Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/104e3e1b-ad0a-32ef-ba0a-7e43594b644f.roa
File:                     104e3e1b-ad0a-32ef-ba0a-7e43594b644f.roa (raw, json)
Hash identifier:          rzBAYxuFVcoJii8Bcvi6JAbx5cMH5mcvsWB+V+DrmAw=
Subject key identifier:   85:A3:DF:90:03:52:41:49:08:81:EB:9F:42:30:09:65:9B:4D:8E:1C
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F43285848E59BBE794E296FFF30987780
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/104e3e1b-ad0a-32ef-ba0a-7e43594b644f.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        136.184.225.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:be:79:4e:29:6f:ff:30:98:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=deba3dcd-3501-4582-b8fb-4aa00c71d334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d0:a1:53:12:7e:7a:60:ee:19:9f:a8:56:7a:
                    ea:4b:fa:6d:8a:ab:bc:58:60:28:71:1e:34:33:0f:
                    c4:20:c9:d2:a7:e4:9e:12:f2:74:73:00:ed:a1:9e:
                    5d:db:46:ad:28:9d:2c:5a:f5:70:e7:b4:87:4e:e3:
                    0d:81:f3:34:7b:ad:08:1c:cd:7f:3e:ed:57:83:b0:
                    e1:ca:d9:a2:5f:5a:44:32:85:b6:24:39:d8:23:fe:
                    c2:74:cb:b0:90:c9:09:9b:4a:12:18:e4:4b:53:89:
                    12:04:a7:94:f9:74:00:61:36:dc:b3:9c:eb:e7:9e:
                    12:12:f8:3c:27:67:2b:4b:50:ed:d7:59:17:d6:12:
                    32:b4:96:ce:58:7f:75:0f:94:3c:04:45:3e:2c:b2:
                    10:76:72:de:66:ed:fa:26:dc:08:f0:6b:b7:b6:18:
                    e7:19:51:75:85:03:30:43:e4:28:70:a1:3d:22:0c:
                    b3:01:cc:58:70:54:b6:96:36:ad:e8:bb:f5:c2:88:
                    1c:07:c6:dd:3e:01:9a:62:be:48:2d:00:1b:84:ed:
                    4c:c8:93:8b:ff:07:f4:3d:5e:10:0c:4b:03:6c:dd:
                    9c:75:28:bf:f0:ed:9d:52:74:90:92:72:70:41:01:
                    a6:6c:6f:f8:62:60:6f:17:ec:01:d1:04:65:8f:b1:
                    f8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A3:DF:90:03:52:41:49:08:81:EB:9F:42:30:09:65:9B:4D:8E:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/104e3e1b-ad0a-32ef-ba0a-7e43594b644f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.225.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:96:a7:cf:e7:78:4e:a4:e0:db:a5:ed:00:14:ca:9d:c0:9f:
         32:f2:60:c0:2e:1f:60:63:83:09:97:f6:58:d1:86:19:bd:69:
         16:72:7b:9d:ee:cf:2f:c0:26:75:76:3a:0c:9a:10:b2:a3:97:
         75:cc:ac:21:b3:f3:77:03:74:b7:04:5e:4a:e8:9c:de:a3:b5:
         de:d8:71:57:63:c1:30:12:d4:7f:7e:9c:12:df:cd:f7:b8:d0:
         82:0a:9d:5f:12:e7:6e:5e:2f:58:80:bb:e6:bf:8e:76:dc:cf:
         66:43:09:f7:eb:ca:74:73:65:bf:bc:8a:30:a9:00:3a:2b:92:
         6e:0d:bb:4d:6a:bc:0a:7b:24:b5:6f:f2:1d:51:d1:ad:57:ba:
         d3:ef:e9:f3:35:d0:d7:5f:14:84:eb:a2:44:36:0d:5b:3c:69:
         a6:98:6a:4c:21:53:ad:d9:ae:67:9d:1a:b6:ce:fa:16:5f:5e:
         78:81:5a:91:40:f0:c6:cc:c7:9c:01:c1:d9:dc:65:d4:7d:08:
         ce:2a:18:74:7d:0f:eb:a0:cd:9d:c1:34:9d:c0:38:25:35:0f:
         53:95:fd:0c:b6:88:ba:fd:1d:24:c3:f2:bc:31:63:b2:f6:09:
         ea:e7:27:91:b1:b3:23:21:2a:43:e7:3d:65:07:e7:c0:66:b6:
         11:5c:7f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:13:55 2025 by rpki-client