Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/297eb29d-d751-36d9-a00e-e217da44ebc6.roa
File:                     297eb29d-d751-36d9-a00e-e217da44ebc6.roa (raw, json)
Hash identifier:          8IkXS/ArJKoCR8qp21jGEgZm1eqy+f8atviYEq/Kqss=
Subject key identifier:   12:88:D4:EB:77:6C:1E:39:1F:B3:82:7F:5A:33:CD:BA:FB:32:5A:BF
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490E16B9E4D16ACED444D32700
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/297eb29d-d751-36d9-a00e-e217da44ebc6.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     20454
IP address blocks:        131.153.160.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:b9:e4:d1:6a:ce:d4:44:d3:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=7ac617ee-2922-4a68-a3a4-427a1514abec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:8b:14:f1:a6:aa:a3:98:0e:4b:68:f5:09:59:
                    7f:aa:8a:84:03:09:7c:a8:c4:a2:2c:2f:a3:09:3a:
                    27:e8:0a:5d:3e:4d:76:e1:c0:57:9c:33:96:f9:ac:
                    5c:29:18:c1:9c:6c:7b:93:f3:90:c1:02:6c:ba:86:
                    ee:58:8e:69:c8:f3:e3:7a:d9:7b:75:10:74:06:2c:
                    3a:e5:7c:88:63:b2:ed:17:5c:ce:8e:4d:55:ab:e8:
                    cf:a7:dd:c8:68:3a:03:35:6b:45:98:4e:a0:ec:6d:
                    ad:94:24:dc:e0:e3:fb:52:5a:82:07:d7:d8:be:bb:
                    e5:8a:f2:e6:4c:99:d1:1d:24:ca:09:63:68:94:4f:
                    38:52:21:9e:d2:0e:01:24:1d:d7:76:5c:d4:a7:69:
                    92:20:b9:39:93:22:14:23:89:67:e3:00:68:e9:ae:
                    cf:73:e0:63:e8:c7:b5:8d:fe:af:8e:63:6f:0d:cb:
                    c8:22:29:91:77:8c:a5:b7:ef:42:b7:fb:85:50:9f:
                    f7:21:01:5c:e0:b5:a5:2c:b4:cc:ef:7a:a9:ba:01:
                    cf:79:67:e5:51:1f:ff:8f:0b:b4:54:a5:70:fb:e3:
                    02:bf:65:4d:47:02:4e:bf:7d:11:43:65:91:de:af:
                    1a:ff:b0:17:39:76:c1:c7:c4:82:e9:d8:cf:a0:3c:
                    f2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:88:D4:EB:77:6C:1E:39:1F:B3:82:7F:5A:33:CD:BA:FB:32:5A:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/297eb29d-d751-36d9-a00e-e217da44ebc6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.160.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:f8:80:ed:1b:97:42:0d:39:9e:22:2f:af:02:80:af:ec:4d:
         f0:4f:47:05:c2:ac:4d:20:09:ab:a8:9f:b2:2c:53:e7:10:0c:
         16:d8:27:0f:f7:1a:43:73:e4:4c:46:b7:08:41:f0:68:fc:c3:
         7b:01:69:03:f8:32:ff:69:0c:bd:81:b3:6b:6c:8d:63:03:8a:
         16:8a:c7:57:25:33:ef:7e:72:86:78:53:e2:bd:8a:0d:7f:38:
         cc:8e:d0:69:34:3a:bc:b0:ea:01:32:5d:49:94:e1:5f:82:5f:
         66:3b:f6:91:75:8f:1a:c4:41:a2:15:f7:08:be:e5:19:0c:c1:
         15:97:87:ed:9e:88:3c:31:80:c3:ba:20:b2:81:24:2f:7d:b3:
         42:1b:ed:81:26:70:f7:7a:6b:eb:3e:aa:f9:0b:48:4d:fc:53:
         97:91:b8:a3:68:24:26:fd:99:c0:9d:cf:8c:fb:08:f2:c7:92:
         8b:df:57:98:51:70:5f:85:42:73:9d:80:52:ff:bc:51:44:ab:
         e6:39:af:b5:c8:be:45:65:c6:78:6e:52:57:a0:42:f3:23:47:
         fe:be:b9:a7:88:e9:e4:6f:e5:29:b1:eb:5c:f7:90:9c:98:6f:
         7a:f3:5c:4e:96:e1:18:c2:f6:7a:db:0d:25:8e:c8:72:51:18:
         28:53:db:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:29:00 2025 by rpki-client