Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa
File:                     9c20f17c-b098-339d-a498-8bb2ec06ebed.roa (raw, json)
Hash identifier:          uXmO/lELjD8rlxEGrAufoRK4e9s9YL2xI/NGP1xYNlA=
Subject key identifier:   7A:5A:53:A0:1A:7D:41:AD:A7:41:2A:E3:1F:8A:EC:46:CC:DA:E1:55
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581FCEB9572786DCBA05108
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        198.45.229.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fc:eb:95:72:78:6d:cb:a0:51:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=dd48cd74-8d8a-42c0-b7d8-758037bcb4c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cf:60:87:a5:fd:62:23:0c:7c:4d:70:42:94:
                    9e:3c:b2:b1:21:57:d8:27:1c:15:c8:d0:23:22:ab:
                    3f:99:51:af:74:9e:bc:1a:7f:f5:7d:f6:d2:20:ea:
                    1d:af:48:c2:97:78:2e:60:7f:2e:8f:34:6b:41:73:
                    3c:5e:c4:91:f5:17:d9:be:f8:87:85:7c:26:86:b5:
                    41:2d:1f:71:7d:a1:35:a2:c2:48:2c:7f:9e:33:25:
                    78:c5:be:e3:13:d5:37:c2:5a:24:99:15:2c:77:77:
                    ed:1d:bf:12:fa:bf:83:c8:ae:07:1b:a3:81:f9:91:
                    d0:e3:49:38:02:26:55:ca:0e:6c:ff:4e:a4:11:11:
                    52:7a:2c:34:60:f5:12:d5:bb:2d:b4:97:18:b3:2d:
                    5b:87:d0:2f:65:a3:7c:b4:3e:d1:cb:50:2f:bb:aa:
                    dc:20:91:3c:08:b2:4f:83:57:d0:85:48:2a:5f:03:
                    1a:f1:a1:bf:6d:fc:8d:37:ac:b6:a4:de:2b:3d:a7:
                    53:0d:0d:bc:f0:0a:5f:26:bc:70:f3:e7:9d:82:33:
                    8a:c1:f9:9e:c4:f3:5c:2f:bb:55:36:0a:05:69:0c:
                    6d:50:f8:e4:54:79:30:fc:23:f1:9a:1d:1c:af:e7:
                    df:6f:11:b9:37:c1:eb:ff:a7:b2:cf:d4:c7:36:60:
                    17:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:5A:53:A0:1A:7D:41:AD:A7:41:2A:E3:1F:8A:EC:46:CC:DA:E1:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c20f17c-b098-339d-a498-8bb2ec06ebed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.229.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:61:13:2d:a9:cc:3e:d2:93:5d:11:fd:45:5c:8c:63:25:70:
         dd:af:e5:10:f5:8b:ca:98:bf:35:57:12:57:04:b0:08:c0:f2:
         30:4d:81:62:7a:dd:e4:5e:8c:4c:24:90:4e:d2:dc:25:1e:10:
         84:35:d9:a5:55:00:d9:82:0c:70:63:ce:a9:c9:a7:ad:08:a8:
         54:72:4a:25:8b:5b:69:e6:4d:8d:50:1f:b8:9f:54:53:b6:e6:
         3a:40:b0:69:29:be:82:57:69:d4:97:9c:dd:3a:ad:e2:7f:59:
         71:f2:d0:e0:b6:7f:0b:72:5e:21:40:41:b0:27:29:e1:11:bd:
         e1:08:ec:6e:f4:a3:56:bc:2a:27:c4:d6:d9:41:87:ce:3a:5e:
         0d:a0:bf:05:da:2c:de:27:d4:ad:ec:df:46:c7:fa:4a:80:6b:
         68:fc:03:be:8e:b2:cb:16:31:93:58:09:0d:0c:c2:e3:a6:af:
         19:d4:51:f7:67:84:e6:1a:63:a7:87:0a:21:b5:c0:04:4c:ba:
         f5:1c:5a:19:29:19:64:b1:83:66:3d:fe:1c:c4:4b:03:90:0a:
         14:39:e5:57:22:6a:00:97:cb:a2:0d:2b:43:8e:cb:6d:9a:68:
         21:f1:e6:9f:7c:51:fd:3d:fd:de:cf:dc:0a:9d:c2:77:de:5f:
         64:bb:01:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:50 2025 by rpki-client