Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa
File:                     9607aa8f-5b06-3fde-9184-4f046ccf8898.roa (raw, json)
Hash identifier:          tr1H0G0f5kFpQmDD8IBz5tMXp6+unygSaiIwFTlTS3E=
Subject key identifier:   E0:BD:4A:96:BD:0F:9E:B5:29:2D:F8:4C:B6:BB:79:28:02:AF:35:BE
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F84E4FE5FC93A9F70F6E40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        174.168.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:4e:4f:e5:fc:93:a9:f7:0f:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=c66d7478-ab5a-49f0-b012-262a74032336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e7:16:ee:a0:bd:e0:4a:46:ba:a6:42:b4:57:
                    00:45:0b:1f:a5:0c:5d:06:ff:e2:17:7f:0b:62:d9:
                    da:98:ef:f0:90:13:b1:6d:d6:7f:52:9d:06:53:03:
                    c1:6d:61:db:83:c0:d6:e7:fe:e2:2b:cd:f7:f1:93:
                    be:31:f7:a7:ae:d3:4d:da:d0:3b:dc:e0:25:0f:46:
                    c8:80:c1:28:da:7a:7b:d1:c6:31:77:32:9c:db:53:
                    48:b0:b9:a6:f1:11:7c:aa:e6:ca:8b:cd:d0:cc:b3:
                    b5:06:f8:9a:6b:05:eb:2c:85:32:65:71:bc:0a:0c:
                    f7:11:44:ca:5a:a2:81:6b:d7:68:98:2f:3b:f5:f7:
                    04:1f:c6:da:74:19:2b:ab:53:96:ca:ff:05:f9:25:
                    ad:db:0b:15:de:5f:dd:29:fa:3d:ff:b0:f9:91:e1:
                    4a:76:e3:0f:a1:06:00:a9:db:14:d2:8d:3e:ea:7f:
                    f0:e0:89:4b:f3:16:18:0a:e3:67:47:7f:2f:e0:52:
                    ba:94:3b:48:fb:d5:b1:ae:33:bc:70:80:46:88:82:
                    88:d2:bb:cf:10:ff:5a:b6:61:9c:a2:4b:0b:be:11:
                    37:5d:42:f8:21:5c:df:48:f0:92:77:9b:d1:57:27:
                    22:df:be:e0:26:cd:0b:54:dc:73:63:2d:da:d0:51:
                    07:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BD:4A:96:BD:0F:9E:B5:29:2D:F8:4C:B6:BB:79:28:02:AF:35:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9607aa8f-5b06-3fde-9184-4f046ccf8898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.168.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:b4:c4:cd:fe:b4:38:52:b1:05:82:fb:cd:bb:3b:2d:19:ff:
         11:18:ef:5f:1c:b5:4f:75:66:19:c3:67:c2:33:66:f7:11:db:
         96:de:8a:d8:d8:7d:c6:25:54:30:cf:dc:28:bc:69:0b:8d:ba:
         eb:a4:d3:94:4d:88:05:f1:cf:8b:ce:8e:01:10:10:a2:f4:ee:
         1b:eb:ca:a3:7b:2d:a4:6c:9d:d3:17:a3:a5:8f:35:05:ac:64:
         ac:73:fb:7f:b2:8b:04:db:60:90:46:30:d9:d6:24:72:b1:9c:
         40:ce:88:58:65:69:80:37:1c:f4:29:48:ea:d9:69:f0:e0:2d:
         cd:b6:8e:1c:6c:3d:4c:ff:88:5d:2d:46:61:5b:66:28:0d:60:
         16:9c:ad:e4:1c:72:61:bd:69:c9:f3:b1:65:dc:46:ae:70:53:
         47:3b:1e:8e:49:29:42:54:92:61:6b:9a:42:e2:e8:21:a2:53:
         5e:8e:c1:44:af:a4:5b:68:a2:85:b0:d5:76:91:35:6c:57:7d:
         02:ad:af:de:b0:f6:17:b8:b2:fa:46:00:4c:d1:5e:73:3d:8f:
         49:10:0a:92:ec:4d:3d:79:98:7e:48:a0:4f:76:e5:9a:8a:fa:
         d6:3e:e0:55:8e:6f:37:d2:d8:eb:e0:a3:62:2d:f8:05:0f:cd:
         ca:d8:73:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:08:15 2025 by rpki-client