Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa
File:                     a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa (raw, json)
Hash identifier:          c8Ln7C8IDMwBjM316Eq8v3F3qVGNmhZUa2978RQSrD0=
Subject key identifier:   75:E8:9F:64:6A:2B:27:22:AD:B5:44:2B:71:AC:64:82:C2:9C:31:9C
Certificate issuer:       /CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
Certificate serial:       010D0C9F43285848CC7B8D3F2B3CDDE3E1EC7F00
Authority key identifier: 10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     202276
IP address blocks:        149.19.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8d:3f:2b:3c:dd:e3:e1:ec:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38847bfd-3c7b-447f-b44c-daac9ae5da93
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=32cd0b3e-f5cf-4108-b43e-e91c31d3f021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:64:12:d5:21:99:3d:37:32:a9:4b:37:71:dc:
                    56:0f:59:0a:9e:4e:73:0b:57:b0:d5:dd:e7:95:70:
                    6e:3d:58:1a:d4:0f:a8:53:58:86:2c:06:3c:a0:a6:
                    35:5c:81:73:6b:12:d0:28:bd:11:3a:ce:62:2f:d6:
                    50:74:fe:ed:fe:17:6d:8f:0c:05:d5:b7:a2:ac:31:
                    b3:8b:2b:0d:57:0c:e2:1a:be:64:02:9c:bb:15:02:
                    0f:03:31:9d:94:b5:5f:2c:63:38:d1:a7:2e:bd:46:
                    0a:2a:1d:1b:89:03:84:ea:fa:3d:e1:e8:58:1f:7d:
                    65:84:a4:d8:c1:63:36:00:e8:87:8f:50:4a:75:7e:
                    1b:e2:52:cc:0d:6e:2b:1c:76:98:5c:47:84:8f:f5:
                    e3:90:0c:36:07:5f:41:89:7b:ab:f8:a2:fa:fd:d1:
                    4c:de:7c:db:05:8d:c5:35:90:e1:c5:41:71:3e:59:
                    82:be:0b:e2:cd:46:d7:fb:fe:da:d9:a3:bb:74:62:
                    a1:80:45:6f:5d:f7:8d:e8:63:34:28:2b:83:f2:2d:
                    a5:ba:9d:77:90:c8:5e:18:00:a5:56:32:21:7d:db:
                    35:b0:b7:bf:5f:76:a9:0e:9c:ef:6f:a7:a0:f5:e9:
                    5a:29:d9:99:35:82:9d:18:05:36:61:25:e5:6c:b4:
                    0b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E8:9F:64:6A:2B:27:22:AD:B5:44:2B:71:AC:64:82:C2:9C:31:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/a7dcc6ed-b1cc-3649-b00d-88c4a4d21f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93/38847bfd-3c7b-447f-b44c-daac9ae5da93.crl

            X509v3 Authority Key Identifier:
                keyid:10:EE:DE:09:97:6F:66:7C:37:E9:19:49:F0:BB:08:50:3F:FF:9C:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/38847bfd-3c7b-447f-b44c-daac9ae5da93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.19.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:95:0e:b8:fc:c2:32:36:98:2a:6a:2a:b0:ea:11:f7:9e:92:
         b1:37:2e:54:5e:ec:73:a8:7b:dd:6e:e9:9f:2d:32:a7:a2:49:
         0c:b9:fa:a5:4c:f0:89:29:da:30:ab:5b:14:b6:01:1e:d5:3c:
         58:fe:33:66:e2:28:4f:c3:90:0f:ef:c9:16:88:d8:c7:c8:4b:
         30:9b:4a:3e:30:5a:1c:dc:ba:be:f6:ee:e2:fb:93:87:21:88:
         c1:c8:a2:0d:4b:d9:9d:ea:c0:9a:77:1e:9e:31:6a:12:52:99:
         1b:2e:bf:99:ff:65:d7:6b:bd:e1:0c:66:31:34:c6:da:b3:be:
         ed:6c:a9:dc:13:bc:81:6c:d9:59:48:e6:0f:74:ad:a8:ed:71:
         45:b1:64:81:4d:37:d1:2f:b1:c2:46:d3:6e:34:1a:e7:8c:a4:
         6f:59:53:1f:d5:f2:73:f5:30:71:3d:1d:de:b5:2f:02:ff:a5:
         95:66:22:50:1f:31:7d:ca:27:d0:4b:a4:62:e5:96:4e:b8:b9:
         e3:04:88:d0:d4:10:e2:b0:c6:02:0c:83:69:eb:3c:1d:51:a2:
         05:86:9a:d1:34:cd:bd:d3:de:85:6d:2d:26:a1:8f:18:3c:1b:
         72:24:99:2d:6c:06:81:c6:e4:8e:98:78:4a:70:ac:cd:a0:e0:
         a5:e4:50:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:20 2025 by rpki-client