Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa
File:                     78547236-3f10-365d-86ff-3920070fd3ad.roa (raw, json)
Hash identifier:          LnPI8BkrYOwHsP0VbO6imWMmz3rwkgPaNUhBP/21xkI=
Subject key identifier:   92:0A:5D:39:A4:65:6D:0D:68:4B:07:58:20:77:F0:7D:51:BC:B6:8F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BBD0B4AF0CA46122D640
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     46129
IP address blocks:        159.18.129.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bb:d0:b4:af:0c:a4:61:22:d6:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=849bec4b-95ea-4e09-bd45-6ac6c48c517f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:e3:e7:0d:96:7b:d9:c3:81:94:4f:c2:5d:
                    3d:5d:de:ef:bf:71:cd:e0:82:36:91:62:94:89:19:
                    d8:14:8a:50:dc:17:12:58:11:b0:7b:0b:d3:e6:1d:
                    1d:cc:21:dc:16:72:a7:12:5b:c0:8d:5f:62:ed:6e:
                    ca:c5:50:22:9f:45:ec:67:56:40:a3:f1:af:fd:7e:
                    11:a6:40:b3:d1:6d:99:5b:8d:17:73:e9:b1:4f:21:
                    58:68:b7:c8:4c:03:db:dc:23:e8:eb:bd:3a:57:5e:
                    5f:f9:3f:2e:26:9c:54:fc:ce:82:44:2e:58:ee:26:
                    87:be:2e:8f:7a:51:d3:31:01:a9:99:d4:24:d2:c0:
                    3c:ea:85:dd:f3:82:d7:b4:7a:f2:94:58:7b:11:ef:
                    aa:88:ea:29:82:de:64:da:ab:ca:1b:8b:b7:88:f9:
                    8f:f9:af:04:07:87:15:91:37:a1:a5:ac:6e:9e:5b:
                    8e:98:2b:50:2d:76:f9:2d:88:85:7c:e3:fe:f5:bb:
                    99:3d:29:2c:a9:e9:ad:f5:f7:27:54:e4:06:13:4b:
                    b9:2f:90:ac:5e:8c:74:94:51:ea:4c:0c:5e:6c:6d:
                    03:a4:70:14:5f:5f:7d:f0:8b:13:64:21:b4:61:77:
                    27:60:cf:4a:44:29:cd:ed:98:6f:6e:a1:f0:91:b0:
                    9e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:5D:39:A4:65:6D:0D:68:4B:07:58:20:77:F0:7D:51:BC:B6:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/78547236-3f10-365d-86ff-3920070fd3ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.129.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:0b:9e:17:7c:8d:e0:0b:e8:83:ce:16:57:c1:1f:52:6c:e7:
         c1:4e:4e:ad:fc:8c:02:ed:10:23:1e:e2:73:7a:49:52:d6:3b:
         3e:c4:ff:7d:07:02:02:cd:34:ff:74:1e:51:6e:04:14:2b:ab:
         23:6c:a1:6e:75:68:ac:df:ab:79:26:d4:ab:0a:11:ab:66:8a:
         4a:2d:03:69:11:fe:12:e5:5b:a4:97:41:fc:f7:f4:55:7b:22:
         0f:27:45:19:ce:a6:8c:2e:85:ce:36:dc:0e:0a:22:68:98:14:
         dc:e2:66:85:21:c0:ea:60:a4:ee:e4:d5:8c:ad:a5:3e:1d:ae:
         63:66:84:d6:8d:b4:b4:7e:97:ac:96:72:fe:dd:a0:fa:b9:9f:
         45:01:4b:28:23:30:3e:e5:31:3f:0e:31:3b:fc:82:85:77:d6:
         72:ff:28:b1:65:54:71:1e:15:38:e1:29:ba:82:35:c5:4b:9d:
         2a:89:30:74:fe:92:73:f3:a9:c7:87:3a:59:81:76:19:ee:54:
         49:44:2d:75:78:24:5c:82:76:f0:e7:24:83:04:db:6c:68:03:
         2f:50:c9:b5:58:20:d6:f2:07:16:43:6f:ca:4f:a8:bc:3b:23:
         ce:75:54:63:4a:85:ad:04:44:d4:ae:0b:d2:ae:a4:13:46:c8:
         93:c8:fa:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:42:12 2025 by rpki-client