Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa
File:                     def21d29-3c57-3407-a3f2-98f21d026004.roa (raw, json)
Hash identifier:          arkG2As+7+BSCJa0ufzHsb6bUKvXeucCFxhHiHqbSMM=
Subject key identifier:   EA:B7:C7:E4:21:1F:4A:D5:C1:E5:BA:25:19:C4:5A:92:D0:30:FB:F4
Certificate issuer:       /CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
Certificate serial:       010D0C9F4328584900214AB8AF36212FB8D8D100
Authority key identifier: 59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa
Signing time:             Tue 25 Feb 2025 14:00:52 +0000
ROA not before:           Tue 25 Feb 2025 14:00:52 +0000
ROA not after:            Mon 26 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        143.220.144.0/23 maxlen: 23
                          143.220.146.0/23 maxlen: 23
                          143.220.148.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:00:21:4a:b8:af:36:21:2f:b8:d8:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a1c34c8-0e59-4e61-80cf-17a185f2789b
        Validity
            Not Before: Feb 25 14:00:52 2025 GMT
            Not After : May 26 13:00:52 2025 GMT
        Subject: CN=88bfea70-1afd-43d7-826a-5f5f3dda8483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:da:c4:9b:31:dc:00:c8:a8:04:47:c6:d5:28:
                    91:ed:cb:04:e6:31:8e:79:16:f9:34:5a:50:ff:0a:
                    e8:bf:d0:24:8e:ed:07:c7:75:36:13:7b:e8:52:12:
                    42:a4:08:88:38:d6:ed:be:54:0a:6c:ce:77:52:8e:
                    e3:c5:22:9d:6c:fc:14:af:96:3e:70:c7:c5:ae:84:
                    5f:8b:5e:e0:cc:eb:e8:00:77:cf:7c:ce:96:16:25:
                    0a:c5:a3:19:cc:51:0a:d3:fc:45:28:c2:d6:27:6a:
                    9b:a8:33:48:f7:2d:a0:88:2b:6c:1b:7f:9d:d6:fe:
                    66:03:fc:70:e5:98:1d:6f:11:4b:de:34:2a:c2:5c:
                    d0:5c:44:c7:ca:c7:10:a9:7a:4a:ce:e2:1c:47:c2:
                    be:2b:1c:2d:58:1d:41:20:cc:1a:87:b7:9f:b7:c2:
                    10:e5:e1:e6:fb:03:f1:e7:58:a8:65:37:09:80:bc:
                    56:9e:36:a2:6b:97:78:d0:ed:40:e8:b0:b5:ff:a6:
                    5a:12:6c:ea:88:bd:15:c0:35:e4:34:44:e3:f7:dd:
                    36:53:e6:07:ed:a1:a6:43:9e:7b:b4:4b:c0:58:9a:
                    63:27:e3:51:9b:55:f4:da:32:bf:c5:32:95:54:46:
                    56:9b:dc:79:f8:8e:23:5e:9a:7a:6b:5d:b9:74:3d:
                    12:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:B7:C7:E4:21:1F:4A:D5:C1:E5:BA:25:19:C4:5A:92:D0:30:FB:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/def21d29-3c57-3407-a3f2-98f21d026004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b/3a1c34c8-0e59-4e61-80cf-17a185f2789b.crl

            X509v3 Authority Key Identifier:
                keyid:59:54:09:0A:63:5E:F8:58:65:1B:58:C6:1E:C4:50:15:2F:0B:5A:1C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a1c34c8-0e59-4e61-80cf-17a185f2789b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.220.144.0-143.220.149.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:96:8c:b6:db:45:f6:fb:70:03:fa:93:c5:0e:9f:0d:5c:85:
         79:4e:f7:34:f1:9a:d9:15:91:72:93:47:7c:b5:98:20:d9:57:
         dd:f3:fe:77:27:ba:41:e5:df:cb:c2:d3:9d:c0:1c:70:cf:a5:
         27:0f:63:58:bd:e0:0d:c2:2d:a2:b8:d1:d4:64:81:c3:fb:be:
         9a:59:cc:7b:d1:cd:e9:81:b6:f8:d0:e5:c4:c3:a8:07:3f:ec:
         3f:db:dc:2c:65:ec:d1:f4:43:cd:fa:47:00:b9:e9:3a:be:cb:
         6c:1a:75:01:bd:ea:86:a8:e1:db:66:7d:12:15:eb:dc:77:4d:
         93:b8:d4:57:d9:a5:e4:9d:0d:f9:54:67:69:c9:58:8e:2d:56:
         4d:5f:db:2a:a0:69:13:fc:55:d3:ff:17:c4:b7:a2:64:0e:a7:
         cf:9e:61:31:58:f1:4a:30:1d:57:0f:11:e1:2c:bd:e4:ab:e5:
         0b:01:cc:fe:5f:84:67:2f:57:f2:65:0d:46:e0:7b:ef:3a:d6:
         3d:58:87:60:bc:72:7f:ab:f4:0b:a8:46:f1:eb:5d:4b:6d:fd:
         9e:2f:68:4d:82:3b:44:31:45:8c:0e:ae:76:e4:78:23:65:3b:
         b3:ec:3f:66:d4:ba:c5:a2:86:b9:9c:1e:10:28:33:39:6c:a8:
         79:84:69:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:14:09 2025 by rpki-client