Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5b73a7f-8409-3f61-9b50-01cf653d5d04.roa
File:                     e5b73a7f-8409-3f61-9b50-01cf653d5d04.roa (raw, json)
Hash identifier:          t1i/3e8/62uYxP/Ch1LB7aZL5nZQavWDoB3niqPEyEs=
Subject key identifier:   64:FA:FA:FF:0A:26:D1:3A:AD:0E:6D:7D:45:70:B8:1B:77:D5:C9:1C
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6C45310DABB22110A5FB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5b73a7f-8409-3f61-9b50-01cf653d5d04.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        24.131.160.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:45:31:0d:ab:b2:21:10:a5:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=87fd99b8-5c2e-4dac-a1ad-d4b1c2ae5abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:96:1f:d1:9f:9b:36:32:c3:a4:7e:72:b6:2f:
                    96:ba:4b:13:0b:2a:50:39:de:ab:96:fb:8c:7e:ff:
                    52:59:13:71:aa:49:76:20:b7:c6:0a:bf:fd:a0:bb:
                    73:15:99:bc:af:59:39:26:7e:f2:d5:15:43:17:b4:
                    96:49:cd:b7:03:2f:8f:eb:90:21:e6:50:3d:14:5b:
                    73:c5:1b:92:79:b6:2c:eb:d8:e9:dc:2e:7e:19:0e:
                    e0:d2:46:48:21:db:a2:a6:70:01:09:12:8e:ee:ac:
                    7f:07:35:a6:0e:b5:c0:b6:93:79:f5:e9:ea:ca:b0:
                    73:70:c4:be:27:b4:08:76:db:a3:c1:d3:83:69:11:
                    86:aa:4e:35:f4:79:b1:32:85:56:c1:1b:75:14:cd:
                    65:6f:de:9c:84:0f:17:3b:c8:e3:4f:cd:7f:ef:c3:
                    08:f4:e0:da:08:c3:8a:69:8a:0f:16:01:08:12:ab:
                    83:3c:94:c3:e8:56:b7:a1:a5:b2:ce:9f:ab:44:37:
                    1c:29:5c:8b:2b:55:ff:1f:f8:17:91:ee:88:15:88:
                    c3:52:e1:1a:46:bb:43:15:a1:74:40:a9:fb:45:39:
                    5f:cc:52:d3:25:cc:74:01:09:e9:61:19:4e:75:84:
                    53:48:34:4b:5b:bc:f9:66:24:27:0e:b2:18:b5:53:
                    90:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FA:FA:FF:0A:26:D1:3A:AD:0E:6D:7D:45:70:B8:1B:77:D5:C9:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e5b73a7f-8409-3f61-9b50-01cf653d5d04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.131.160.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         da:33:1f:25:38:17:0a:24:ff:f2:0f:29:5d:d0:9d:e8:64:7b:
         05:7c:77:22:b2:5c:2e:eb:5f:6c:3c:3b:de:1f:14:22:45:b1:
         92:36:ca:1d:96:1b:7f:92:43:06:0c:76:b6:0b:12:37:30:8c:
         6a:44:bc:68:c0:0b:72:a0:2f:b7:00:45:f3:cb:2b:10:7b:20:
         ce:7f:b1:68:ae:b3:a9:0c:f3:22:3e:63:e8:7d:d8:4c:7e:3b:
         ee:92:9a:42:ec:aa:f2:c5:3a:af:55:ec:3e:09:0f:30:36:64:
         7c:3a:46:89:bf:1a:e7:df:bf:0a:1c:29:22:dd:e3:d4:d6:8d:
         37:3e:62:72:1e:4b:33:99:e6:fd:8a:39:0c:0e:68:90:2e:ea:
         f5:6c:53:46:1e:ae:e0:45:16:e7:56:70:bd:55:f1:c8:45:fe:
         59:f4:f9:7c:c7:e9:bd:50:a2:65:66:e7:c5:7b:70:15:0d:77:
         3f:6a:9f:69:0b:9e:b3:f5:e6:0d:2b:dc:8f:b2:55:3d:68:80:
         a7:14:da:0a:f5:35:f8:15:5a:a7:2b:1c:bc:71:f7:9c:c8:64:
         bf:27:8f:62:1d:42:1a:77:ac:07:cd:e8:90:f1:5a:ac:16:f9:
         78:78:74:16:8f:75:68:7c:01:19:a7:91:2e:a6:92:d3:94:cb:
         26:c6:9e:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 06:00:21 2025 by rpki-client