Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d938e5e6-2995-3023-84bc-fc8a7ddabc5d.roa
File:                     d938e5e6-2995-3023-84bc-fc8a7ddabc5d.roa (raw, json)
Hash identifier:          fDfQcuSCTRs/N6FKXI0z8yuKT5NEzm66zdA7/Lbz7tI=
Subject key identifier:   6C:16:3F:5F:3A:B4:58:66:2D:DB:5B:75:C4:38:B3:2D:B2:04:12:DE
Certificate issuer:       /CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
Certificate serial:       010D0C9F4328584953C41B0972BE86A824575200
Authority key identifier: 1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d938e5e6-2995-3023-84bc-fc8a7ddabc5d.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     23470
IP address blocks:        172.96.140.0/24 maxlen: 24
                          172.96.141.0/24 maxlen: 24
                          172.96.142.0/24 maxlen: 24
                          172.96.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:1b:09:72:be:86:a8:24:57:52:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c69b321-69bc-41c4-a6e1-3491dbfc2544
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=2e23cdc0-5f0a-40e6-a1b5-89cc9959d005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:90:ee:11:ab:f1:19:c1:48:33:61:6e:8b:d7:
                    89:ce:8e:d8:81:af:00:5d:4d:33:94:b8:48:20:95:
                    ca:52:36:95:6c:69:d0:8b:3e:65:c1:dd:18:4e:36:
                    05:67:01:72:bb:1e:aa:73:1c:68:dd:42:2d:5c:b4:
                    a2:f2:ab:c4:64:b5:e8:c2:60:b9:ab:58:2e:7e:e8:
                    bd:8b:5f:54:ad:e8:94:e9:68:8c:41:ef:b6:46:7a:
                    4d:3f:78:43:58:f1:80:be:a1:74:2f:b0:2f:14:3c:
                    85:27:86:db:9e:88:70:73:d2:0c:0a:43:e8:6d:f8:
                    db:de:90:d4:92:e5:fd:1b:f3:81:aa:bf:0c:54:ff:
                    a0:c8:49:1d:4e:cf:18:fc:a7:52:0e:28:82:d9:8a:
                    d7:58:47:c3:4e:01:f2:c3:2a:39:9e:a0:0c:34:89:
                    e8:12:16:92:c5:84:00:d3:11:d3:48:08:8b:49:a3:
                    5b:34:c1:ee:fe:51:9c:4a:46:26:bd:52:d8:36:c6:
                    2c:b9:07:6f:4d:df:fb:c5:e0:54:c9:fb:f3:bf:5c:
                    a7:31:25:4d:3a:60:f6:91:c4:fc:0a:d0:69:35:e7:
                    40:92:63:c4:f4:b9:47:0f:02:fc:30:e0:b4:ca:66:
                    3d:b0:d6:41:eb:2b:3c:4a:18:04:1c:db:09:78:3e:
                    5a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:16:3F:5F:3A:B4:58:66:2D:DB:5B:75:C4:38:B3:2D:B2:04:12:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/d938e5e6-2995-3023-84bc-fc8a7ddabc5d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544/9c69b321-69bc-41c4-a6e1-3491dbfc2544.crl

            X509v3 Authority Key Identifier:
                keyid:1E:39:9B:D6:55:34:98:11:7A:EF:34:5A:1F:EF:2F:27:0A:BD:29:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9c69b321-69bc-41c4-a6e1-3491dbfc2544.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.96.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a1:26:86:62:ed:25:0b:0a:b0:19:0a:cc:2e:0d:82:02:d6:
         ce:2b:22:e3:85:7b:25:58:d9:86:59:54:6e:23:62:e6:10:45:
         9d:a2:36:10:3e:91:ad:ed:4c:91:da:ea:3a:06:28:ec:f4:89:
         e4:5d:fb:f1:22:a6:c1:32:75:b9:52:5d:fb:f7:03:ea:c5:72:
         0e:45:95:d0:63:34:3d:ec:05:9b:d5:11:af:6e:ac:a6:c9:83:
         f7:4a:b4:1c:82:78:d5:0d:f5:f0:16:05:78:7e:e3:24:9b:77:
         a7:90:16:56:02:66:c5:7d:31:4b:16:8e:6c:36:1e:8f:a4:4c:
         26:15:a5:08:ba:65:c6:29:54:1b:98:11:33:24:cf:0c:9c:36:
         c1:89:3b:21:e7:3b:69:7e:1c:24:c5:b9:a3:24:63:4b:36:a8:
         6f:fb:a7:ea:c1:e5:72:57:e4:46:97:cd:c3:64:dd:6e:18:25:
         0c:7a:5a:59:f0:ec:43:a0:c6:09:b8:3e:1a:65:f4:2d:08:09:
         3f:2a:dc:42:57:f1:1f:22:a9:6b:72:6f:d8:9b:56:0c:b8:7f:
         74:5c:ec:b3:cc:09:59:47:9a:b0:32:99:64:71:1f:4b:54:4c:
         6c:3f:14:1d:78:75:8c:a9:b5:a5:cd:b2:8a:ca:f7:bc:df:ca:
         74:19:34:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:58:40 2025 by rpki-client