Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
File:                     5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa (raw, json)
Hash identifier:          r8Thje6RAfXpZUcTVaJXgS7WD1qBTa4CBGclZjUillo=
Subject key identifier:   45:8F:80:B1:4F:2A:27:28:A7:8D:12:81:95:98:4E:DC:F7:3A:C5:2D
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58199363A3BE9A772092CC0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        70.41.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:99:36:3a:3b:e9:a7:72:09:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=af188d13-f030-4b70-980e-a1e816052465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1e:b4:21:fd:1b:70:74:d5:d6:6f:d0:e0:24:
                    c0:ae:27:42:07:99:c0:ab:69:42:1b:d0:52:35:6a:
                    0b:eb:bb:0d:8f:ed:70:64:e5:dc:44:e4:38:d0:4c:
                    bf:cb:86:d9:75:33:37:13:61:98:df:9f:42:43:b0:
                    59:81:7a:cd:ee:d7:f1:f7:d4:f5:b7:df:53:e6:cd:
                    2e:a1:20:3e:07:bc:ec:e5:f8:2a:df:e4:b4:40:a7:
                    56:e0:b1:5b:70:f7:20:7e:c8:d7:96:5c:68:fc:a7:
                    82:a0:4d:f2:f5:c1:d3:36:31:c3:49:7c:87:7b:f7:
                    43:11:a3:67:1e:0b:1d:cf:81:af:d2:02:5e:dd:53:
                    e2:7b:9c:99:25:ef:5a:16:12:61:00:24:ab:97:8c:
                    c2:88:91:10:4d:84:c1:78:3a:ff:56:06:3f:ed:99:
                    9e:88:48:df:f0:04:64:e4:b3:a7:b2:83:d3:bb:cc:
                    77:cf:33:34:7e:98:fb:83:c2:43:ac:54:51:43:84:
                    02:f6:fd:de:36:68:cc:8e:17:c9:88:41:e7:4a:a8:
                    c5:d9:a3:19:7d:24:4f:2c:2f:74:3a:39:f0:6c:1a:
                    b6:27:35:92:e6:61:fa:62:7b:64:b0:cf:6f:94:3a:
                    61:fc:e1:8d:03:a2:df:ab:55:8c:a5:63:b6:1f:58:
                    ad:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:8F:80:B1:4F:2A:27:28:A7:8D:12:81:95:98:4E:DC:F7:3A:C5:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a912698-f002-3c0c-b5a1-06a7df2ebd26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.41.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:16:6e:f1:75:af:e8:a2:55:84:83:3b:49:62:27:1f:f0:49:
         26:d2:66:1a:b4:a3:d1:8b:d9:29:6c:7b:d5:d1:4d:00:71:35:
         b1:dd:15:80:df:a9:4e:c0:41:64:42:67:64:f9:fb:be:c1:d4:
         2a:e6:d5:f0:56:45:48:ff:d7:43:56:fa:a0:d0:bf:86:ff:c2:
         d7:ce:3b:75:3e:fe:de:34:53:6e:7e:49:7e:05:cb:1f:52:a6:
         eb:8e:08:17:51:28:42:4b:5a:58:1b:8f:d6:7d:df:ee:60:6a:
         bd:84:8c:36:8c:cd:5c:fd:f6:48:3d:12:ed:20:cf:af:8f:a8:
         3f:c3:51:83:e4:5d:43:3f:a8:7b:9f:a3:29:e0:55:01:60:8e:
         13:5e:b7:6a:a0:1b:db:31:e9:7a:ce:74:aa:af:3c:4d:9b:e9:
         56:9c:56:68:78:a2:4b:b0:0e:57:a8:af:07:d7:23:1b:5b:b9:
         de:9c:18:a1:2a:2f:b5:91:85:e9:89:17:f4:59:23:e0:27:42:
         6f:f7:a2:ae:f0:f9:11:85:2a:ef:b6:6c:a4:3a:9d:2d:8c:a7:
         2b:52:19:77:82:91:f7:0c:9d:ea:fc:5e:dd:b7:7d:1c:a8:8f:
         e2:6d:69:f9:f9:7c:04:bf:c8:f8:c0:6a:1e:79:66:57:9e:9b:
         4d:4e:14:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:21 2025 by rpki-client