Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9d1fd6f-dd58-3960-97f8-b7d9729efecb.roa
File:                     f9d1fd6f-dd58-3960-97f8-b7d9729efecb.roa (raw, json)
Hash identifier:          OtNEN6VZauxd88Sw2UEa7oc06liYjRvo8wJmQLTcEaI=
Subject key identifier:   00:A4:71:19:E2:96:7F:AC:D3:12:FD:A4:DF:32:54:BE:EA:9C:05:AE
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F43285848AF2B9EF0F8716D23EE1F5B40
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9d1fd6f-dd58-3960-97f8-b7d9729efecb.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     18779
IP address blocks:        142.111.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:9e:f0:f8:71:6d:23:ee:1f:5b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=914e03ce-d4c9-4c7a-b0eb-687f3bcc63ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b6:19:2b:05:03:bb:3d:3c:fb:be:68:04:fb:
                    62:fb:f4:da:70:48:7b:e6:64:1a:77:0f:0f:23:72:
                    33:78:14:91:57:49:93:27:5d:b6:c7:aa:ff:9f:3a:
                    87:8e:17:ae:09:e8:9c:68:3f:67:ba:dc:7c:d2:be:
                    d6:93:b3:1e:9f:3a:5a:f4:30:df:fd:c2:21:29:07:
                    52:9b:19:31:90:09:61:79:0c:e8:14:ad:d4:d5:b9:
                    fd:8c:f7:7e:4e:55:32:05:45:fa:f1:d1:c1:35:86:
                    c6:13:58:d5:46:2a:4c:22:fb:07:9b:1f:12:a0:63:
                    27:84:fa:7b:15:28:29:eb:d1:90:e0:da:9f:a3:63:
                    6a:89:72:5b:11:0c:46:08:b7:f1:bb:c1:e6:f6:27:
                    0c:77:c9:4c:ae:00:fb:88:52:ac:90:eb:98:f3:ac:
                    09:68:63:ac:30:04:b5:ae:7b:63:54:55:16:fa:43:
                    5b:02:ad:3d:93:25:c5:7e:eb:d1:a6:a2:fe:b7:eb:
                    66:71:61:68:7c:ac:a4:74:6e:6d:73:a9:f4:95:29:
                    51:67:79:af:c4:5e:4f:05:a4:03:81:7e:89:c1:21:
                    bb:d1:fb:4f:e4:90:6f:6e:b2:a6:db:06:68:30:72:
                    88:41:60:5a:de:d1:0f:b9:09:aa:90:fa:80:d0:14:
                    6f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A4:71:19:E2:96:7F:AC:D3:12:FD:A4:DF:32:54:BE:EA:9C:05:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f9d1fd6f-dd58-3960-97f8-b7d9729efecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.111.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:59:23:20:00:08:1b:22:65:e4:85:14:d2:bd:64:a9:2a:ed:
         06:1f:32:1d:0a:48:ac:5e:1a:b7:91:79:86:72:3c:66:9e:c1:
         34:7b:a5:7b:65:e0:f2:45:ca:7e:06:50:18:60:b4:36:d1:59:
         0f:25:1a:d2:83:58:59:a4:e4:7c:ae:cb:fa:82:67:c1:9f:07:
         94:c1:93:14:4d:7a:41:61:6a:b7:29:1d:82:90:71:6b:52:de:
         5f:06:d8:52:e9:1c:68:e7:f1:c6:a2:c8:c9:ac:53:79:6c:31:
         10:38:0b:b8:8c:f1:15:3a:e2:6a:ae:b0:3a:5d:bc:4e:bd:d0:
         e2:8b:97:ee:d9:5a:d2:39:de:d4:5e:22:48:f9:67:81:b1:d2:
         d3:bb:7d:5d:94:9e:6b:b9:f3:0f:0d:8c:b2:d7:1d:df:0d:07:
         4f:b8:8b:3b:9b:72:63:27:33:01:b7:02:dc:d1:55:b8:a4:52:
         4d:89:f8:fe:53:70:90:75:ff:d9:45:85:6a:6d:a4:1c:cd:47:
         f6:8d:3c:d5:de:16:14:bc:c5:58:b0:8a:e3:e2:41:b0:da:a3:
         cb:05:b9:92:a7:a5:83:71:3d:b8:60:a8:d2:e6:40:c4:a8:98:
         ee:52:93:9b:2b:02:80:4a:29:79:d2:0b:50:5e:74:85:2d:03:
         b4:d8:7a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:37:37 2025 by rpki-client