Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa
File:                     e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa (raw, json)
Hash identifier:          si+l8EcQPIXHM09IwDCIm7K3m2Bzw73l++qnZSilIrQ=
Subject key identifier:   12:D5:17:44:C7:CD:08:23:86:BD:FC:B6:A8:51:06:59:9C:68:D2:1E
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C58146B45DB345B2633F9300
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:46:b4:5d:b3:45:b2:63:3f:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=47183fcc-a569-47d4-90b9-1a4a1f5462a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:77:c8:03:8d:a9:1f:de:62:ac:23:75:e9:70:
                    7f:84:26:82:55:a9:86:84:6b:d5:c2:75:e6:a7:40:
                    97:87:05:c4:b9:9e:2b:63:e1:0b:c9:d5:32:a3:59:
                    62:b8:5f:01:1f:12:81:a4:4f:2b:71:db:3c:a2:0c:
                    2e:d0:d3:d8:f1:b4:68:0f:c2:e9:14:c2:f7:35:72:
                    9e:60:ae:ad:ef:be:09:a1:c1:74:91:cf:7d:9b:4c:
                    70:a3:bc:3b:dc:42:de:83:0f:0f:f2:c5:67:fb:21:
                    79:6e:36:4f:d0:3a:6a:5e:81:ae:1a:60:d4:c9:89:
                    bc:ef:08:8c:d4:d8:44:2f:77:1f:e4:f5:0b:45:c1:
                    34:a6:50:88:ed:fb:1b:6f:7b:14:8c:db:51:11:bb:
                    2e:40:f5:57:a8:b8:84:ee:d9:01:98:9c:ea:7c:5f:
                    75:51:3c:92:e0:04:ba:45:48:b4:f3:f1:4d:4e:34:
                    9c:2e:ea:43:dc:67:93:f1:e8:ad:e7:7d:ae:41:9c:
                    36:ba:aa:36:71:ac:62:41:de:17:bf:a2:27:f8:9e:
                    fe:7d:fd:a6:e0:fc:af:2f:5c:93:12:0f:1b:e3:32:
                    a4:e8:d3:4e:5b:77:0d:8a:15:3b:72:a3:1e:ce:36:
                    34:84:a6:a3:20:d8:46:f4:ce:50:ee:b5:c7:42:3b:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D5:17:44:C7:CD:08:23:86:BD:FC:B6:A8:51:06:59:9C:68:D2:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:8a:bc:ed:8e:8d:68:5e:d0:da:20:13:1e:85:85:4b:bf:4b:
         26:9c:1d:c6:3c:bd:2f:a3:5f:46:9c:e4:cd:fb:53:bc:6b:b1:
         6e:e1:ad:68:d3:a7:37:f2:77:af:33:17:8c:b8:cf:8b:6b:f7:
         91:dc:ba:1f:01:eb:e1:56:64:ee:22:0d:1e:34:61:85:e1:f3:
         2f:c7:ae:fa:e4:81:c2:af:b1:6e:d4:f4:87:fd:1c:5a:7e:20:
         49:96:c9:9a:a0:f6:42:d5:0e:02:41:9b:2b:07:66:db:30:23:
         de:bc:72:38:cd:f6:ff:7f:f6:6e:4e:09:eb:24:6f:97:9b:42:
         39:a1:c0:3d:2c:c9:5f:6e:cf:df:24:d4:d4:7c:54:ee:50:9d:
         58:9a:ca:fb:db:c9:69:65:0d:01:78:df:47:12:60:fb:bf:a3:
         c2:e8:52:2c:59:c7:ba:1a:55:6a:d6:b3:17:3b:b4:3a:b4:b7:
         f4:ab:40:99:0c:27:cd:63:34:e9:d9:12:96:c0:63:8a:93:45:
         cf:4c:ce:69:ba:e2:b2:c2:2b:b7:c7:67:c0:23:ab:af:e2:a1:
         96:98:c1:e5:49:67:89:df:80:eb:c4:6e:d8:cc:7f:ff:97:a6:
         29:76:fb:4c:19:aa:09:3f:bb:7a:09:cb:0a:f3:5b:95:23:2a:
         6e:96:ec:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:45:54 2025 by rpki-client