Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/141a068d-de1d-36ab-a6b9-c605d718ff95.roa
File:                     141a068d-de1d-36ab-a6b9-c605d718ff95.roa (raw, json)
Hash identifier:          Ndwt9lta4NXJX+TQSWl8uSGKA43DwXTjs5EA19sU5Rw=
Subject key identifier:   C1:9D:18:27:87:0F:0C:20:4B:01:E7:D2:74:48:1F:32:5F:31:44:6D
Certificate issuer:       /CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
Certificate serial:       010D0C9F43285848EC9E5CA6927089CDAD1613A0
Authority key identifier: 10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/141a068d-de1d-36ab-a6b9-c605d718ff95.roa
Signing time:             Tue 18 Feb 2025 14:16:44 +0000
ROA not before:           Tue 18 Feb 2025 14:16:44 +0000
ROA not after:            Mon 19 May 2025 13:16:44 +0000
asID:                     399970
IP address blocks:        149.112.152.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:9e:5c:a6:92:70:89:cd:ad:16:13:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a3095c5-fb6a-4400-bb74-b55eff2073bc
        Validity
            Not Before: Feb 18 14:16:44 2025 GMT
            Not After : May 19 13:16:44 2025 GMT
        Subject: CN=06376e2e-46fd-4b91-8682-b777843496c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:01:ee:1f:aa:e8:e8:70:2c:dd:c0:92:d6:04:
                    f9:9d:13:35:8b:8b:05:d3:f9:7e:23:b2:09:c2:bf:
                    d9:25:15:c0:cb:9a:57:06:14:1e:d0:a6:42:14:83:
                    ef:8f:10:fe:26:d1:d7:3a:4f:fe:b6:91:a5:ed:b5:
                    76:3b:2a:eb:f0:ab:b8:c1:32:92:25:7f:92:03:28:
                    f4:dd:9f:36:89:50:f4:e5:f7:14:de:79:a1:9d:29:
                    af:7f:15:c7:aa:13:48:ed:6e:e8:24:59:8c:ce:77:
                    4b:85:5e:74:e9:46:67:d2:df:f0:c5:e6:51:e4:0f:
                    bc:48:21:9e:04:31:58:14:49:c3:89:ed:3e:68:5e:
                    a8:52:8f:54:38:f3:4f:17:ca:bf:c8:1a:13:2c:53:
                    bc:9a:08:41:40:5e:ba:ac:87:36:06:41:62:82:9d:
                    3f:56:9c:c8:b7:69:a0:bf:18:de:c9:e9:3e:3a:06:
                    66:3e:dc:64:ae:bc:80:44:e0:37:92:a9:72:bd:19:
                    c5:5d:8f:0c:e0:4e:e9:d3:12:08:e2:9f:15:51:b9:
                    83:4b:c4:8e:f8:3a:f8:9e:80:b9:79:0a:d3:7f:0e:
                    de:15:1e:6c:df:f3:00:b7:59:e0:dc:e1:d5:c5:80:
                    2c:d1:5b:69:b6:24:58:c2:e9:9b:c2:81:41:6a:4a:
                    0c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:9D:18:27:87:0F:0C:20:4B:01:E7:D2:74:48:1F:32:5F:31:44:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/141a068d-de1d-36ab-a6b9-c605d718ff95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc/3a3095c5-fb6a-4400-bb74-b55eff2073bc.crl

            X509v3 Authority Key Identifier:
                keyid:10:A0:E1:F5:16:FB:75:75:1F:9D:D3:8F:00:2D:CE:15:BE:77:4E:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3a3095c5-fb6a-4400-bb74-b55eff2073bc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:3d:f1:c7:d9:63:12:f9:19:a2:42:c5:0a:57:a4:f5:d7:7c:
         13:4f:c4:8e:5e:8b:f7:14:e9:71:15:f5:87:2c:e7:66:d2:90:
         0b:6d:b5:cd:0a:6a:ad:0d:85:92:5b:af:5b:cf:29:3d:d3:7c:
         6e:1e:8f:18:ae:18:61:fc:a8:ab:0b:5a:0e:ba:aa:aa:30:2d:
         ca:a1:17:27:56:0f:54:ac:ea:5b:95:05:27:a0:a4:3c:e1:b8:
         08:7a:da:08:e7:3c:62:e1:0b:6a:b7:fd:f1:37:15:42:39:2b:
         9a:85:54:f2:d8:d0:de:c0:0f:d3:50:8d:9e:9a:c2:85:37:83:
         2f:47:31:9a:d2:be:cd:30:1b:58:59:79:cc:ac:26:8a:b9:76:
         c5:63:0f:b4:2b:69:1d:ae:b7:ec:d1:0d:86:b1:58:62:17:07:
         91:de:33:2f:68:a2:c0:37:b3:b2:62:fc:39:7f:2c:0a:8e:8a:
         97:e5:11:2b:fa:f4:67:74:cb:ee:0a:3a:26:b9:a1:59:d7:2a:
         22:d5:53:fe:57:80:9c:12:5d:6e:56:c7:bf:de:e6:cd:4f:8e:
         49:8d:06:e9:e7:47:d9:85:28:96:c1:37:e1:d6:78:89:56:cf:
         e6:2d:28:df:b3:18:9a:0c:ec:56:0d:71:06:f1:d0:3e:23:c3:
         db:42:7b:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:04:10 2025 by rpki-client