Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/ec4c86f2-2b17-3de2-9b7f-bf880c144505.roa
File:                     ec4c86f2-2b17-3de2-9b7f-bf880c144505.roa (raw, json)
Hash identifier:          +OTiI5moaLgqQnOVGN75icYJt8j2qmssRWa0qTRA6oU=
Subject key identifier:   CF:2A:C6:11:73:95:E9:51:D3:8E:E5:6B:13:7A:FB:8C:9A:D7:48:5C
Certificate issuer:       /CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
Certificate serial:       010D0C9F43285849203C18D7683ADB41770E5F40
Authority key identifier: 26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/ec4c86f2-2b17-3de2-9b7f-bf880c144505.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     53485
IP address blocks:        144.77.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:18:d7:68:3a:db:41:77:0e:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a5c850-b5f7-4cfd-b31f-19d51bf3cc08
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=954b06fb-71fc-4667-a21e-e12914138d12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:eb:44:83:de:3f:75:ba:e6:86:b9:48:bf:29:
                    15:03:95:47:e2:c7:9e:6b:c7:98:cf:f9:1a:79:8f:
                    65:bc:93:ba:cb:28:3e:44:0f:73:f2:2e:c3:de:74:
                    5d:e0:48:68:98:0a:ee:39:dc:6b:1f:0b:d8:fc:00:
                    35:e0:19:d7:90:79:7a:75:52:15:fd:20:61:fd:b4:
                    95:04:d8:e0:5b:2a:c2:9a:3e:48:29:06:e3:23:c4:
                    35:f5:88:a1:6a:40:39:37:56:1c:2b:25:fc:bb:a1:
                    4e:96:6b:d7:f1:d2:24:8d:62:35:ed:bc:c8:0d:0a:
                    97:d1:f3:c6:d3:b3:18:6a:28:93:08:5c:1b:21:98:
                    74:10:e7:6d:a8:4c:b9:78:7a:8a:52:e5:9d:a6:a6:
                    b3:fb:97:30:89:61:7f:3b:d1:ac:5f:40:db:3a:4e:
                    c6:d1:33:bd:d6:b8:13:44:37:19:fd:94:77:1b:10:
                    74:7f:2e:97:f5:8a:db:a8:45:f7:44:dc:2b:7d:b6:
                    1b:e3:6c:66:bf:5f:c7:c0:63:c2:17:e8:6e:c0:d6:
                    0a:f8:de:97:5f:b3:5b:9b:9e:15:7f:6f:89:91:67:
                    cb:5b:e4:32:e4:59:67:66:06:bb:d4:02:8a:c0:f4:
                    1f:19:59:4a:10:c2:e0:d6:b2:e5:bf:57:de:3c:36:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2A:C6:11:73:95:E9:51:D3:8E:E5:6B:13:7A:FB:8C:9A:D7:48:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/ec4c86f2-2b17-3de2-9b7f-bf880c144505.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.crl

            X509v3 Authority Key Identifier:
                keyid:26:4F:4E:7E:79:A7:DC:07:8E:0B:25:4D:0F:3A:C5:03:5F:C6:C2:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15a5c850-b5f7-4cfd-b31f-19d51bf3cc08.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.77.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:87:8e:21:5c:3d:06:20:75:11:0e:13:37:c1:ae:fd:7c:75:
         ca:9f:fb:d8:55:50:99:ff:6f:2c:a3:f4:87:6c:8a:a8:0e:79:
         b0:56:40:27:8c:1b:ea:d5:f8:f0:5f:dd:b9:00:ae:67:59:42:
         d7:f4:80:aa:3f:69:c5:2c:a2:83:85:c8:d3:79:25:02:f6:8c:
         3e:ec:7e:9d:88:cc:dd:1b:63:96:c2:02:db:e5:1a:ba:cd:77:
         ab:fc:5a:99:02:ca:72:85:15:77:15:06:a0:44:a9:62:f8:bb:
         41:fa:a1:e7:6d:39:ea:67:7a:64:df:ac:0a:a4:53:93:64:db:
         55:7f:db:cc:54:54:73:79:ae:03:3b:ef:0a:ae:67:c2:ea:61:
         a9:cc:be:6c:c4:a1:e4:f1:47:41:23:92:13:77:42:be:63:67:
         e1:9c:f4:8e:4f:f2:57:9e:5c:83:fa:60:78:19:84:b4:f3:c3:
         b0:5e:58:fe:77:fb:d4:25:24:dd:43:94:d3:f6:d5:09:fd:1c:
         fd:a9:c4:f9:ae:a5:11:9e:a9:cd:07:95:5a:8d:5d:30:89:6d:
         c7:0e:0a:89:6e:15:37:36:64:05:71:e4:75:11:b1:15:11:eb:
         16:4f:97:0f:10:f2:82:81:01:9a:c0:ca:ff:9f:04:c5:a3:2b:
         93:57:c8:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:12:10 2025 by rpki-client