Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
File:                     3cc7131d-7a60-3712-92dd-3528026436b0.roa (raw, json)
Hash identifier:          EMHIl5RlZjjoGg2N5sR/ofy0vnlWxh71qMMQPI+AE2k=
Subject key identifier:   CE:2D:45:19:B0:73:25:33:E7:09:C5:C5:27:31:3D:0E:48:27:36:C1
Certificate issuer:       /CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
Certificate serial:       010D0C9F432858485E35AFEE192877E65E659F40
Authority key identifier: 53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa
Signing time:             Sun 29 Dec 2024 14:00:53 +0000
ROA not before:           Sun 29 Dec 2024 14:00:53 +0000
ROA not after:            Sat 29 Mar 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        148.59.77.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:5e:35:af:ee:19:28:77:e6:5e:65:9f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=420f38eb-2683-4b79-8a5c-b16fedaaa9f5
        Validity
            Not Before: Dec 29 14:00:53 2024 GMT
            Not After : Mar 29 13:00:53 2025 GMT
        Subject: CN=89de1cd5-b034-46e3-ac42-f3317a319864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e4:93:1a:a4:4a:be:4e:c5:f2:11:14:8a:ad:
                    0b:0f:28:03:ea:e7:34:9a:e3:37:96:cc:da:3b:0c:
                    5d:03:e1:7a:64:c6:36:a2:6b:a4:24:b4:17:34:30:
                    f2:95:31:f6:ab:a8:5b:9c:34:6e:58:9e:f8:f5:bf:
                    78:a5:4f:d5:d2:a6:ba:1b:b1:e8:72:e2:f4:2d:36:
                    46:7a:05:f6:c0:41:a1:07:29:6a:32:d1:61:8a:98:
                    3b:1a:5a:42:cf:a0:e7:7f:69:7d:49:9a:45:be:32:
                    98:66:eb:9e:66:34:5a:8c:54:92:7c:3b:7c:cb:ee:
                    48:9e:cc:39:02:fc:74:51:ad:f8:7d:bb:4a:15:e8:
                    54:27:53:c9:da:6f:25:e1:09:30:e9:9e:89:1b:81:
                    5c:71:37:f1:87:20:88:3a:a5:36:e0:bf:94:f9:d1:
                    6b:5e:a4:23:eb:49:4e:59:4c:37:3b:2f:b2:7e:b6:
                    08:cf:29:a5:91:5d:71:d7:7a:56:af:f4:4c:89:e8:
                    4d:3c:6b:4b:53:27:d6:d8:7d:3b:da:ae:dc:26:59:
                    24:dd:dd:ea:f1:de:a0:9d:a6:a4:31:e6:3d:b8:10:
                    4d:66:34:a0:8f:c1:9d:dd:fb:b7:96:36:b5:3b:e8:
                    cb:7b:f1:93:72:31:f9:d9:95:8b:1e:06:c6:72:9a:
                    d6:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:2D:45:19:B0:73:25:33:E7:09:C5:C5:27:31:3D:0E:48:27:36:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/3cc7131d-7a60-3712-92dd-3528026436b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.crl

            X509v3 Authority Key Identifier:
                keyid:53:58:B3:3F:4B:B8:8D:BD:03:49:18:6B:4A:14:87:BB:D3:EE:67:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/420f38eb-2683-4b79-8a5c-b16fedaaa9f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.77.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:35:46:e8:be:ef:c6:32:58:82:f4:86:20:53:63:73:e1:
         f0:39:33:40:a5:fc:f4:3b:2a:8e:71:46:01:5b:48:1b:21:86:
         43:31:a6:58:0f:56:c4:c3:aa:d8:cc:21:26:15:ae:29:04:d1:
         33:6f:b4:61:7a:ae:a6:26:a6:a5:56:7f:56:48:e7:98:60:1d:
         fd:2b:b8:88:60:08:ec:1d:65:b7:50:a4:d3:f9:42:ba:b1:d8:
         4d:8d:6d:05:9e:bf:6c:94:1d:64:67:42:38:69:11:18:6e:d4:
         26:ed:a8:6c:55:31:a9:8e:e4:73:3f:f8:f2:a4:a8:00:2b:f0:
         a3:cf:b4:9a:7e:ee:3d:8a:f4:ef:9c:cb:73:ea:1e:c0:2f:5e:
         ee:d9:ae:d8:47:7f:e1:89:60:3e:51:3f:6d:54:96:24:1b:32:
         6b:81:f6:ba:ab:d5:b2:4d:53:ab:a7:05:8a:ed:d4:98:45:46:
         80:0d:90:8e:20:23:9d:7a:2f:6e:c7:d3:f4:26:bf:1a:58:ca:
         ac:a8:f9:5d:4a:2b:ae:cf:64:5a:77:1e:12:b9:1c:8f:58:17:
         87:73:8f:a5:7f:37:77:91:f2:b9:17:a1:ab:d6:ba:9b:63:4a:
         20:52:06:3a:30:30:11:2a:84:1b:f1:89:19:93:87:70:fb:fa:
         d5:e4:82:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:16 2025 by rpki-client