Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4c817d3c-d125-3160-b273-6e0dfbe9eead.roa
File:                     4c817d3c-d125-3160-b273-6e0dfbe9eead.roa (raw, json)
Hash identifier:          q8wBV3+bTBKdVdjMZ62bXpiBpSPkwlxOxzc51tc7O9E=
Subject key identifier:   B3:4F:E5:50:5F:E6:0B:1D:94:6F:24:08:AF:D8:97:34:05:75:DE:24
Certificate issuer:       /CN=174db496-399b-48c7-919e-3e6dfd4a5584
Certificate serial:       010D0C9F43285849393E71CCB2141CA11BE52380
Authority key identifier: 9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4c817d3c-d125-3160-b273-6e0dfbe9eead.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     16509
IP address blocks:        139.138.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:71:cc:b2:14:1c:a1:1b:e5:23:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=174db496-399b-48c7-919e-3e6dfd4a5584
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=8063503b-febe-40de-8c7a-7d26369679d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a3:1c:a4:10:ce:8c:b0:3b:cf:f4:c5:23:04:
                    56:2b:12:27:45:50:df:c4:69:b8:10:cf:52:f0:99:
                    64:c6:2d:33:c8:9f:86:53:8c:67:4e:aa:ce:a5:28:
                    04:93:39:1f:5a:4f:cf:0f:2d:db:84:cf:20:80:8d:
                    c9:41:ca:5e:4a:da:59:78:88:c4:e2:73:69:f6:75:
                    3d:61:d5:a2:38:95:2e:c1:e2:25:84:ab:a3:c4:7b:
                    16:0a:6a:b5:11:48:5e:6c:65:4c:a9:c9:95:f7:80:
                    9d:77:1b:16:69:22:c8:2e:cf:ff:56:bf:16:d4:bd:
                    3b:b0:cd:bf:7d:aa:35:68:3c:b1:0c:16:c8:33:e2:
                    84:77:0a:5b:85:de:d9:03:e1:9d:f0:2f:d4:d1:39:
                    58:fc:9f:aa:b5:c7:39:da:c4:c9:e8:01:c1:34:15:
                    da:34:95:72:00:39:1a:33:a0:11:eb:89:90:8d:42:
                    7f:de:a5:df:1a:a5:f3:6e:08:b0:85:13:4e:47:98:
                    01:a5:cd:a9:ea:9d:81:a5:74:8e:bf:e3:30:91:05:
                    78:70:a6:63:70:96:78:ac:29:29:dd:72:12:de:3f:
                    bf:ac:d4:d2:c0:03:0d:cd:4c:0b:f9:12:8b:04:a4:
                    09:e6:83:da:50:23:72:e4:2f:95:a6:d8:60:ee:96:
                    3e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:4F:E5:50:5F:E6:0B:1D:94:6F:24:08:AF:D8:97:34:05:75:DE:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/4c817d3c-d125-3160-b273-6e0dfbe9eead.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584/174db496-399b-48c7-919e-3e6dfd4a5584.crl

            X509v3 Authority Key Identifier:
                keyid:9D:B6:2F:AB:0C:84:BF:E1:7B:91:2B:47:30:C7:35:B1:7A:AF:80:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/174db496-399b-48c7-919e-3e6dfd4a5584.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.138.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:9e:10:33:4c:33:fe:6a:c2:bc:c0:2b:60:68:a8:8a:58:33:
         cb:ea:ec:86:85:11:f0:31:12:2c:cc:10:0a:29:82:df:14:6f:
         80:66:56:11:5c:68:60:25:2d:18:d3:d4:67:f2:e6:d3:dc:dc:
         c8:cf:31:6c:cd:37:58:d9:ab:4a:7f:f0:91:6b:a0:71:63:63:
         ee:3f:4e:19:e9:11:94:bc:d5:4d:10:ae:62:24:b1:8d:0e:d5:
         22:f4:23:99:75:4f:c3:ad:6c:24:be:26:ba:6a:24:1b:e0:ce:
         f0:0d:21:17:90:f4:47:b9:96:6f:75:2f:e6:5f:36:d2:54:01:
         73:0a:79:3e:6f:19:e5:5d:21:21:68:0e:65:69:9f:7d:ae:5d:
         90:b6:3a:5c:fb:60:59:a3:ca:d1:17:44:b6:3b:45:29:c6:28:
         1d:a2:6d:d9:61:af:2b:60:00:f6:ee:94:14:44:c1:2d:0a:ae:
         ad:c0:f4:de:b4:08:46:6b:c6:03:1d:58:7f:4d:e9:1b:a1:b6:
         11:5c:c5:df:d3:06:6e:7b:05:90:90:f8:ba:0e:06:9e:7d:82:
         8f:c4:4c:93:af:7f:ea:75:5b:ce:c2:cb:cf:78:24:fa:1b:b7:
         30:44:cb:bc:61:42:c9:f9:f9:a6:37:0e:83:bf:66:1f:31:96:
         ca:b0:ef:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:29:50 2025 by rpki-client