Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15ef9f9f-5466-3f1b-886b-c7b0e45a0927.roa
File:                     15ef9f9f-5466-3f1b-886b-c7b0e45a0927.roa (raw, json)
Hash identifier:          jN4nYSMthWoQARRs+LiTMh5zhBw/D5gxJ8+55Vzjv7o=
Subject key identifier:   36:BF:4A:49:DD:2D:BF:2B:41:55:0C:48:1F:28:5B:55:75:01:B7:17
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213434DDF6A8A0DDF83BF180
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15ef9f9f-5466-3f1b-886b-c7b0e45a0927.roa
Signing time:             Sun 09 Mar 2025 10:20:41 +0000
ROA not before:           Sun 09 Mar 2025 10:20:41 +0000
ROA not after:            Sat 07 Jun 2025 10:20:41 +0000
asID:                     577
IP address blocks:        142.184.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:34:dd:f6:a8:a0:dd:f8:3b:f1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:41 2025 GMT
            Not After : Jun  7 10:20:41 2025 GMT
        Subject: CN=c523f520-7b9e-46bd-8fcb-dbaab5c4e8c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cc:7a:4a:e9:ce:27:b4:38:05:45:26:88:e7:
                    4f:9b:ad:72:d1:96:f2:5d:63:18:61:28:bc:9a:42:
                    89:be:74:fa:1f:59:45:ba:23:2b:c0:07:0f:36:01:
                    61:56:79:f1:5c:b1:4a:3f:64:80:54:fa:5e:68:c4:
                    c5:88:83:23:bf:08:31:9b:72:8b:eb:e4:b9:ba:08:
                    b2:65:13:36:a1:87:3b:b3:59:45:76:37:fb:aa:89:
                    57:dd:90:da:f8:fa:e5:3c:5a:89:b1:71:96:a4:c2:
                    d9:c0:57:ed:b8:c8:f2:ab:31:12:a4:d5:67:1f:1f:
                    e5:4a:93:c3:6a:b3:0c:8a:56:27:6c:9d:b0:1d:2f:
                    be:42:19:cf:5f:f4:ed:35:93:fc:a4:81:1f:79:82:
                    ec:d9:bf:46:f1:e2:0d:34:5f:12:9a:13:ca:f1:03:
                    a0:a1:e9:cc:71:f9:91:50:97:e4:71:a4:94:86:44:
                    ee:f5:82:fe:71:dc:7a:61:85:fd:de:8b:46:4a:f3:
                    28:40:7c:cc:8d:93:a8:37:a6:c3:72:c6:9e:c3:16:
                    d7:63:6c:7f:9d:45:e3:47:b5:5d:d8:64:7d:29:39:
                    b5:71:2d:9f:b2:80:63:4c:85:25:f8:7c:af:c4:69:
                    32:09:c6:fd:cb:c7:f5:cf:2a:f1:cb:01:4e:1a:88:
                    d2:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BF:4A:49:DD:2D:BF:2B:41:55:0C:48:1F:28:5B:55:75:01:B7:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/15ef9f9f-5466-3f1b-886b-c7b0e45a0927.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.184.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:7f:a4:0a:05:bd:e7:3d:b7:51:b4:5b:50:52:9b:e4:24:9b:
         06:e7:e7:30:be:9a:79:f9:c3:e2:7b:79:7a:dd:1e:88:22:32:
         bb:06:44:37:4b:d4:fe:88:24:c4:82:96:90:0d:c0:d8:aa:28:
         ef:dd:e3:d4:c7:59:dd:84:31:34:00:b4:43:e9:c5:33:ad:d5:
         24:04:65:62:e1:f5:5a:5f:44:4a:d6:a1:23:83:20:32:56:31:
         7f:62:3b:07:a3:2f:3f:78:67:00:2a:8d:47:e0:5b:4c:f5:0a:
         25:df:d1:56:31:0a:de:d8:d6:c3:35:a8:f5:2b:9d:34:ab:a3:
         aa:e5:25:a8:06:b0:33:6a:a5:47:ea:c6:38:ea:9b:f7:1a:df:
         23:a5:24:d9:62:88:d0:af:05:96:52:04:13:34:dc:2f:36:86:
         20:c2:11:cd:57:d3:c9:dd:48:bf:c5:c4:03:99:7a:69:c2:6b:
         31:9d:6b:ce:1d:b9:d5:2f:fd:0c:bc:fd:f0:88:4a:74:70:98:
         5f:c8:68:a4:2d:10:bb:05:02:ec:78:d3:19:25:31:a7:2e:38:
         c1:4a:8f:c1:0b:ef:5a:b8:a1:fe:1c:4f:22:52:28:00:e9:c5:
         45:45:8a:c7:3a:60:f8:e4:78:8a:12:bc:d3:f8:5b:3a:bd:78:
         df:5a:9f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:33 2025 by rpki-client