Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/176d004f-5f7f-3843-a120-47ab4f0d0ed9.roa
File:                     176d004f-5f7f-3843-a120-47ab4f0d0ed9.roa (raw, json)
Hash identifier:          BccPrbP2kP2imvS+P6DmpUm/hzcRjfC5uGney+ykDxY=
Subject key identifier:   A6:61:37:F9:09:E6:37:BB:38:DD:5A:90:DE:BD:20:22:98:9A:8A:4F
Certificate issuer:       /CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
Certificate serial:       010D0C9F432858491AA6C3CACA34D8B505205640
Authority key identifier: 05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/176d004f-5f7f-3843-a120-47ab4f0d0ed9.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394877
IP address blocks:        148.77.97.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c3:ca:ca:34:d8:b5:05:20:56:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15459be1-f2c7-44a2-ac69-01d238f1b0de
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=2ce818bc-ba86-4dc4-afc3-472b0bcba58e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:7e:66:1e:6b:82:63:8a:d9:b9:56:27:da:7b:
                    4a:b6:7c:dc:34:8f:b1:86:4a:7d:ae:9f:6e:fe:ea:
                    ae:2d:6c:65:cf:f9:19:1c:6e:70:36:1f:7e:5a:af:
                    03:35:a2:a2:b5:1c:4a:62:6b:a3:0c:d2:24:17:e0:
                    db:29:0c:12:d8:40:e5:90:42:64:d2:64:6d:81:88:
                    8c:51:d9:fc:1f:1c:62:f3:51:89:89:07:7f:04:09:
                    eb:54:4b:da:82:0f:bf:75:0c:2e:08:84:83:1a:93:
                    d0:58:8f:9f:9e:11:17:4d:9a:37:f4:38:d0:da:9a:
                    fb:0c:7c:e3:06:cf:04:22:23:36:35:4e:00:d5:ae:
                    bd:7b:65:d3:11:d5:3b:04:83:06:4a:6a:96:9f:40:
                    26:d4:7a:4e:59:b1:be:bd:3d:ed:fd:ec:44:3d:cc:
                    cc:26:3d:33:12:80:5a:18:c6:38:34:ce:0f:a2:b4:
                    4d:1b:53:e3:7e:dd:09:7a:c0:cc:b9:af:ea:cd:84:
                    f8:93:c9:85:a6:df:89:4e:0b:2b:8d:1d:b7:24:b6:
                    05:69:7f:83:5d:e2:c2:9d:82:26:6b:ef:03:66:f4:
                    66:ab:1f:29:8c:d3:13:cf:98:9b:fb:fb:44:93:5c:
                    4e:cb:7e:40:ea:49:a1:26:b7:94:d6:ba:c7:78:f9:
                    ca:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:61:37:F9:09:E6:37:BB:38:DD:5A:90:DE:BD:20:22:98:9A:8A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/176d004f-5f7f-3843-a120-47ab4f0d0ed9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de/15459be1-f2c7-44a2-ac69-01d238f1b0de.crl

            X509v3 Authority Key Identifier:
                keyid:05:7A:6E:22:70:B2:BA:EC:B1:5B:3C:D3:76:40:05:21:50:33:C5:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/15459be1-f2c7-44a2-ac69-01d238f1b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.77.97.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:09:04:a4:14:e8:6d:e7:9c:38:c2:6b:3b:02:07:be:95:9d:
         d8:92:3e:d2:2f:8f:bc:22:b9:10:1f:2a:c2:d5:91:cf:f8:c7:
         8d:9c:d6:df:fd:14:c0:0c:05:b0:ae:9e:37:54:0d:63:18:17:
         79:5d:40:45:9d:de:b4:22:bf:fe:b2:01:d4:87:b8:5e:58:e2:
         7d:a6:73:98:6d:88:77:eb:43:51:2e:93:90:bf:61:e1:f8:ad:
         2d:80:d2:0a:0f:51:5e:e0:66:a5:33:29:98:3d:e4:70:b5:4b:
         94:90:09:f0:63:8e:a4:38:72:ae:5c:0b:bd:4b:d8:01:e5:b5:
         85:c3:88:fc:01:1c:49:b5:21:2c:d0:11:50:a6:a3:28:23:dd:
         f5:f3:85:26:11:44:ce:3a:83:e2:80:bc:f9:4c:4f:8f:7a:bb:
         7f:f8:32:d3:ff:0e:da:68:b1:13:a5:a9:27:04:b3:ba:ed:1b:
         e9:ee:9a:ef:2e:29:8c:d4:a0:62:52:09:07:ef:6e:06:f5:66:
         d5:7a:ab:ce:a0:81:9d:22:88:a7:c1:7b:d2:1f:6b:d6:cb:24:
         74:3c:5b:80:e3:98:6f:70:1f:c4:5c:18:8c:02:fa:36:5f:f4:
         c5:41:95:72:d0:2a:56:da:28:c4:5b:0b:4a:dd:90:9b:cf:8c:
         34:a9:62:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:22 2025 by rpki-client