Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/94d3f32d-5c57-3396-96e4-9567a508021e.roa
File:                     94d3f32d-5c57-3396-96e4-9567a508021e.roa (raw, json)
Hash identifier:          QziSyJleaOc8VUt6RVUeUgPGbVO6rHd4mlfBAPG+iFQ=
Subject key identifier:   58:B2:E5:9E:0D:FD:88:DF:E5:A0:FC:FA:12:54:95:8B:35:61:13:99
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285849AA4F6A61C9D039E9328FFA00
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/94d3f32d-5c57-3396-96e4-9567a508021e.roa
Signing time:             Sun 27 Apr 2025 13:01:01 +0000
ROA not before:           Sun 27 Apr 2025 13:01:01 +0000
ROA not after:            Sat 26 Jul 2025 13:01:01 +0000
asID:                     55293
IP address blocks:        69.48.152.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:4f:6a:61:c9:d0:39:e9:32:8f:fa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Apr 27 13:01:01 2025 GMT
            Not After : Jul 26 13:01:01 2025 GMT
        Subject: CN=b8228adf-4892-40c1-98f7-ac92593256d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fd:33:99:d2:81:f1:95:29:09:ed:0d:ae:94:
                    ec:42:79:44:6b:bc:cc:eb:35:55:57:38:25:d8:ba:
                    51:2f:c6:2e:18:72:23:ea:43:46:51:48:18:64:42:
                    f9:36:51:d6:3b:f4:23:93:78:62:07:39:80:39:ec:
                    e8:0e:c0:83:14:09:a7:13:9e:78:bf:53:b3:2f:95:
                    21:d1:3a:9b:60:62:be:c9:13:f4:b2:e5:03:df:e2:
                    7c:26:42:07:8e:b8:cf:10:77:c1:65:f7:d1:68:ff:
                    12:06:e7:48:f6:2b:60:1c:47:9e:56:1f:3d:c6:74:
                    6b:57:65:c4:9f:be:c3:bb:4f:65:ca:e5:1b:6a:68:
                    81:3b:a1:cd:c2:ee:08:72:08:1e:ae:27:da:d3:c3:
                    54:63:0d:10:84:9f:34:da:50:f6:97:9c:fb:dc:5b:
                    ad:2a:18:ab:0f:ef:b2:a1:25:8b:9b:56:94:71:5b:
                    b5:06:f3:26:74:12:23:bf:a7:42:c5:cc:b0:9f:9a:
                    c6:ed:90:d8:a2:34:7c:62:45:75:e2:b9:3c:83:e7:
                    c1:4c:22:a9:bf:f7:ce:51:ee:48:ba:70:95:91:9e:
                    5c:9d:a6:7d:7b:35:ac:49:e0:08:49:24:08:f1:89:
                    08:0e:cf:79:6e:1d:4d:6f:da:05:93:54:96:a2:c0:
                    ff:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:B2:E5:9E:0D:FD:88:DF:E5:A0:FC:FA:12:54:95:8B:35:61:13:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/94d3f32d-5c57-3396-96e4-9567a508021e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.48.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:c5:8d:d3:67:9b:bc:96:c4:9c:f7:53:de:bb:61:fc:36:cc:
         34:bb:4e:fb:0b:64:ab:25:c3:85:7d:bf:25:48:38:30:70:74:
         15:d4:23:c6:c8:61:3d:a5:f9:50:3a:a1:2f:66:52:8a:3f:a3:
         98:18:fa:d7:9e:1c:be:0c:38:9e:ed:9b:f6:f4:32:58:d9:d9:
         14:e8:a3:53:8a:48:76:75:9d:e9:04:4b:47:33:72:48:18:2e:
         67:69:a0:ad:f9:4e:3a:e9:8b:2f:9d:eb:1d:48:52:2f:6c:31:
         0b:6d:23:9e:02:90:a7:47:3f:ca:12:22:90:23:12:c3:9c:0d:
         9c:25:53:10:96:25:ef:ab:a0:5b:ae:0b:c5:5f:1e:2a:61:45:
         e7:77:63:bc:84:28:2a:ed:55:5a:0f:6c:39:27:a9:fe:e4:24:
         e2:27:f0:fd:bf:3a:24:34:8d:c4:fc:7f:61:b2:e7:a6:6b:78:
         00:c7:f8:d1:e8:ee:7a:33:a0:dc:f5:52:2e:4a:b5:ea:db:dd:
         06:e5:13:80:a1:bb:6e:1b:0c:1a:bb:2c:aa:6e:02:2f:26:40:
         d5:7b:71:91:ab:d1:ec:bc:2f:61:a2:1a:72:3b:97:68:00:4a:
         11:3c:5b:78:cc:2c:9b:6f:e8:6c:39:92:28:68:5a:86:6a:dc:
         76:ac:d3:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:44:19 2025 by rpki-client