Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2d7bb9e-1c3c-30a0-92a7-64697991e5ff.roa
File:                     a2d7bb9e-1c3c-30a0-92a7-64697991e5ff.roa (raw, json)
Hash identifier:          lpas30GSH7NGhgLXUlUHRA2RgeY4Zx89ml2Pa/ctB30=
Subject key identifier:   80:22:FB:13:16:74:9F:1F:13:68:B6:9B:1A:19:37:9B:66:D3:66:BE
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134314BFB6823DBB83C8700
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2d7bb9e-1c3c-30a0-92a7-64697991e5ff.roa
Signing time:             Sun 09 Mar 2025 10:20:40 +0000
ROA not before:           Sun 09 Mar 2025 10:20:40 +0000
ROA not after:            Sat 07 Jun 2025 10:20:40 +0000
asID:                     577
IP address blocks:        142.118.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:31:4b:fb:68:23:db:b8:3c:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:40 2025 GMT
            Not After : Jun  7 10:20:40 2025 GMT
        Subject: CN=4337def9-aa14-4cc3-a6a5-55ab6c51ebb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:4c:f7:50:b3:ef:1a:72:d5:20:0a:5d:28:
                    27:e2:5d:2f:c0:f8:50:e9:27:87:28:1a:7d:52:0e:
                    30:3e:13:00:b5:1f:a9:54:24:5f:47:29:e0:3c:48:
                    c0:69:c8:4f:ea:80:de:ab:c1:ee:74:9b:9d:58:e3:
                    e7:cf:e0:47:9b:0b:78:2f:bc:89:d0:b6:c4:6e:06:
                    55:dd:d4:92:5a:77:05:2a:0d:9d:4e:59:1b:67:b6:
                    41:17:65:95:df:86:b6:4b:b2:af:6a:da:c2:2b:2a:
                    8b:a6:ad:2a:ce:0f:9e:4e:6a:fd:89:5a:d1:d3:f3:
                    81:33:08:88:27:9a:d7:1d:cc:e9:67:b2:6d:4d:51:
                    83:ae:cf:47:4e:96:a0:5a:32:4f:3a:2f:9d:52:89:
                    59:25:3d:75:40:f8:c5:27:f6:62:48:05:83:78:ea:
                    67:c1:05:73:33:81:13:a0:ab:fd:e9:e5:93:c9:86:
                    7b:cc:1c:44:3a:15:65:d3:df:23:22:21:9d:9d:91:
                    82:95:7c:c1:e0:a7:48:a1:95:ce:4b:ae:b6:66:09:
                    b1:c6:a6:5b:84:28:47:b3:45:df:a7:79:c4:87:24:
                    dc:e6:14:92:70:f4:84:ee:ab:80:3f:1e:74:d1:35:
                    3c:db:14:59:50:9e:62:6b:b3:29:11:5d:ff:19:52:
                    3d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:22:FB:13:16:74:9F:1F:13:68:B6:9B:1A:19:37:9B:66:D3:66:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/a2d7bb9e-1c3c-30a0-92a7-64697991e5ff.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.118.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:d2:cc:c5:9d:92:0c:6b:1c:f8:2b:97:af:5d:0a:42:d0:e4:
         94:72:f7:db:0f:07:e9:7c:d5:4e:a2:9b:ba:61:c3:3b:b1:4f:
         22:7a:8e:96:3d:0f:76:39:b7:93:d6:07:c3:2b:48:02:a1:4f:
         e2:aa:1b:cf:a4:ff:c3:c0:cb:b8:93:64:67:13:ab:95:de:af:
         93:10:34:25:a0:86:70:f1:1c:e9:be:7a:46:c6:ac:c1:18:5d:
         c7:d8:bb:5b:47:5e:23:1a:3b:e7:e8:17:84:ec:9f:a5:36:49:
         f8:ad:22:23:70:2a:3a:78:4e:b9:1a:45:5c:55:e6:60:03:4f:
         f1:53:84:23:b5:69:d1:bb:65:72:23:e9:7d:97:5f:96:cd:07:
         01:e4:30:12:41:86:9b:56:9e:94:d9:56:9f:85:da:0c:e9:38:
         8a:65:7e:53:69:61:04:7a:0b:17:74:9b:3a:01:ba:12:ed:96:
         3f:cb:69:18:72:e1:19:40:13:e5:27:cd:32:9d:e5:4c:f1:42:
         8a:ed:9e:2f:d3:26:5c:bd:c2:4d:91:76:f9:e5:bb:b2:6f:c0:
         7f:4f:e7:c6:8c:f0:3b:03:09:e5:72:9a:a9:d7:39:7e:5a:8f:
         ad:ee:2f:cb:fb:3f:7a:47:9f:e8:81:4c:89:f6:f0:eb:af:c0:
         c4:43:87:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:12 2025 by rpki-client