Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa
File:                     53d1981f-7671-3de0-ad5e-7716d805a3ba.roa (raw, json)
Hash identifier:          qqF7uw/BhHqDKBuPKOPIMnHk12lw7HhP02dc+pCTfxY=
Subject key identifier:   2B:43:92:CB:CC:CF:7C:42:68:99:A0:DD:C6:00:BA:F7:C5:A2:53:4D
Certificate issuer:       /CN=9becea05-974b-43e4-a04f-198402715647
Certificate serial:       010D0C9F432858494CC939AFC50A3D98F5AEF390
Authority key identifier: CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     13760
IP address blocks:        165.140.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:39:af:c5:0a:3d:98:f5:ae:f3:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9becea05-974b-43e4-a04f-198402715647
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=af1684e2-ee54-472d-bf60-677f2d1ae673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:14:9f:72:51:d9:70:04:1b:54:0f:e0:cf:9d:
                    b6:8c:70:a6:87:d3:47:0a:f7:49:89:00:3c:b8:eb:
                    6d:5a:75:b1:3f:8a:ae:b4:4b:5c:a6:57:fd:6a:fd:
                    ef:10:82:db:b2:d0:a9:cc:c0:3f:37:11:76:e9:10:
                    c8:cd:d8:08:fd:f1:db:92:fe:2a:f1:0a:98:e4:ea:
                    a6:60:0e:95:59:c5:33:dc:be:b0:cd:42:24:84:a8:
                    4e:4c:88:45:f5:ab:d1:d1:25:26:c3:ec:a4:9d:b6:
                    0e:c5:21:58:a7:ef:dc:80:6d:b7:ff:82:43:cc:b1:
                    15:fa:f5:4e:ea:c3:0d:1f:28:ed:53:10:2c:56:7e:
                    26:07:0d:04:85:eb:d2:62:55:3d:3e:d1:28:49:4b:
                    5d:95:d0:28:34:f2:9a:d1:6e:d7:c3:67:d9:3f:52:
                    c6:62:1f:01:e8:e2:39:0b:4e:d9:a3:2b:7f:ae:07:
                    25:91:47:a5:c3:62:73:f8:fc:a5:9a:5a:1a:f7:44:
                    89:51:7b:38:55:a1:d4:16:11:54:cb:d1:3c:06:5c:
                    23:e7:c6:2c:9d:c2:82:91:a9:66:a5:e0:ac:fe:e7:
                    b7:1d:a6:3c:dc:ab:d9:49:27:21:40:b4:af:c4:0a:
                    8f:b7:55:7a:1d:90:d3:26:25:c6:6e:82:5e:72:a1:
                    b3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:43:92:CB:CC:CF:7C:42:68:99:A0:DD:C6:00:BA:F7:C5:A2:53:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/53d1981f-7671-3de0-ad5e-7716d805a3ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647/9becea05-974b-43e4-a04f-198402715647.crl

            X509v3 Authority Key Identifier:
                keyid:CB:0C:CF:2F:01:59:5E:BE:15:54:B8:D3:88:5E:C6:E3:E5:BF:A2:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9becea05-974b-43e4-a04f-198402715647.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.140.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:e1:90:56:71:3f:33:a0:f5:06:f1:cb:40:07:73:e5:9c:f8:
         ec:38:65:f5:3e:ce:f2:ee:4e:1b:7d:bc:59:e8:45:37:64:d1:
         db:1f:bf:d9:88:fa:c8:f7:29:e0:c5:82:ab:c7:80:21:dd:24:
         06:39:b0:47:4a:1f:24:23:7d:6d:2c:8f:11:34:b0:20:1a:6f:
         b6:13:16:a4:60:33:ae:79:de:5d:13:fe:ed:72:be:2a:3d:dc:
         96:75:9a:d0:c7:74:2a:b2:fa:c6:4b:c1:01:77:f9:4b:be:5e:
         14:d0:c5:85:5d:3d:b8:39:7f:aa:6f:48:fe:05:03:f1:d7:13:
         ba:29:1a:6c:7b:60:57:55:e6:09:f0:22:6f:3a:59:c3:4c:fb:
         95:1e:72:17:cd:86:0d:88:e8:51:d5:61:29:4a:00:bd:5d:1e:
         44:82:2e:9f:a4:a8:28:f1:01:5e:1d:b0:57:2c:cb:66:86:3b:
         ba:79:a5:7e:77:78:29:7c:46:21:38:fa:f4:4f:d3:3f:4e:a6:
         cf:3a:46:17:a6:71:da:01:25:26:54:cc:a0:93:78:85:5d:50:
         21:9f:9d:e9:bd:74:91:e7:38:ed:cb:d2:0c:fc:ec:54:33:ac:
         f9:44:2d:14:a7:2b:8a:97:68:b4:8d:d8:79:19:ff:1b:47:04:
         47:ae:d2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:39 2025 by rpki-client