Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23c7154-4066-3d05-b3fa-a4f7d1938492.roa
File:                     a23c7154-4066-3d05-b3fa-a4f7d1938492.roa (raw, json)
Hash identifier:          SEarnMD5migDNooL8sULi8hbLtITfMZu7ntAtJiFr30=
Subject key identifier:   F5:42:FF:22:B3:47:A9:E3:3F:F5:66:71:4E:73:33:49:D7:B2:21:92
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F8536F3F1F8F3FED121280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23c7154-4066-3d05-b3fa-a4f7d1938492.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.218.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:53:6f:3f:1f:8f:3f:ed:12:12:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=91bbf4b5-f58a-40b2-8fb4-d04d12022063
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:db:4c:a9:6b:33:27:a8:2b:c2:14:d0:a3:57:
                    a9:82:9f:bc:2f:24:15:38:bd:b5:8e:15:d6:2e:b3:
                    6c:10:95:bd:dd:1c:36:cf:a5:1b:7d:42:00:2f:46:
                    ca:a7:49:b8:bf:9b:c2:c0:02:80:b8:68:30:e9:f2:
                    3e:d1:f5:38:72:a1:66:88:63:7e:6c:cb:a1:c4:5f:
                    bd:c7:e0:16:92:c8:a1:f8:ff:97:ea:79:95:2a:1b:
                    70:9f:d2:cb:88:11:03:96:ea:1c:63:79:ff:58:ba:
                    98:f9:1e:7c:e3:fd:3a:18:f0:41:da:81:0f:87:07:
                    ca:87:63:d7:65:fb:8e:f5:bf:72:5f:93:03:c1:b2:
                    d5:88:c3:f9:67:57:1b:69:30:f1:07:ed:bd:99:49:
                    07:78:dd:81:a1:b0:d8:f6:94:29:ec:84:00:98:ae:
                    88:e3:d3:e5:38:f6:bf:01:29:f0:a9:e6:4d:ab:6f:
                    cf:54:f8:15:9b:13:bf:1c:b7:57:e8:4c:ee:90:eb:
                    7a:b0:5e:eb:a8:22:94:e6:01:f6:d4:08:6f:40:fd:
                    f0:ca:27:00:fc:14:5b:e0:30:72:e2:47:65:29:8e:
                    a2:1e:cc:37:84:4c:16:ee:36:48:9d:9a:15:b7:98:
                    6b:4c:64:cc:e9:80:75:c3:ce:4e:8d:fc:7b:1d:82:
                    9b:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:42:FF:22:B3:47:A9:E3:3F:F5:66:71:4E:73:33:49:D7:B2:21:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a23c7154-4066-3d05-b3fa-a4f7d1938492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.218.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:5a:a2:40:da:25:76:cf:8e:c5:44:8b:2a:23:60:71:f8:82:
         68:f0:14:11:f8:72:7c:5e:3a:82:e4:26:0e:f3:59:66:3b:02:
         3c:d6:80:ac:58:b1:01:f4:4b:30:96:54:e3:aa:e7:aa:ef:99:
         71:1f:9b:eb:74:29:25:b3:68:fe:cf:5c:48:98:11:39:98:bf:
         0c:3b:5b:75:0a:67:f7:98:d2:e9:d5:f6:8a:8f:3a:17:26:e3:
         95:ca:3a:46:a2:1f:87:82:66:d9:94:d2:7a:4a:b8:e2:2a:76:
         6b:3c:8c:8c:6d:00:d1:2c:30:25:23:34:7b:a4:e5:bc:45:8a:
         97:d9:41:c1:ee:6b:b7:f3:61:8a:12:0f:05:ba:cf:19:5b:1e:
         8f:fd:22:f0:d9:49:2c:69:74:40:e8:fd:09:e2:52:f7:6e:84:
         03:88:dc:e3:ac:2a:27:c4:ac:db:ee:9c:18:96:87:78:b8:6c:
         16:8b:35:5f:04:0a:7d:60:43:77:8d:61:41:08:aa:af:73:96:
         e2:26:29:af:5e:ff:97:f6:e8:77:b1:2b:a0:2d:c8:4f:b2:53:
         ef:a5:67:14:ef:9c:e1:84:31:75:5f:19:52:4d:93:c1:67:e9:
         4d:d6:5f:f1:b6:db:8b:6b:97:71:6d:20:64:8a:46:61:d5:18:
         8f:8f:e0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:31:45 2025 by rpki-client