Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa
File:                     fa947067-332a-302c-90e6-a9f60107ae87.roa (raw, json)
Hash identifier:          JgQDt2y5a97mIXuJG5yFwiGcqb2Ok1Ab7dtaDKhNL4k=
Subject key identifier:   C3:F8:EA:52:F1:46:B5:81:CE:C4:56:63:80:29:1F:30:B5:89:78:2B
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C581FAAB54D792235904CEB0
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        198.45.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:fa:ab:54:d7:92:23:59:04:ce:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=6513ba52-e129-4677-aa3b-1330f4af3875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:88:77:8c:76:7b:33:c8:b0:de:1e:30:49:e0:
                    3f:68:f5:18:4d:7a:89:36:31:13:41:53:10:09:01:
                    5c:b2:59:0a:b2:ca:d1:8e:36:07:30:76:3f:c5:e9:
                    6e:25:9a:3b:30:d7:01:10:01:4e:a2:12:2f:68:ac:
                    95:80:3e:bb:09:1b:af:18:fe:3c:18:e1:ba:50:7c:
                    28:ae:30:43:97:fb:7e:04:fd:2e:46:6d:6e:49:6c:
                    7f:4a:d0:72:91:e0:b5:40:3a:63:3b:e7:d2:8f:a4:
                    0b:f8:d6:71:a9:e4:91:3f:15:f3:2a:13:fd:f1:cc:
                    5a:94:2c:4d:53:9e:fe:0f:20:89:62:17:43:4e:48:
                    c6:e6:2f:a0:9d:21:cb:21:47:a6:e0:ac:c5:ae:4f:
                    55:60:d9:e7:2e:fd:82:14:e2:a4:41:27:87:64:97:
                    36:58:57:76:af:ab:39:6a:0c:72:6a:0e:bb:e2:aa:
                    11:9b:99:b5:e6:cc:1e:81:6c:99:cd:d9:87:25:24:
                    0d:73:c6:8c:74:54:2d:a8:a7:09:28:bf:22:e6:8f:
                    e8:11:fc:ea:b0:c4:2a:71:01:e8:28:cf:01:c6:aa:
                    e6:a4:f0:1e:1a:e4:b0:a3:55:00:55:d2:af:df:b2:
                    a4:92:20:39:21:d3:9c:da:7f:d7:86:37:f5:f0:b5:
                    3a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:F8:EA:52:F1:46:B5:81:CE:C4:56:63:80:29:1F:30:B5:89:78:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa947067-332a-302c-90e6-a9f60107ae87.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.45.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:19:19:97:d7:04:b1:94:c4:51:0c:89:26:a7:5c:23:b0:3a:
         98:83:f1:1f:15:4e:f3:54:72:cd:66:6b:23:2e:3e:22:b1:50:
         bb:6f:36:9e:77:41:f6:c3:2b:ee:66:af:cd:29:70:3f:7f:e6:
         b5:34:f2:f5:40:ae:fb:6d:bb:36:65:b8:af:73:df:dc:31:95:
         36:72:ee:8b:4c:f6:fb:55:e7:29:5f:b5:dc:c6:f0:36:a0:e0:
         73:0d:52:4f:fb:0d:51:ae:a0:88:c7:0e:78:25:d7:22:34:8c:
         af:6b:16:23:a0:7a:93:19:91:34:7c:7e:a2:74:4c:53:e3:f3:
         fa:25:fa:90:00:ea:dc:d5:01:0b:ca:5d:f7:b6:db:6e:b0:bb:
         c9:b6:95:87:d4:47:b1:11:25:b7:30:c0:98:36:f4:16:04:0d:
         20:de:3d:02:38:16:f7:e5:d2:d9:8d:d6:d1:16:ff:88:55:1f:
         a1:fb:11:d3:4a:1b:e7:04:3a:03:3f:ce:46:54:49:61:e6:4c:
         60:d2:04:13:fe:00:aa:10:68:91:26:39:b2:8e:d5:c1:b9:5c:
         ad:43:34:11:96:2a:b3:d1:5b:50:c9:f4:81:1a:cf:25:f1:01:
         a8:cc:37:7e:d9:41:b3:fc:8c:2c:90:f0:8a:a5:bc:7e:b9:9f:
         05:69:c2:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:29 2025 by rpki-client