Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa
File:                     18e19934-67c5-37b5-8717-528ae75668fb.roa (raw, json)
Hash identifier:          suvDnYH6oKsvywHOwQBhgjvVcm6cuyHPe2iuCyIbwC0=
Subject key identifier:   BC:B4:85:76:F1:00:9A:E9:3C:4B:68:D8:4A:E6:F7:62:09:BE:28:48
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848B1F62B3C85B48594F636DC80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        173.199.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:2b:3c:85:b4:85:94:f6:36:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=508deeb2-dcca-4c22-826f-8c1e1837abba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:1f:87:11:da:ca:1a:09:a0:23:09:a7:1d:4a:
                    a3:c7:19:fd:d6:c0:05:10:63:a4:15:44:ee:e7:1c:
                    c8:f6:65:26:2a:22:30:df:c0:df:d7:78:57:3d:9f:
                    6c:e8:41:fd:4b:0a:73:91:10:95:67:fa:f0:41:69:
                    d3:20:71:31:29:d5:74:50:1a:e7:22:64:75:1f:2b:
                    e0:76:85:3c:43:44:fe:d7:58:c9:92:d1:d7:36:16:
                    2e:d5:f1:c8:98:1f:4b:0c:fe:9a:c0:d7:6b:81:49:
                    aa:ce:9c:c0:b7:ff:57:d1:b4:a7:76:5b:92:a8:8a:
                    60:a9:c3:33:bc:53:33:d4:40:da:c9:73:96:5e:3e:
                    1a:5b:88:b2:10:a7:ef:b7:4d:40:1a:ec:a3:3e:a8:
                    0a:d9:17:32:7b:ab:aa:22:be:89:ad:cf:3c:32:1e:
                    18:26:2b:60:bf:dc:38:0c:aa:4a:64:8c:d9:37:b7:
                    8a:60:29:4f:54:fd:39:0f:4b:29:4e:42:18:bf:53:
                    8e:67:c4:71:02:69:d3:30:90:62:b5:e9:85:3c:9d:
                    77:ce:6c:8e:9e:7a:16:be:b7:2d:1d:2a:48:65:7a:
                    bb:cb:7d:a9:2d:f0:13:19:f4:ac:47:ea:69:4a:7a:
                    83:77:7e:cb:41:1f:f0:75:7a:11:cb:54:22:0e:5f:
                    08:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:B4:85:76:F1:00:9A:E9:3C:4B:68:D8:4A:E6:F7:62:09:BE:28:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/18e19934-67c5-37b5-8717-528ae75668fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.199.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:16:3f:fd:55:2b:9d:43:f8:40:a7:9c:fa:ca:d0:2d:66:19:
         2c:42:e1:48:63:7c:97:3e:25:53:cf:b3:ee:ce:4c:ea:d8:4e:
         05:f8:91:17:b5:59:9f:03:a7:e5:8f:00:2c:0f:6d:e0:1c:29:
         56:99:8f:d1:d5:0d:45:b3:84:fe:45:be:95:f9:fc:b0:4c:27:
         a8:70:6e:a6:28:f0:b1:d8:83:77:af:60:43:12:a1:55:b2:69:
         4a:13:71:e0:3d:60:48:96:15:8e:ef:65:09:6f:9b:ed:72:80:
         cf:3d:e1:78:ae:ea:8b:82:c7:59:ee:df:ca:72:a5:52:03:18:
         ef:94:74:ac:79:6b:a1:cc:fb:24:8f:3b:e8:9b:0c:ac:82:c5:
         8f:c1:0c:7f:c7:10:f2:dc:a2:ff:5e:df:66:7b:ea:4f:07:74:
         7b:80:c0:f2:f4:80:e5:77:4f:a3:ad:5e:f7:a5:e1:cf:99:f2:
         69:00:28:76:a8:5f:3b:97:f1:13:ba:e4:26:a0:49:12:c8:0f:
         ad:24:6d:d2:c0:6c:84:2c:da:cd:79:3e:0c:b0:de:2c:7d:51:
         1e:4e:9b:ba:01:c2:37:e2:63:58:89:b4:76:97:62:fc:b4:de:
         bc:87:ca:e2:d7:15:80:d9:9b:d0:90:48:f9:d0:05:f2:50:94:
         dc:78:08:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:21:34 2025 by rpki-client