Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
File:                     3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa (raw, json)
Hash identifier:          qOT8z6WxWLe3xyl30o0fbmHt7Q9DvjFKHrf+P6MoDi4=
Subject key identifier:   52:2F:0A:B5:AB:C7:A6:B7:F9:70:03:6C:26:3A:46:48:67:3F:3C:51
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F43285848530AF35A7FF052BCEFA43FC0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     15313
IP address blocks:        150.252.196.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:f3:5a:7f:f0:52:bc:ef:a4:3f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=0ac15b3c-7733-42f7-ae0b-416962c0dc69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:2e:7c:bd:01:b6:69:f1:65:a7:7a:2e:46:57:
                    30:28:c6:09:49:6b:cd:25:1c:f5:80:b0:cf:fa:66:
                    12:7d:56:b8:b8:1c:44:eb:26:af:fa:65:28:a1:98:
                    83:fa:3f:15:7f:f4:40:85:d7:88:f5:9e:22:1e:98:
                    d3:0e:8e:d2:95:72:60:f1:42:60:aa:0d:eb:c2:52:
                    b6:d4:dd:6d:10:95:8f:07:0c:31:cb:b9:3e:4f:fe:
                    43:28:bb:ab:95:5d:ef:47:4c:2b:6c:f2:29:b2:df:
                    e2:29:8b:96:46:5b:a3:85:e7:22:89:26:ca:f0:0c:
                    f4:96:2d:76:04:d7:b9:10:6c:2d:3f:37:65:5c:21:
                    94:20:dd:4b:ad:27:7b:86:25:e6:0c:2e:9a:51:4d:
                    ef:93:5c:3b:71:e0:10:dd:42:4a:f2:60:c3:8c:c8:
                    8c:65:ce:c5:33:87:a4:8a:1d:24:41:7f:2c:e4:26:
                    07:93:84:3a:1b:27:d2:e8:85:1f:d4:ed:eb:b7:2e:
                    9d:0f:de:73:5e:03:f7:94:89:dc:2a:df:06:d4:92:
                    69:1b:df:0c:90:0d:f0:8b:23:c2:a3:6b:65:a8:46:
                    3e:5a:8d:24:d0:50:2d:7d:19:93:0e:59:bd:42:5d:
                    15:58:38:aa:ce:aa:0f:5c:8a:7d:15:6a:d0:46:12:
                    c8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:2F:0A:B5:AB:C7:A6:B7:F9:70:03:6C:26:3A:46:48:67:3F:3C:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/3d15cd54-a638-3fbb-9d72-ed29a2cc764e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.252.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:93:dd:4b:46:0e:8b:5c:8d:61:4b:7d:7c:61:2f:51:12:4d:
         63:ec:5c:6d:23:73:54:c8:77:1a:0a:3e:a0:5a:67:d5:84:83:
         4c:02:8c:20:e7:d9:91:f6:52:23:02:cc:6f:48:25:a2:c7:74:
         bc:e7:e9:91:63:cb:21:56:f4:05:cd:4f:d8:2a:ac:44:99:6f:
         43:9f:88:0b:a1:3c:da:af:50:82:2d:25:5e:2c:69:7c:ca:68:
         55:0b:21:6b:66:01:86:cf:3c:1d:55:3c:e5:1a:89:36:30:2e:
         d1:62:30:e1:7b:67:26:3e:df:c2:d3:93:35:80:bb:3b:c0:a6:
         4b:0f:b7:10:be:33:89:71:be:ec:67:4b:8a:de:ff:31:c6:a8:
         77:3f:fb:54:9b:22:4b:a1:19:e8:fb:3f:6c:e9:86:22:48:94:
         3c:1d:b7:01:dd:f7:24:df:e2:e7:64:b5:04:cc:87:23:af:01:
         60:35:cd:a5:7f:70:7a:c1:27:e5:cb:70:1a:dc:a7:b5:9b:2b:
         5c:16:17:bc:01:23:13:f9:a3:51:1d:4d:f8:32:44:58:96:db:
         99:20:87:e3:12:93:aa:6b:63:8b:f3:a6:b1:2c:93:59:ce:52:
         5f:ce:6d:f7:93:7d:27:e6:dc:0e:02:07:a1:0a:f8:e0:dd:a3:
         b6:ef:3b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:30 2025 by rpki-client