Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b4032c9-0874-3509-af46-17f431b60ec9.roa
File:                     1b4032c9-0874-3509-af46-17f431b60ec9.roa (raw, json)
Hash identifier:          lhsSvikzjRzxDMGrPP89U5CVKMgtuJLiKc4qLfMWfnI=
Subject key identifier:   36:7D:0C:B8:8D:CA:F7:A3:E1:FF:C6:48:D0:26:65:E3:35:83:0A:7E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581FA18FC85463D8E8BE5C0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b4032c9-0874-3509-af46-17f431b60ec9.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        198.45.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fa:18:fc:85:46:3d:8e:8b:e5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=84667bb0-4c8d-48ee-80f6-e7a459740626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:81:95:e6:00:2f:ce:54:85:b9:14:a8:d3:e2:
                    30:51:43:23:68:93:73:fc:9b:62:d8:f3:6e:52:55:
                    d2:82:0b:b7:51:41:97:c3:5b:78:ae:08:b2:4b:63:
                    86:49:71:17:ec:25:7f:bb:aa:80:fa:a5:a9:2e:5e:
                    8f:94:84:4b:8c:a4:14:06:90:da:5e:7b:d5:7d:5c:
                    9c:60:d7:95:3f:57:5f:13:45:84:8e:4c:37:0e:75:
                    ce:3e:1d:d7:e0:1d:c5:24:d3:88:47:21:27:d0:9f:
                    55:a0:b4:42:4d:83:6c:ff:cf:81:44:c0:ac:45:1f:
                    5e:b9:92:c0:51:c3:d5:e6:a1:ef:03:aa:9b:6e:a9:
                    ac:cd:a0:f8:3c:52:63:35:41:c1:2b:c3:f7:86:8d:
                    1e:08:f4:f2:79:90:ef:25:9d:e9:40:55:d0:f7:71:
                    66:43:11:de:bc:af:25:0a:80:39:ab:ac:0b:c3:d7:
                    6b:d4:dc:a2:27:b3:7b:45:6f:b3:9c:2f:73:f3:90:
                    d0:fa:dd:47:db:c8:8c:49:f9:44:e8:a0:9a:45:a1:
                    0a:db:ea:7d:7e:23:72:fd:c3:96:5e:75:9f:5a:69:
                    d1:d1:6e:b3:45:2b:df:1a:0e:3c:53:93:c3:11:d7:
                    e1:c1:d0:7f:e0:5f:bd:9e:2c:4d:99:ff:74:6b:c0:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:0C:B8:8D:CA:F7:A3:E1:FF:C6:48:D0:26:65:E3:35:83:0A:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b4032c9-0874-3509-af46-17f431b60ec9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:3f:90:fe:4e:2f:0f:ec:e9:b6:6f:a5:92:64:19:a6:be:b5:
         ee:d0:5f:53:65:1c:1d:b5:f7:96:89:e6:75:06:a5:21:45:be:
         d3:5c:98:cb:df:df:39:11:c4:d9:3b:19:38:5e:63:f8:48:21:
         ba:30:41:d3:b6:a2:33:9b:4b:db:19:3d:89:90:2f:75:0f:4b:
         93:c1:da:40:45:3d:e9:97:af:8e:b0:95:03:40:27:44:f4:01:
         f6:97:e0:dc:41:a5:c8:51:66:02:a9:a0:ab:93:a2:35:ae:c9:
         b6:25:ea:85:86:e3:43:1d:2d:c3:ac:ab:16:45:63:64:a3:aa:
         31:bc:1f:de:a4:13:e8:ab:e7:0c:a0:76:a3:95:46:33:0d:6c:
         32:ab:9f:ed:ed:b4:73:5b:73:1d:52:95:ba:78:e4:6a:db:06:
         36:a1:cc:0b:e7:ed:ab:31:d2:30:84:a4:7c:11:ff:58:53:0e:
         e0:ab:57:4f:8a:66:2e:c9:31:51:fa:3c:00:c9:6e:24:33:7b:
         11:8e:a5:bd:db:35:41:56:82:04:6b:d3:42:bd:7e:d1:86:63:
         6d:e9:93:c2:c7:9d:73:74:42:22:63:27:d3:62:f8:3a:db:fd:
         47:d6:50:6c:b2:11:f6:2e:5b:86:3e:d9:77:e6:d9:b9:81:4e:
         37:52:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:12 2025 by rpki-client