Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
File:                     f46c48fc-eee4-350a-9887-1ba789ca5268.roa (raw, json)
Hash identifier:          ndIQKMz0kaExj4ctw0AjykSGxQ+wYD6P+7SLJXwJeRk=
Subject key identifier:   F7:2D:D1:DA:0B:FD:95:53:E3:70:BA:36:1E:6D:30:A6:81:99:7E:5B
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F432858490CB1698F8256C32A82886840
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     208136
IP address blocks:        131.153.94.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:69:8f:82:56:c3:2a:82:88:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=db0ff282-722d-40d9-92a6-e93251616d74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7a:9e:f4:5b:e6:51:14:3c:c1:a9:1c:6e:bb:
                    28:0d:74:2a:58:3d:0f:5c:6a:53:2e:a8:d5:b3:22:
                    b9:e3:91:0e:00:ba:42:4e:ce:95:a9:a4:48:e0:52:
                    b3:2f:a8:03:20:2f:b3:ba:6a:22:fa:62:bf:2b:0b:
                    1e:3c:40:07:2a:84:83:34:ef:fb:a8:f6:5b:ab:62:
                    90:75:47:70:95:81:8b:6b:dd:3a:a5:ca:ef:5f:36:
                    1f:e2:16:cb:97:b4:8d:32:d5:5a:3f:de:1a:d2:2f:
                    be:98:97:b4:e8:0e:3b:a3:2a:9f:04:08:8e:2f:45:
                    44:2f:01:09:3e:f5:dd:89:f3:b6:f9:d3:b7:c0:ea:
                    bc:4c:f7:c4:18:7b:e7:b9:6b:0d:4f:22:ac:f0:af:
                    d7:92:28:c9:a2:ba:df:9a:3a:69:09:ab:45:00:c1:
                    9b:27:46:a3:12:24:57:47:de:bf:af:86:fd:43:d2:
                    9f:d0:9a:29:74:15:13:70:df:c6:a6:1c:01:60:f3:
                    2d:53:42:c8:1c:c3:e4:e2:7b:57:2d:47:52:6d:2f:
                    8b:61:de:35:4d:2d:da:5e:52:9a:cf:1b:59:b5:4d:
                    63:f9:ef:34:2d:04:39:84:69:0c:69:03:f3:74:0c:
                    ed:f0:53:72:2f:12:b7:30:8f:4d:d8:f0:4b:c2:9c:
                    df:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:2D:D1:DA:0B:FD:95:53:E3:70:BA:36:1E:6D:30:A6:81:99:7E:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/f46c48fc-eee4-350a-9887-1ba789ca5268.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:57:ae:56:ad:f6:49:28:24:29:67:a3:42:4e:4a:05:89:5c:
         b9:42:42:99:45:63:2a:ea:e3:21:c9:9a:9d:6e:0f:52:48:c3:
         1b:1b:fd:37:85:1d:25:5a:8c:b4:aa:a4:d1:88:ea:5d:af:67:
         03:52:24:8a:8c:fd:b9:7c:75:7d:c5:07:f4:ad:02:37:24:9d:
         b1:89:d0:f7:29:5c:88:e6:b1:d4:b2:21:30:8a:f5:e1:7f:8d:
         2a:b7:8b:e2:bb:9e:a9:a3:50:19:96:90:b8:e1:00:e8:ed:25:
         18:be:7a:11:b4:c0:ef:e4:c6:73:ce:c3:cd:00:ad:52:02:e2:
         e1:4e:f8:c0:e1:f3:7b:8b:54:b9:c1:d2:6b:6c:fc:27:48:57:
         a2:5b:5b:01:b5:b5:fc:b6:50:8c:5e:74:48:fe:76:3c:65:18:
         2d:9f:70:c7:bf:76:90:b7:7a:5d:0c:7b:e8:9b:bd:3a:67:d1:
         55:92:ef:ee:2f:8b:ee:60:64:31:36:97:b7:b6:26:78:22:7c:
         a1:c3:bc:da:67:22:40:e2:b5:73:7b:04:25:e7:71:7a:ec:e7:
         e0:cb:2c:b4:3a:25:89:7c:9b:48:3c:17:49:8e:fc:9a:ff:fe:
         92:8c:a7:2c:11:49:ea:89:7c:f6:3b:3d:fe:26:10:26:cc:a0:
         ba:c9:20:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:28:16 2025 by rpki-client