Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/09c3dd34-ab81-3927-abd4-bd9960914ee0.roa
File:                     09c3dd34-ab81-3927-abd4-bd9960914ee0.roa (raw, json)
Hash identifier:          x+hPYwuZiag1rMb3ojDlFlXonVn+egXWi60MHJK4HVY=
Subject key identifier:   4C:4C:92:90:24:88:E9:CB:25:07:AB:5E:4E:09:C1:B4:A9:36:27:A6
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BCCD4DA28C46ACDB0980
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/09c3dd34-ab81-3927-abd4-bd9960914ee0.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     29731
IP address blocks:        159.18.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:bc:cd:4d:a2:8c:46:ac:db:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=c674313d-0450-4338-8ff4-32cc504b6118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:6a:ee:1e:35:02:06:0f:95:4c:0c:70:6c:
                    bd:37:a2:73:5e:8b:55:ca:65:56:04:07:0c:2e:0a:
                    cf:ba:34:f5:92:2a:c5:d0:58:26:2b:3c:27:38:29:
                    f6:8d:78:e4:c8:96:25:4a:23:5f:c8:fe:d9:8a:60:
                    7e:56:83:90:9c:dc:0f:a4:df:01:02:84:26:6f:4b:
                    e1:94:9b:a8:81:44:fa:3c:be:1e:cd:ad:a9:53:e8:
                    db:45:7a:d4:f4:57:42:53:a7:c4:06:ab:df:0a:3e:
                    29:03:a8:74:35:7e:b2:ce:e6:c5:41:2a:08:47:64:
                    47:be:11:f1:b0:47:69:d5:6b:96:df:c9:71:25:f1:
                    1d:f2:53:2b:b6:92:84:49:58:ad:44:30:a5:5e:75:
                    17:df:97:25:a5:9b:27:30:5f:b1:a4:49:5e:91:29:
                    c4:fe:c3:6d:5a:d6:e2:1c:c0:89:30:81:cc:41:9b:
                    19:6c:4e:f2:a6:45:b8:d8:35:49:02:3b:6e:08:31:
                    84:2e:c3:10:44:c4:54:ce:b9:9a:56:85:1e:91:9c:
                    d3:ed:51:7a:09:94:43:79:d1:90:78:35:59:c3:b9:
                    f3:bd:9e:2a:00:c3:4d:63:ea:2d:84:a4:6d:3d:b1:
                    e4:c6:5d:0d:39:09:8a:b4:df:da:b2:f9:ab:ce:2a:
                    95:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4C:92:90:24:88:E9:CB:25:07:AB:5E:4E:09:C1:B4:A9:36:27:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/09c3dd34-ab81-3927-abd4-bd9960914ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:02:58:a2:24:52:63:bf:76:82:32:3d:a3:30:a1:d1:1f:06:
         8a:15:d1:bc:c7:30:79:51:53:a8:05:e2:01:f5:0a:8a:a7:5c:
         23:45:74:61:69:bf:9b:68:5b:17:2a:a3:8a:66:ab:a2:f1:3c:
         f6:8e:4a:13:6f:f3:96:a5:cf:fa:ba:28:af:f0:95:61:a4:ee:
         7b:eb:bb:b4:c0:84:7c:b3:08:e1:67:21:42:0f:3e:66:37:eb:
         70:55:b2:d9:1b:b0:94:45:26:1c:dd:e3:2b:ea:2e:16:26:c1:
         07:6b:c0:32:8b:c9:3e:fe:91:a7:cb:d8:6f:af:4f:28:5e:dc:
         71:93:f7:0b:79:ef:af:07:e3:34:9d:73:3a:94:f1:a4:59:48:
         38:17:60:71:8a:ec:82:15:dd:44:1f:fa:b0:76:ea:b9:bb:52:
         c2:ec:fc:6e:ce:20:98:e7:80:90:0e:a8:ee:83:b7:ff:df:9a:
         2c:2b:cd:30:2b:35:93:64:54:68:f9:b0:bf:37:01:47:33:b9:
         f7:86:8e:c4:4a:b3:3f:f5:94:45:77:91:07:21:52:d9:a5:cc:
         32:75:af:80:c6:54:63:04:ee:c5:67:4f:5a:36:1f:76:40:93:
         ea:74:a8:14:dd:44:86:29:0e:67:c3:cc:48:cf:8a:ba:58:5f:
         64:20:3d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:40:16 2025 by rpki-client