Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa
File:                     9d64b08e-529d-3b8c-982d-346d2925ddc4.roa (raw, json)
Hash identifier:          IOwgAQx/w8MmUuKk2kJqHccrPrdj9op/4GKtKCK8PiM=
Subject key identifier:   4D:38:53:16:5D:47:AC:C2:4B:0C:14:13:91:E0:78:48:46:9A:94:86
Certificate issuer:       /CN=081e7856-3e33-4747-82fb-8ae7578b05dc
Certificate serial:       010D0C9F432858490CB165FAD4D8EE8152118500
Authority key identifier: 65:A1:AF:3B:E7:0D:2E:B6:D0:73:97:4B:CE:74:3B:D4:89:19:74:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     16509
IP address blocks:        165.239.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:65:fa:d4:d8:ee:81:52:11:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081e7856-3e33-4747-82fb-8ae7578b05dc
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=cafd363c-fb4b-4d34-bd8d-9134c6b3c6b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d9:7b:a0:c7:22:e1:ba:5d:a4:c1:8f:45:f5:
                    dc:10:98:c0:94:df:04:a9:24:ca:22:6f:9f:ad:2f:
                    11:c3:8a:2c:8d:5f:43:cd:e9:7d:52:65:9b:95:ee:
                    f0:ad:78:b4:52:2f:dd:da:8b:6d:f9:7e:e9:6a:2e:
                    e3:5b:10:e5:2b:8f:90:45:06:27:bf:2f:a1:27:40:
                    13:95:df:07:34:c9:74:74:49:10:16:60:7e:79:9d:
                    5d:e3:09:7d:4d:ec:ec:f3:cb:92:09:0d:5f:d1:d5:
                    0d:13:eb:89:b6:17:4f:44:13:70:66:33:c6:e1:f7:
                    5b:74:54:9f:b2:55:1f:14:3c:44:5b:1f:df:36:f4:
                    c0:77:81:3b:f3:87:9b:53:c1:c6:a2:d9:d6:35:bd:
                    81:a5:5b:03:cf:e9:54:74:af:33:94:7d:9d:26:d5:
                    8b:c2:4a:5c:e4:c2:71:b4:26:32:b1:af:66:a6:c1:
                    1f:9c:2f:2e:8c:75:cc:29:9c:b8:c6:86:28:57:99:
                    96:26:79:cd:ee:56:13:e4:d1:a2:b2:3a:fa:20:fb:
                    40:f3:a2:61:f5:7c:7c:82:8f:23:ef:21:eb:70:19:
                    78:ec:5f:30:6e:04:07:72:0c:83:74:93:35:6e:aa:
                    d2:63:6c:c6:99:d2:e0:43:e2:0b:1b:09:7e:18:0f:
                    4c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:38:53:16:5D:47:AC:C2:4B:0C:14:13:91:E0:78:48:46:9A:94:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.crl

            X509v3 Authority Key Identifier:
                keyid:65:A1:AF:3B:E7:0D:2E:B6:D0:73:97:4B:CE:74:3B:D4:89:19:74:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.239.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c1:80:e5:a0:26:ec:88:ec:f6:2a:86:c6:9b:bf:1b:cf:9a:
         d1:87:49:cb:35:0c:fb:2b:c3:5b:50:6c:78:78:52:56:12:d2:
         24:d7:f0:c8:39:c0:b7:6d:71:27:30:9c:e2:1b:15:33:cc:25:
         b1:b3:0d:61:1c:44:d5:08:91:5c:ec:ba:1e:e7:1a:47:09:85:
         c9:70:e1:d4:fc:43:c5:d7:66:18:54:6f:ac:98:5e:d2:f5:40:
         71:b1:bc:d6:30:e7:18:f0:99:02:ea:67:a3:e0:89:75:ae:32:
         87:ab:92:86:66:08:9f:b1:f0:c9:0c:ed:23:80:4c:b4:fa:44:
         cd:5a:43:10:c0:38:8c:27:dc:06:39:b5:1c:bd:1d:28:d8:4c:
         1b:8f:0b:da:23:90:81:e4:9c:23:c4:33:3a:e8:d2:9a:4a:e0:
         97:4b:86:04:0b:7d:4b:8f:53:38:ef:2f:3f:fb:e7:47:aa:d6:
         86:ac:2f:38:34:60:98:bb:42:83:88:fd:bd:af:eb:52:33:5b:
         f5:36:f2:d4:d8:d3:00:b2:38:21:77:c7:2a:b4:e6:ed:aa:16:
         b7:45:88:c1:52:2b:8c:ef:80:ef:0f:af:56:c4:9e:df:8d:d5:
         9b:01:79:ad:25:2f:3e:95:00:80:56:cf:b3:20:6e:b1:1f:a1:
         d0:b2:88:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:39 2025 by rpki-client