Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e087a1-7d32-33a3-8fbd-18986e6c3681.roa
File:                     e3e087a1-7d32-33a3-8fbd-18986e6c3681.roa (raw, json)
Hash identifier:          ZJxKjxb9+T5cNEge0fBbHBTlIz7uIsUBFjM+uq48xX4=
Subject key identifier:   48:B2:6E:93:12:81:09:37:FB:1B:9A:6D:C7:00:89:18:2F:FA:36:26
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F43285848F4F852FB3C2292F4DA828700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e087a1-7d32-33a3-8fbd-18986e6c3681.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     7015
IP address blocks:        24.2.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f8:52:fb:3c:22:92:f4:da:82:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=469a944b-129d-4c18-bcf4-e1f5d2dc9ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:f8:8c:af:24:c0:e2:44:ff:ee:14:05:4f:
                    79:d2:46:c3:ee:dd:b3:82:94:f2:42:9d:5f:84:c2:
                    8d:52:fa:2d:80:24:74:fe:0b:a2:b1:39:1c:48:5e:
                    2c:cc:83:f3:39:bb:82:a1:ef:ed:df:cf:dd:45:9a:
                    ac:44:2b:34:d1:35:c6:19:63:17:7b:87:9c:4f:d7:
                    75:3f:c1:8c:a0:8f:ed:7e:8e:61:0d:e8:0a:d6:aa:
                    84:9a:bd:5f:96:c3:8a:d2:17:70:a5:ca:f2:44:17:
                    69:13:c6:e0:47:41:8b:53:56:f0:6e:0f:89:36:05:
                    76:5d:ba:8d:3e:15:7d:23:ee:11:ba:c9:1d:bb:dc:
                    09:33:b4:de:9c:6d:42:72:05:5b:35:10:d5:8f:94:
                    74:f1:db:8e:f1:14:90:89:6e:d1:19:8d:1e:3a:d9:
                    c0:37:ed:17:0d:63:a2:9f:b5:a0:ff:1d:42:07:cc:
                    ef:62:ac:b2:2b:6f:d2:c8:ab:8a:0c:49:b9:3f:08:
                    9b:25:c4:56:9d:61:ef:57:4c:8c:1d:1b:01:78:b9:
                    a1:92:05:e1:84:90:c0:67:59:90:e6:8e:3f:a9:15:
                    5f:6c:9c:cc:9b:0b:e4:05:99:a7:ca:05:20:9a:85:
                    14:66:b6:67:c8:04:3e:f8:dd:a8:cc:03:10:de:4a:
                    3a:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B2:6E:93:12:81:09:37:FB:1B:9A:6D:C7:00:89:18:2F:FA:36:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3e087a1-7d32-33a3-8fbd-18986e6c3681.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.2.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:a0:5a:6f:4f:9f:4b:67:eb:fe:8a:c0:ed:f9:5f:e2:7d:bd:
         0c:9e:90:be:87:b0:01:ab:a5:f0:ec:54:64:8a:a0:8e:80:d9:
         cb:1b:33:4d:ca:d3:59:eb:95:62:31:4c:81:65:af:b1:32:26:
         b9:99:26:39:60:76:7d:03:8c:5d:58:34:ed:5b:ab:75:61:80:
         45:3c:24:68:92:71:d7:be:b0:49:ce:af:23:b9:69:68:e1:37:
         c8:21:0f:61:f0:a3:50:9d:59:76:8b:b4:dd:bc:28:41:c0:35:
         22:b4:2f:7f:01:3a:d7:a5:6d:9f:83:f9:87:2f:50:7d:b6:ec:
         2b:c6:d1:f6:01:11:e0:5f:81:82:ab:cc:f7:71:3a:99:69:a0:
         37:cc:5f:1c:56:1e:70:c5:d4:af:92:a8:96:8b:30:71:6d:c2:
         41:52:36:95:df:3d:1e:7b:7f:a4:51:a2:3a:ad:c2:0d:96:ba:
         5b:8e:12:9f:61:ef:a8:7e:95:73:17:82:ae:cd:d0:d1:0b:9c:
         6d:2b:35:f8:ca:57:4a:7a:70:75:2b:8d:55:03:2b:5d:fd:22:
         10:1d:f6:36:cc:9d:79:26:44:f8:d0:42:dd:f1:7c:76:e5:a6:
         56:b3:50:60:60:9e:c9:cf:a7:91:dd:c6:d7:2d:fc:6b:df:fa:
         ee:dc:e4:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:55:12 2025 by rpki-client