Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa
File:                     cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa (raw, json)
Hash identifier:          O79NA+hMhWeFyGas/Dg1+0mrPqfVwsrsAGkaajSsL5o=
Subject key identifier:   A9:E1:63:B9:52:2F:AA:2A:F6:32:A6:50:ED:97:65:77:CA:B9:AF:B1
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584A0D6A8403EB5AD86F71749140
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        142.54.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:84:03:eb:5a:d8:6f:71:74:91:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=d9ac567c-0927-4831-ad7e-2336068e18e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:86:56:85:1f:55:2b:c7:f3:52:ee:0c:78:d4:
                    c7:d1:93:be:03:29:54:9f:9a:bd:1e:ad:f4:8f:27:
                    73:31:35:0d:54:cd:c5:07:fa:95:4f:5e:27:9f:44:
                    1a:16:e3:22:f4:78:1d:b9:d8:e3:b5:ca:5a:5f:44:
                    0b:37:d6:dc:87:1b:53:8b:60:93:76:25:c2:d5:20:
                    c1:3d:eb:a8:41:90:4d:b6:de:fd:db:3a:0e:0b:56:
                    e8:f9:1b:09:a1:69:d6:bf:a3:9a:2a:a9:fb:bc:0a:
                    cb:a7:38:02:bb:63:06:74:34:18:1b:f1:fb:47:2d:
                    15:65:58:b5:05:05:2b:2b:bd:0a:c7:3c:c3:4e:ef:
                    e5:86:2a:53:84:4d:05:ba:96:8b:f1:bd:19:b7:1a:
                    18:bb:97:20:cc:d7:7c:9c:24:f0:aa:87:8e:a3:e6:
                    db:90:12:a5:f5:01:c9:58:29:4e:b4:f2:39:41:e6:
                    a8:17:bb:fa:72:8b:8d:6f:3f:45:b3:3a:dd:fe:3e:
                    b6:eb:33:20:bd:3a:18:c6:7c:1d:21:44:44:7e:83:
                    ba:c8:99:53:b7:60:bc:df:9b:05:e4:48:c7:48:1b:
                    aa:a8:44:48:3a:4a:d3:7c:57:8b:b1:c0:2b:42:27:
                    d1:98:8f:cc:91:29:bb:d6:af:09:c9:30:9f:11:f1:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:63:B9:52:2F:AA:2A:F6:32:A6:50:ED:97:65:77:CA:B9:AF:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/cf43d6ff-d354-3659-b5fe-2b5cb89cb6f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:e5:b6:fd:e8:c2:5f:7b:16:b7:f5:90:b7:84:46:c5:ba:
         83:f7:d1:5c:c5:77:39:ac:a8:96:b2:cc:88:5c:b7:0d:e3:b4:
         86:8d:04:f5:5e:c1:7e:92:5f:16:30:45:e7:e6:3b:3f:fc:13:
         a4:cc:f5:bf:a6:5f:10:64:c9:1a:1a:64:04:f0:8a:6f:2f:10:
         1e:da:02:9c:57:14:90:93:ac:4f:ff:6e:a1:e3:30:26:ad:18:
         98:31:01:9b:55:2f:23:57:4e:58:ed:36:38:cb:10:2f:37:d9:
         1b:f7:57:20:67:48:6c:9b:51:93:63:4f:80:3e:cf:87:c0:f2:
         44:ce:75:4a:d4:0d:29:7b:b3:69:79:8f:b3:4b:67:95:09:91:
         fb:cf:7f:28:30:ec:4d:d2:ed:d6:4b:e1:c2:7e:76:1e:60:77:
         21:fa:fe:d6:38:4f:1c:c8:70:d4:fc:49:a9:11:ee:23:62:fa:
         cd:ca:be:1d:d8:ae:2b:41:fb:e5:b6:bd:42:80:56:e5:54:8d:
         c1:4f:ce:f6:b8:8b:8a:24:43:73:40:3d:13:25:28:93:63:76:
         b5:0d:fa:3f:8c:73:fa:4f:5a:53:fd:0b:33:fd:8e:fa:bd:a6:
         91:05:5b:d6:7a:f5:f8:f6:b0:01:18:47:70:6d:7c:55:d6:51:
         99:29:86:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 20:55:27 2025 by rpki-client