Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa
File:                     4f295fce-a47b-390c-860d-ac09494a0825.roa (raw, json)
Hash identifier:          7LglBUJ/ew6EvTeauYs1el3bQvLM2ZLKxxpR9u2AfBw=
Subject key identifier:   BE:31:A4:95:87:0F:D6:3D:CA:4B:53:46:30:C5:23:DA:61:0C:35:21
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285848E2D1DEF2B3CB5B1687E8FC00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        150.181.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:de:f2:b3:cb:5b:16:87:e8:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=3f1e7726-83bb-424a-af2c-2745aafb32fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:02:74:95:d6:e9:a2:25:c5:d7:a4:38:fa:50:
                    9f:08:a2:49:89:1a:e7:53:d7:a1:60:e2:37:ca:60:
                    14:53:86:ac:d2:f6:02:b5:e4:c6:72:dd:f7:e4:5b:
                    b9:16:79:34:e0:5e:92:c8:ce:ff:de:99:80:76:30:
                    ca:2e:9b:34:13:05:cc:7b:7a:bf:14:e8:0f:80:c1:
                    e4:a6:c9:d6:b8:e7:c4:82:f2:e6:51:52:db:cb:d7:
                    b8:62:42:dc:aa:ab:be:29:57:a6:04:67:9b:8c:81:
                    3c:aa:9e:9e:f5:31:42:ca:33:99:3e:c3:39:6b:08:
                    89:48:a1:7c:0b:cd:2c:ee:00:9c:f2:e7:3a:df:d1:
                    bb:3e:1d:e5:70:0b:c1:a3:41:d3:ef:46:54:20:1b:
                    a8:a5:c5:84:2a:b0:5c:f6:c0:41:39:b1:c9:14:c9:
                    d3:a6:90:1e:e0:f0:da:8c:74:4e:a9:d8:b4:87:51:
                    13:6c:29:e4:61:92:2e:a9:4b:7d:66:20:8e:45:bb:
                    bf:60:d5:6c:36:c5:cc:43:39:63:e4:0a:bf:6b:df:
                    db:50:40:2e:43:39:43:72:c6:97:c0:70:e2:fb:93:
                    72:7a:3f:95:02:5e:4a:e3:bb:c5:a1:89:a6:80:e4:
                    50:6f:dc:94:52:f5:23:db:29:85:aa:56:7e:4d:10:
                    d7:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:31:A4:95:87:0F:D6:3D:CA:4B:53:46:30:C5:23:DA:61:0C:35:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/4f295fce-a47b-390c-860d-ac09494a0825.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.181.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:92:50:e0:b8:64:5a:89:19:24:f8:3e:b7:ac:4f:54:63:fb:
         b5:8f:ec:ef:61:48:af:56:0e:78:72:4d:68:79:bf:b0:32:bd:
         61:7f:d0:a8:71:b4:64:76:68:fe:54:30:c4:90:61:f7:f0:93:
         54:11:b2:4d:ca:32:0b:47:a1:d0:2e:9f:a8:d4:8c:f4:74:58:
         57:19:ec:cf:43:2c:e7:17:69:5f:85:93:50:ec:01:77:a6:7e:
         55:82:c1:f3:76:3a:72:ed:af:f5:28:5e:2a:3c:dc:7b:8f:04:
         66:c5:11:c7:be:d1:9f:fd:9e:e1:89:86:61:94:21:28:ea:65:
         50:ba:4d:36:aa:60:36:ce:28:b1:55:cb:5d:8e:02:c5:a2:49:
         20:20:58:7b:19:17:6c:f4:87:7d:28:b5:fc:9c:57:6b:84:cc:
         fb:1f:ae:40:da:02:df:86:dd:ca:1e:61:6a:82:48:ba:db:20:
         1c:53:d2:0b:a4:91:c5:29:86:92:34:bd:c6:17:36:e4:04:f6:
         4d:43:ab:a4:03:da:83:0c:d6:ce:51:2c:e8:d6:1e:ac:1d:56:
         76:81:f4:60:29:f7:83:cd:55:cd:18:6a:d9:f1:e4:be:ec:01:
         64:c1:8e:61:72:a6:67:0a:21:1e:19:57:42:d5:ba:2d:b0:38:
         5f:06:e5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:42:41 2025 by rpki-client