Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
File:                     6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa (raw, json)
Hash identifier:          xaiFxh8pc62IEQf3B9St9/QgJEisuCG9mdEPN9HbDmE=
Subject key identifier:   64:A7:78:54:6B:4A:61:9D:85:DE:F7:EB:50:C9:A4:E1:9E:81:8C:0C
Certificate issuer:       /CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
Certificate serial:       010D0C9F43285848A400C23476EB53F55065CC58
Authority key identifier: AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     14048
IP address blocks:        141.225.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c2:34:76:eb:53:f5:50:65:cc:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65efdd79-a2c2-4fd4-ad1a-5d5384138412
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=aa3f5ea2-aac6-4cca-94bb-eaef0e1250be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:37:27:18:7f:58:30:43:28:cc:4a:d0:27:76:
                    45:33:a0:1b:0a:aa:ee:76:07:1c:08:42:17:b6:50:
                    26:c7:e4:2b:18:a5:90:eb:ae:de:20:04:c1:38:5f:
                    a0:db:8e:de:f9:0e:5e:d4:fa:2c:a5:e8:8f:59:26:
                    2a:1f:75:5d:d4:97:9f:89:65:83:e1:a4:90:a8:a2:
                    6c:a7:02:26:0c:f3:96:4a:0a:13:e7:f1:29:02:bc:
                    6c:6a:38:07:72:73:9e:40:67:08:52:b7:36:f1:54:
                    4d:a0:35:b0:db:49:35:62:71:dc:22:bf:03:c6:68:
                    12:ae:8c:2c:76:06:11:fc:1d:d6:87:95:2c:a5:37:
                    48:c1:e5:1b:17:b8:3e:93:32:56:72:69:25:78:50:
                    8a:4e:8f:ef:32:fd:fa:c9:f3:5f:f0:6b:6a:b0:ba:
                    a9:03:5a:84:b2:a7:54:32:53:de:02:d6:c5:a9:2f:
                    05:88:e1:f1:3e:9f:ee:b3:9f:b4:d3:5f:b2:73:15:
                    92:ae:02:4a:74:2f:38:c7:f5:5e:e3:cb:0e:42:d8:
                    2e:6b:89:a8:93:d7:e3:4d:9e:17:4b:da:63:12:3e:
                    36:35:56:ba:0f:eb:d0:33:9f:ff:48:34:5a:44:7f:
                    14:1a:60:f7:75:bb:c2:66:7a:42:d6:4a:de:72:de:
                    38:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:A7:78:54:6B:4A:61:9D:85:DE:F7:EB:50:C9:A4:E1:9E:81:8C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/6b8c003b-22d8-319b-9d0d-4d3bf24bbc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412/65efdd79-a2c2-4fd4-ad1a-5d5384138412.crl

            X509v3 Authority Key Identifier:
                keyid:AC:12:E4:98:4B:F2:07:3C:A9:8C:3F:88:21:06:DD:26:65:FC:5C:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65efdd79-a2c2-4fd4-ad1a-5d5384138412.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.225.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:4e:ef:56:20:c6:79:79:f4:ae:1e:aa:3a:5a:f1:8c:45:f1:
         f7:49:f8:c2:c6:c3:0b:60:ff:22:b8:4d:94:6d:e1:13:75:b0:
         2e:17:e5:15:18:a0:03:fd:1a:92:78:c0:11:23:6e:2d:31:a6:
         e5:17:88:45:5f:db:2d:09:e4:0c:f4:a2:cf:09:dc:cc:42:fd:
         76:d9:a8:4d:33:3b:f2:d5:28:b7:94:21:af:aa:78:ad:82:30:
         57:fb:6c:38:51:0d:fa:c6:27:bb:20:c1:2b:12:2b:e6:74:2c:
         cb:89:99:f8:3f:75:cb:62:64:72:9a:c4:ac:9c:ee:71:13:81:
         47:85:72:df:97:6f:c9:67:dd:f6:58:d1:e8:7b:70:53:34:b9:
         f8:d8:a2:c8:c9:56:8d:e6:6c:df:f6:b8:66:a9:36:da:09:16:
         40:33:8a:7f:82:13:e9:b4:25:03:26:40:98:82:9f:fb:47:13:
         b0:55:6d:d9:97:66:ad:0b:82:65:c7:69:7f:49:9e:20:2b:6c:
         03:6e:8d:0e:c6:c3:75:ed:d2:c6:a9:5c:cc:bf:c4:b5:70:0f:
         ae:a6:90:50:24:b7:59:e2:f7:ff:6a:c9:27:5e:07:c3:b3:47:
         b4:fc:58:fa:36:75:0b:9e:4d:bb:d6:31:2c:ac:c4:48:43:b5:
         4c:ba:4d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:09:18 2025 by rpki-client