Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa
File:                     386208eb-3986-3358-8dc9-d4734254711b.roa (raw, json)
Hash identifier:          cpVIvY4h15hpvHkWANDFmYw3yni7iNL1OZ8qiT8hWoc=
Subject key identifier:   47:82:67:77:78:50:99:92:A7:56:30:A4:AE:84:C3:FF:0D:49:E1:AA
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285849A8E9D8F676D597A3E7B68B80
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa
Signing time:             Sun 27 Apr 2025 01:00:46 +0000
ROA not before:           Sun 27 Apr 2025 01:00:46 +0000
ROA not after:            Sat 26 Jul 2025 01:00:46 +0000
asID:                     834
IP address blocks:        75.127.88.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:e9:d8:f6:76:d5:97:a3:e7:b6:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Apr 27 01:00:46 2025 GMT
            Not After : Jul 26 01:00:46 2025 GMT
        Subject: CN=d3d4d5c9-63b3-4a01-bf57-8222de6d94c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:67:1c:cf:fb:aa:7a:e7:6c:43:7b:80:37:53:
                    bc:f2:e7:9e:56:7d:d2:fc:48:a1:c6:52:56:36:ca:
                    31:9e:fe:4c:45:d8:db:60:52:dc:e7:09:c5:44:5a:
                    ba:fd:83:a0:51:67:af:12:6f:84:72:4c:77:38:ab:
                    60:27:20:68:92:e7:2d:61:e3:71:ec:74:5f:22:06:
                    c8:37:32:de:fa:ec:9c:1c:7d:c7:e6:bf:96:5f:10:
                    d0:3c:b4:5e:b4:c3:98:a9:5e:7d:a1:76:06:45:45:
                    50:d1:3f:73:24:9f:91:a8:e8:0f:2f:da:35:16:2a:
                    d1:c9:6a:17:03:9a:37:58:e2:c3:c1:7c:24:cf:0e:
                    c9:c8:46:82:4f:51:69:d5:56:fc:e1:95:3b:06:06:
                    34:cf:00:e7:01:5a:bf:a1:23:ab:65:9a:02:6b:a5:
                    e8:05:d4:3d:3d:79:75:a8:1f:b0:2b:bf:e0:0d:2a:
                    ed:5c:5c:6c:d7:ed:2c:71:86:c5:e2:62:07:a6:19:
                    44:00:34:c2:c1:5f:d9:72:33:6a:01:bc:f9:28:0e:
                    12:73:6f:75:54:8d:5b:b8:a1:01:d2:e2:62:ff:99:
                    a2:39:ac:4a:01:28:40:05:bf:0c:3d:ee:c5:68:40:
                    6f:08:69:47:37:e7:eb:af:3b:4a:cf:06:28:b0:06:
                    94:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:82:67:77:78:50:99:92:A7:56:30:A4:AE:84:C3:FF:0D:49:E1:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/386208eb-3986-3358-8dc9-d4734254711b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.88.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:bc:2f:b5:79:12:0d:7a:1f:76:b8:57:73:cf:45:02:6e:ee:
         f2:7a:2d:e0:8f:70:84:0e:d4:df:02:82:d2:f0:b3:22:a8:6b:
         e6:3e:15:d8:71:a3:f0:0b:4e:31:b1:12:d5:f7:e0:3b:ec:37:
         b2:b2:b1:cd:52:ba:cb:97:06:04:bd:0c:35:06:f6:76:2f:94:
         ef:46:d6:cd:da:dd:63:24:fe:11:ce:99:cd:a6:02:d6:86:66:
         4d:2b:7a:33:cb:f5:cc:e5:4e:49:04:dc:5b:8f:72:d8:5c:b1:
         fc:75:0e:3f:fd:83:01:44:dd:d9:84:6f:b7:6e:a9:63:e2:83:
         c7:2d:8c:6a:83:3d:94:da:0c:21:ba:5b:f9:97:df:d5:9d:c8:
         c9:60:7f:ce:a0:21:02:f3:9c:54:c8:f9:7b:01:8c:e6:c9:3c:
         6a:0b:02:ff:c0:7e:61:7d:13:1e:59:b0:1b:35:7f:99:92:69:
         d4:88:6f:2e:ee:dc:45:b6:d2:f8:ab:09:8d:f4:41:91:68:1d:
         b2:73:15:6c:58:0b:33:d6:0d:4e:ee:41:c8:4b:02:de:04:e4:
         b4:0f:5c:2e:00:79:50:2b:78:04:6e:27:0e:63:e6:93:c2:9f:
         d6:44:39:c8:c2:05:9b:2e:a6:62:69:3d:5b:25:94:89:91:4e:
         5e:91:8e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:21:30 2025 by rpki-client