e:b2:d9:2a:88:39:91:b4:96:3e:85:
                    9d:48:75:ae:a5:51:35:c4:6e:31:ba:5b:8b:44:0a:
                    a5:de:e2:0b:c5:21:bb:30:d0:26:8e:ca:3c:21:4a:
                    46:22:14:94:5f:34:54:b3:64:08:58:a3:69:61:78:
                    83:62:ad:d4:60:c3:8d:36:18:ed:b6:a4:60:1e:c9:
                    3b:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:CB:9F:66:38:6B:E7:75:8A:7A:C0:C0:A1:CF:B6:6B:80:E9:2B:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/4541975c-59be-3abc-9393-18b2eb9ee90b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:48:b8:dc:5b:2c:31:ac:aa:45:98:80:b6:e4:88:e5:ef:c4:
         bc:f2:be:89:93:53:1e:cd:76:04:ec:ef:11:98:78:10:b0:0f:
         e7:c9:14:bb:99:4a:c3:50:c9:3e:41:5d:01:e0:34:37:b3:e8:
         f4:09:5d:29:0b:1a:06:a3:06:23:b1:dc:af:41:2f:cd:4a:4d:
         41:e4:89:0c:1b:8e:52:11:b9:4c:99:fb:c9:4a:94:d2:48:6d:
         80:f6:90:db:7e:eb:b5:9f:2c:ba:a6:2c:b7:6b:25:3d:2b:e3:
         e3:b9:c3:12:8a:db:9e:51:c3:61:6b:0c:4e:4e:4a:c7:83:29:
         6b:40:02:f3:72:84:0a:ab:56:39:5a:d3:04:a9:0b:45:5e:d9:
         6b:4d:d0:27:87:05:c4:97:61:75:4c:98:77:02:22:5b:66:69:
         f0:60:ad:6c:f5:09:56:2b:6b:35:f8:a5:80:23:4b:5d:9e:ce:
         fc:fa:32:4c:ec:e7:0e:c3:cf:94:83:37:fc:ee:0d:7b:46:39:
         24:f1:bc:1a:82:fd:d5:f4:f1:f1:0b:c7:c2:40:b0:43:d0:ab:
         18:ad:6d:fd:0f:f7:7c:58:18:bc:0c:f5:05:8a:a4:74:11:2f:
         70:c0:6f:0a:27:a4:21:5d:7e:ef:8d:f9:9d:9f:77:57:d7:79:
         b8:6c:a7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:34:10 2025 by rpki-client