Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa
File:                     e00dd15d-6181-3c59-a11a-5013b07f681b.roa (raw, json)
Hash identifier:          Mak36u/QiTb4IDsyTfrW2x2B6mEbvBUPfLiw78BVa+o=
Subject key identifier:   B0:2C:70:83:F7:EA:69:25:42:81:D3:4F:89:BA:5F:4A:07:49:9A:97
Certificate issuer:       /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
Certificate serial:       010D0C9F43285848E59BC944648B75042E008100
Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     396982
IP address blocks:        13.109.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c9:44:64:8b:75:04:2e:00:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=c2a4d0b4-7ac4-40a8-a574-462ab49f1bd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:ff:e4:8e:0b:11:ac:1a:ed:c6:1c:2c:c9:
                    9c:ce:ea:39:a9:ca:c0:11:03:a7:5c:d2:cd:b1:b0:
                    4f:82:1d:36:e2:65:1c:52:49:db:c4:68:d7:bb:f4:
                    a7:0d:62:7f:c9:a0:8b:c2:fa:8f:e4:08:e2:f3:53:
                    5c:05:c9:6b:f6:71:3b:cb:67:40:67:60:6f:62:f9:
                    6f:30:10:93:9b:6f:d3:5c:fe:aa:40:bf:7e:94:e3:
                    34:0c:fd:19:5c:af:a2:3c:0f:2c:13:1a:d0:f4:1e:
                    8f:f9:01:bd:07:42:3d:b6:a8:f3:a5:ca:54:0f:a0:
                    97:ec:49:ac:90:30:8d:0f:e4:aa:c4:ff:7e:04:0f:
                    48:e4:d4:b4:10:7c:39:7c:a1:99:37:14:7e:51:f2:
                    a6:e0:10:ab:3d:58:79:5e:39:67:46:9e:ad:04:d2:
                    cc:f9:d6:85:57:57:0f:be:c3:de:86:55:1c:eb:5b:
                    62:cc:60:28:79:32:bd:8d:bb:b7:3b:13:29:f7:1c:
                    ca:67:83:02:3c:d1:0d:4e:5b:c3:f9:36:1b:95:5b:
                    80:78:45:b7:ed:76:1d:da:68:38:1a:17:82:cd:ba:
                    83:af:7d:32:bc:a3:12:f7:30:c4:6c:ea:c8:03:7e:
                    fc:e6:d9:77:38:4d:29:5a:76:6c:75:bc:54:20:d7:
                    d8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:2C:70:83:F7:EA:69:25:42:81:D3:4F:89:BA:5F:4A:07:49:9A:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/e00dd15d-6181-3c59-a11a-5013b07f681b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  13.109.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:c5:7d:33:2d:b9:9e:f5:f1:5b:1b:74:1f:fd:22:9c:3f:b2:
         1f:63:5b:49:16:28:bb:cb:21:e1:cd:58:d1:02:d4:91:2b:01:
         ac:74:16:e2:87:11:63:f2:4e:37:f1:e4:cb:e1:d2:10:3d:73:
         45:1a:af:63:81:72:af:45:69:d1:00:48:a4:f4:78:ad:ce:0d:
         38:cc:86:9c:cf:24:ba:f6:f8:fc:a6:cd:b0:ca:d3:43:87:84:
         fe:b3:98:31:3b:51:d1:d2:9c:02:7c:6d:57:14:81:9f:99:c6:
         af:31:fc:a7:d8:e7:cf:a6:f8:f9:13:ed:a8:c5:4e:1a:8a:d1:
         78:a8:e9:9d:9e:c1:ae:3d:11:cc:2a:05:7c:20:be:ff:5a:26:
         cf:51:7e:3e:65:fc:ea:6a:21:85:dc:8f:9e:2d:f5:09:9e:a7:
         50:cc:db:eb:d4:6c:65:a6:06:e4:b9:b2:f9:a1:d1:fd:e9:35:
         3a:25:47:ab:0a:08:fe:88:88:4b:ee:9c:41:ce:ca:e4:85:ee:
         f4:0b:16:ff:ca:7d:5e:66:ca:1f:ec:fd:2d:f6:b0:d8:81:51:
         ed:e7:8c:2d:ee:ba:85:ae:5c:63:24:ff:5f:06:05:24:35:39:
         13:3c:1a:69:ea:ae:c7:3b:1d:cc:34:a7:93:3e:4b:9b:e1:11:
         40:49:8c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:47:45 2025 by rpki-client