Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
File:                     34356240-b9ca-32e3-ba11-33750e597e1e.roa (raw, json)
Hash identifier:          KgVgqMyFXhZscr6m2pK2kfkVQHxOEJolCsukhqRca44=
Subject key identifier:   9D:C5:C6:E7:84:FC:27:96:81:0B:29:0D:A3:7F:71:AC:3C:74:C2:77
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F43285848CC7B9FED933782CBE8D89D00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     7764
IP address blocks:        148.129.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9f:ed:93:37:82:cb:e8:d8:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=86f774eb-4319-4ba3-8d34-7733cc981d52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:1b:ce:e5:fa:06:6d:48:a2:53:08:9f:ad:1b:
                    3c:27:91:e9:65:66:a5:e2:45:2b:cb:d1:f9:c8:8a:
                    f6:70:58:97:8a:f8:72:9b:74:09:ee:e4:26:f6:2d:
                    f7:2c:cd:11:16:6f:78:80:1f:53:a5:1f:15:75:c7:
                    dc:b7:34:06:b0:20:71:2c:29:29:be:cc:29:bd:1c:
                    0d:88:89:b3:82:37:4c:26:23:ff:77:d4:bb:95:ef:
                    8d:e4:25:80:4b:13:37:e0:fd:33:07:2e:1f:37:33:
                    7d:4a:42:94:ef:45:ef:9d:53:9b:d7:62:fd:7c:72:
                    38:a6:02:65:46:3e:05:f4:1a:37:8b:e3:fe:e4:bd:
                    79:13:ab:9c:18:a0:46:45:bb:66:99:6e:ee:25:e4:
                    a4:d0:6d:da:89:a9:c8:cb:62:3b:48:97:28:e6:06:
                    45:74:51:64:9c:5e:27:dd:e9:de:f9:ec:55:a4:b5:
                    76:5e:ac:8b:10:f1:c7:cd:78:3b:69:c4:80:4d:0e:
                    96:91:d6:6f:12:e0:4f:b3:fe:31:62:42:2c:5d:96:
                    c8:4f:5d:0a:51:b3:2f:fe:2e:01:1f:e0:ad:9f:50:
                    ec:ac:68:83:9f:7c:48:08:5b:0b:a4:56:66:27:82:
                    44:d8:7f:67:43:23:db:77:6f:d9:dc:8b:3c:26:b7:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C5:C6:E7:84:FC:27:96:81:0B:29:0D:A3:7F:71:AC:3C:74:C2:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/34356240-b9ca-32e3-ba11-33750e597e1e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.129.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:17:e0:c4:db:ed:d5:92:e8:37:39:ed:ff:bc:ee:e0:c3:4a:
         63:9c:95:b1:40:1d:c3:49:e0:ad:8b:dc:89:9e:dd:04:8d:61:
         83:a9:7b:24:d7:3c:3c:0b:df:c9:f5:13:14:33:80:20:45:3b:
         f8:e5:22:8f:fb:a9:f4:a2:17:6c:e4:2e:36:e4:dd:cd:92:19:
         58:d3:e9:e2:c2:f8:5e:3b:55:20:57:96:e5:38:73:6e:7e:43:
         09:68:db:9b:5c:3a:b7:d9:e4:ac:25:c9:cb:76:fe:e8:13:4b:
         9f:99:e3:e1:39:dc:61:2d:08:4c:3a:a2:0a:0b:79:e5:97:a6:
         19:44:de:63:70:e4:8c:8d:3a:5a:10:fb:ba:e5:65:94:46:a0:
         81:1b:eb:4a:c6:99:56:da:4b:6a:c4:ca:26:65:a2:b7:10:e4:
         f8:b2:a4:ab:7f:aa:54:b8:75:9e:75:4c:ee:47:1e:9c:bf:5a:
         45:f8:fd:ec:83:48:b4:05:1f:70:70:e6:58:a2:b7:1a:0c:7a:
         c3:ef:d8:96:0d:57:16:53:db:d4:11:5a:6a:c4:9e:e5:fa:92:
         70:66:55:7a:4b:bb:ec:9c:ac:42:07:42:3a:7f:db:3d:b2:33:
         7e:22:97:ed:21:49:8c:95:5b:c1:e9:9a:b5:68:67:0b:ac:bb:
         f7:51:05:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:23:26 2025 by rpki-client