Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3155361-fc7c-382a-be08-66ea609d5487.roa
File:                     d3155361-fc7c-382a-be08-66ea609d5487.roa (raw, json)
Hash identifier:          O+glo2iyu3TYEwLVipgWKuQE/3CLkOop9NpcFXg/2w8=
Subject key identifier:   54:B6:28:86:ED:26:A2:B7:55:5B:04:92:E0:0A:0A:EB:47:D4:8E:C8
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285849D4315FEE9934413CCAEF1DA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3155361-fc7c-382a-be08-66ea609d5487.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     7015
IP address blocks:        24.147.180.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:31:5f:ee:99:34:41:3c:ca:ef:1d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=6983e18e-21be-4c98-accc-c95a7921f58b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:4c:2a:7d:32:5d:45:ea:d1:32:01:26:f9:7d:
                    af:b0:d8:e1:ac:0e:1a:cf:a9:d9:88:77:21:db:b1:
                    37:83:f7:6d:b0:44:b4:c4:ca:5b:ec:b0:3f:44:02:
                    e7:04:d9:c2:77:2e:70:54:18:03:ce:1d:0f:14:1e:
                    5b:af:2c:80:e6:4c:83:4a:ac:57:d9:03:fd:80:fa:
                    00:1a:14:a9:1c:b5:1e:90:45:86:c7:da:92:24:00:
                    46:4e:a4:a6:ab:fb:4c:86:8f:cb:32:b2:0d:fc:43:
                    29:dc:e6:20:ab:32:9a:06:53:ec:e3:ec:19:b5:46:
                    01:29:a3:61:db:02:51:e0:4a:87:56:d3:03:af:e9:
                    a9:cf:ed:b7:20:18:e0:44:58:e8:82:8c:d0:ef:4d:
                    53:e8:9a:1e:41:17:bb:fe:85:40:43:02:02:34:78:
                    82:3b:68:57:44:d8:eb:d2:5c:c7:e4:4d:fe:b8:89:
                    d3:96:f1:52:56:bc:d0:93:e1:13:b2:20:15:82:26:
                    a9:3f:51:57:3e:85:a5:2c:16:19:d7:68:8c:a0:69:
                    b2:3f:7d:28:a3:d8:fd:ac:b1:0a:f3:a6:38:aa:00:
                    29:8b:9a:7f:8d:8e:b3:b1:12:fd:34:53:4d:e3:09:
                    64:0e:1f:0f:9d:99:cd:65:62:57:7d:cf:3a:a1:36:
                    e6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B6:28:86:ED:26:A2:B7:55:5B:04:92:E0:0A:0A:EB:47:D4:8E:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3155361-fc7c-382a-be08-66ea609d5487.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.147.180.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:40:8d:86:a6:89:69:f7:5f:ec:00:b6:b8:5d:72:b9:63:32:
         78:8f:60:fa:9c:d2:51:3f:60:fa:3d:6f:f3:b3:47:0f:86:f8:
         8a:b0:02:1b:1f:1f:14:28:a5:b4:16:a2:31:d6:12:15:65:f9:
         e1:f1:a8:9d:21:ec:da:72:55:b2:40:1a:37:61:96:14:ee:da:
         de:28:ea:b1:f4:45:cb:ef:d4:d8:e7:0a:8f:2e:65:3c:ce:f8:
         da:71:46:37:44:8b:a1:d0:07:bf:da:e8:ec:1b:96:32:34:52:
         f3:e1:03:fc:fb:9f:fe:1b:42:db:a6:28:a6:d9:da:c9:94:2a:
         4f:ee:37:a0:e4:3a:05:3f:86:7a:3f:c0:76:05:00:3a:33:35:
         81:5d:69:87:3b:3c:16:1c:b3:c1:14:8b:3d:60:39:35:9a:dd:
         83:6a:fb:41:7a:e6:7d:ce:0b:08:90:96:36:cd:d6:79:8d:46:
         a4:ad:22:03:d3:ac:a1:eb:9a:af:63:dd:56:1b:d1:f2:8d:8b:
         d6:ab:46:c9:ff:db:d9:56:dd:bb:ca:c0:ff:35:2b:05:ca:7a:
         dd:65:64:56:5e:e4:bd:7a:05:7e:a3:cb:d4:f6:a2:8a:2c:c0:
         a1:c6:db:f1:b4:4b:bb:cc:3e:39:ac:10:50:16:95:06:30:87:
         50:03:14:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 3 07:12:46 2025 by rpki-client