Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17ef6c4a-48b8-3e90-8480-50fc4bdf0360.roa
File:                     17ef6c4a-48b8-3e90-8480-50fc4bdf0360.roa (raw, json)
Hash identifier:          zvlGUNiuleGNe6Gh70z0eOQkkOMnBSjbVElfdewMsj4=
Subject key identifier:   CF:5B:6F:67:7E:4A:94:18:36:DB:51:AE:EA:91:55:0E:F0:93:34:31
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921343364183B531EFA655240
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17ef6c4a-48b8-3e90-8480-50fc4bdf0360.roa
Signing time:             Sun 09 Mar 2025 10:20:41 +0000
ROA not before:           Sun 09 Mar 2025 10:20:41 +0000
ROA not after:            Sat 07 Jun 2025 10:20:41 +0000
asID:                     855
IP address blocks:        142.162.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:33:64:18:3b:53:1e:fa:65:52:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:41 2025 GMT
            Not After : Jun  7 10:20:41 2025 GMT
        Subject: CN=0c90022b-a95f-453b-9fc8-62a9ba39be40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cd:0a:a2:72:bc:07:0d:35:09:96:e0:3d:4a:
                    c9:6c:95:24:68:98:da:b0:3d:45:ee:3c:b6:33:cd:
                    ff:2a:b3:5a:f2:26:be:74:89:62:f2:20:01:2e:c6:
                    f8:ba:8f:af:69:a2:df:b1:8b:f7:63:a6:e8:de:9d:
                    1b:2c:63:4d:b5:f2:7c:a0:9d:c2:7e:28:b8:58:3f:
                    35:32:d9:fc:a7:f0:46:51:1d:89:73:b6:57:5f:65:
                    ed:5e:79:18:11:6e:6c:ca:9d:0d:07:6d:2f:73:58:
                    de:f2:4e:44:b1:25:b1:df:09:b4:f6:2b:0b:6f:61:
                    8b:ed:ac:db:ec:75:c2:30:c3:bf:c1:c2:66:8c:34:
                    15:4b:51:3b:bd:f8:ad:1f:d8:a3:ca:b7:9f:8c:a8:
                    ee:b8:8b:21:2d:7c:18:7c:9a:17:d7:76:46:e7:22:
                    ee:ce:72:d5:88:2b:2a:41:d4:a8:8f:14:d1:9c:9b:
                    03:26:aa:76:1a:20:58:92:e8:1a:81:84:fc:07:f5:
                    84:bf:08:7f:a5:46:36:a4:69:42:1d:0d:ca:48:62:
                    95:de:d8:03:63:79:6b:b7:99:1b:7e:62:43:35:58:
                    cb:65:24:5b:92:4e:ee:7b:7b:e0:8a:66:2b:f0:a2:
                    81:fd:a8:c7:0b:3e:ea:12:0c:f9:4f:21:ad:c0:f9:
                    8f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5B:6F:67:7E:4A:94:18:36:DB:51:AE:EA:91:55:0E:F0:93:34:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/17ef6c4a-48b8-3e90-8480-50fc4bdf0360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.162.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:cb:61:7b:a1:b9:6a:2e:0d:67:ed:f1:cc:f1:d8:75:03:aa:
         90:5c:de:05:f0:88:2d:42:c5:40:56:59:da:4e:21:3d:30:6b:
         c3:cc:7b:b5:d7:50:46:20:19:40:59:28:9b:27:a1:07:73:44:
         99:82:fe:af:00:f8:14:3b:a9:3b:30:f0:53:c4:0c:8e:04:6b:
         cc:45:0b:ef:49:47:4a:b3:95:c4:3e:ce:60:ae:cc:cd:a5:95:
         b4:84:9c:7c:48:70:30:3a:a4:00:48:f7:be:ea:79:78:a3:40:
         96:bb:aa:c7:90:c6:3e:b8:9f:1b:18:ae:7c:01:ec:e9:1a:1e:
         b1:56:de:e8:72:d0:d7:5d:c4:db:38:03:e9:41:04:5b:81:e5:
         71:15:02:8e:cb:02:f8:bf:94:b3:73:a6:54:4b:84:20:18:af:
         80:30:49:02:f5:b8:d6:83:8b:b9:b4:c8:a3:10:f6:17:11:1d:
         28:de:a9:72:22:59:f7:70:99:40:27:2a:b7:b3:3c:c0:2a:a6:
         49:06:73:ae:1d:fe:d5:ee:65:ed:c7:87:75:cd:28:83:19:0b:
         19:33:8b:99:1e:73:65:50:0f:3e:eb:f2:01:4c:5e:c6:5b:59:
         8c:d5:a2:45:d1:89:32:f1:c9:b3:7d:9e:12:cd:1e:f3:2e:44:
         04:83:ea:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:14:26 2025 by rpki-client