Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa
File:                     a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa (raw, json)
Hash identifier:          UWPM/Wjojn27PgIkGHtjwzamwmSVVJ16LYP5f+3u+zw=
Subject key identifier:   0F:6A:A6:ED:11:AB:09:74:7F:AD:C2:9E:08:E0:E2:73:C5:30:EF:1E
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584944692F83EB7E4EF364206B40
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     14061
IP address blocks:        24.144.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:2f:83:eb:7e:4e:f3:64:20:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=b512ff8c-f03d-4dac-b089-821433c5725d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:32:c5:33:6a:c7:52:71:d6:87:f6:83:93:09:
                    ee:6f:e8:29:46:a6:16:bf:17:8e:41:31:45:00:0d:
                    a7:76:30:fb:57:ed:3f:72:76:b7:4a:72:7c:84:56:
                    8f:85:c6:d2:c3:51:26:5e:62:b8:1b:a7:be:c6:c3:
                    36:e6:3c:02:8f:08:eb:c7:69:00:43:44:c4:ca:4b:
                    25:b8:92:e0:2f:a3:9c:42:96:82:3c:c8:b0:fa:7e:
                    45:e7:da:ea:d4:f5:df:31:db:c6:42:4a:9d:4c:a1:
                    b7:3b:51:47:eb:43:03:08:4c:47:1e:c8:1d:a2:09:
                    87:f0:07:5c:0a:a6:90:63:54:f5:38:f0:e5:29:79:
                    14:9b:17:69:0c:7b:d0:c6:96:4b:53:0a:53:d7:0d:
                    67:02:3c:08:6d:a2:37:2c:e6:50:82:bf:d4:86:1c:
                    0e:a9:8a:2c:9b:ba:15:27:a1:9f:5e:42:e3:db:82:
                    6b:a1:c4:ca:a2:5f:5e:89:4c:29:5d:e1:44:63:08:
                    53:a8:0c:a0:e1:d4:93:43:ef:9f:ab:30:cb:92:d9:
                    36:8d:78:d5:78:d8:34:10:18:b5:20:46:a1:65:7a:
                    20:ea:6e:12:45:42:67:12:16:0f:fe:9d:31:b8:fd:
                    03:e2:3c:f0:34:e0:ae:64:48:3f:75:9d:71:03:0f:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6A:A6:ED:11:AB:09:74:7F:AD:C2:9E:08:E0:E2:73:C5:30:EF:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/a04b1006-9564-3ccc-99b9-4cd1c222b0a6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.144.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:41:a7:26:02:f9:13:d5:c7:af:98:f2:11:1d:3d:5f:49:dc:
         88:bf:d5:83:ad:36:ec:be:b9:ae:a0:a6:3a:89:ac:21:42:93:
         ce:a8:67:67:6e:c9:4a:fa:df:37:87:46:ef:8c:e3:36:f9:1b:
         41:8e:85:d6:29:51:1a:20:a6:e4:a3:98:f5:f0:1e:90:68:f7:
         08:54:f4:9a:6d:dd:25:16:1e:5c:69:7a:80:e2:ec:ee:43:b7:
         05:9c:4d:7e:ef:e4:a6:d3:57:c1:ed:1d:ec:6d:aa:e6:50:8d:
         14:b3:e0:b9:84:83:41:5c:0a:8f:e8:75:ab:9d:5e:d4:f3:08:
         4e:d1:9f:e6:1a:a2:ec:1c:96:80:5a:87:8a:d5:98:ad:f3:ae:
         b1:b8:d8:c5:96:0c:ce:bc:e8:05:23:67:dc:1e:1e:d1:40:b3:
         10:59:d1:6c:89:58:7c:bd:3f:66:e2:d2:2f:f8:21:0e:eb:94:
         58:33:a6:41:83:cd:28:c9:1d:86:08:fa:d0:a9:0f:6d:c2:d0:
         66:d4:05:66:9c:e9:51:df:0f:5e:00:49:39:a6:87:d9:0d:78:
         11:ad:aa:10:52:db:e8:be:2b:33:72:25:65:47:29:ec:78:e5:
         96:26:67:4f:0b:3b:a6:51:e6:3c:9c:81:c9:7b:14:13:5a:1c:
         c2:20:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:12:36 2025 by rpki-client