Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa
File:                     3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa (raw, json)
Hash identifier:          ssfA6QKvOCUhqrw9mXUM4g37VOItiyB1OoAYhTZASN0=
Subject key identifier:   51:FB:88:6D:27:A0:82:79:95:DA:51:19:97:46:01:C1:B2:14:5F:8D
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285849C4D4AF50424EB376B5105300
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     376
IP address blocks:        205.151.72.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:af:50:42:4e:b3:76:b5:10:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=bd5df8c7-fe17-4f3e-a249-bf3d7bab61dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:5e:6c:e3:99:8f:20:11:cd:7c:07:2d:4c:f1:
                    17:68:e5:0e:5a:5c:4b:1d:89:93:05:4c:01:a2:c7:
                    74:5c:e9:ac:c3:44:22:fa:8f:f3:53:5b:9e:6d:a6:
                    51:37:10:c1:a4:6c:9f:ce:03:b3:5e:0a:f5:5f:86:
                    b9:fc:c5:66:df:a0:07:21:c5:89:9d:4c:9f:a4:55:
                    e6:42:46:64:b0:71:86:07:77:07:0a:9c:5e:e6:43:
                    96:cb:30:da:93:b6:ce:51:9d:56:77:30:fb:25:20:
                    ba:ea:c6:db:4d:20:43:37:f8:f2:bf:31:2e:1f:f4:
                    eb:1e:1d:17:03:2d:59:ae:9f:6d:4b:85:d9:c5:2a:
                    93:2c:02:f0:68:2d:cd:22:d0:b6:fd:a4:01:c4:a4:
                    07:64:20:a1:33:78:50:bd:f7:1d:cf:ae:0f:ee:e5:
                    91:68:8a:8d:e9:10:04:7f:81:0c:6c:6c:de:30:62:
                    94:4c:44:57:7f:63:be:02:97:6e:36:c1:7c:55:64:
                    8b:08:54:7e:07:4e:b6:94:d7:6d:9d:e1:7e:b5:e5:
                    bb:dd:fd:f3:0f:1f:85:e5:4b:1b:e4:bb:fe:c8:7a:
                    4b:1e:5f:b8:94:ef:84:89:92:a8:12:5c:7c:81:2e:
                    58:27:38:83:52:e1:bd:9c:f9:e3:47:76:4e:f0:b9:
                    8f:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FB:88:6D:27:A0:82:79:95:DA:51:19:97:46:01:C1:B2:14:5F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/3721f4d7-0ed4-3209-88f8-9531cd7b670f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.151.72.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:85:78:f5:ae:40:aa:f5:5a:42:2b:b8:27:b7:d7:44:82:
         9f:ef:fe:ab:fe:a9:5c:94:85:d8:8e:12:a3:aa:90:e4:d7:c9:
         56:d4:71:0d:0d:4a:3c:49:26:72:b3:3b:58:70:ab:40:ad:ec:
         bf:a4:62:d0:45:85:7e:3e:1c:0f:58:a3:bd:ad:f8:80:9d:01:
         59:bd:f9:1e:71:a0:02:7f:b1:5c:b0:f8:9e:cd:ce:cb:c5:7f:
         f2:0f:98:99:51:62:90:63:48:a0:77:82:7e:c0:5b:d8:9b:df:
         f3:99:1c:bb:cf:65:f2:e0:2c:46:c1:b7:26:a2:2d:b8:28:69:
         9c:ee:32:43:c2:9e:36:65:d5:2f:96:fb:fa:ba:6b:91:97:b4:
         4f:72:7d:a0:b9:cc:83:17:bf:00:13:ff:7c:6a:c6:4e:bd:03:
         06:25:d8:07:45:7b:8d:8d:2b:60:75:02:5a:89:e8:d6:96:ef:
         11:5b:25:36:86:ec:33:30:0b:fa:89:7e:72:3e:32:d5:7e:2c:
         fd:8b:a3:58:4b:bb:c3:da:25:f4:85:83:31:1e:e1:d3:1e:b0:
         3c:d8:3f:9f:0f:bc:ca:1b:ff:26:77:4f:a4:07:e4:05:75:b2:
         28:16:e6:0d:73:64:a0:7e:89:14:84:f8:b5:fa:56:ab:64:64:
         c8:a7:9c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 11:00:32 2025 by rpki-client