Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
File:                     7c37a5af-af60-36df-838f-5950ccac2dd5.roa (raw, json)
Hash identifier:          kqQMOmWuN7zwl4j7ARk2GP13rgt0hH6jtkOog1T0040=
Subject key identifier:   87:4F:27:44:03:1A:72:44:0A:9B:EE:92:C1:62:8B:8B:4D:26:28:7F
Certificate issuer:       /CN=7c827858-1cad-41b0-8c6d-96db973693e9
Certificate serial:       010D0C9F432858487E506ABC5C412900B6B76300
Authority key identifier: C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa
Signing time:             Fri 10 Jan 2025 02:00:40 +0000
ROA not before:           Fri 10 Jan 2025 02:00:40 +0000
ROA not after:            Thu 10 Apr 2025 01:00:40 +0000
asID:                     398953
IP address blocks:        163.123.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7e:50:6a:bc:5c:41:29:00:b6:b7:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7c827858-1cad-41b0-8c6d-96db973693e9
        Validity
            Not Before: Jan 10 02:00:40 2025 GMT
            Not After : Apr 10 01:00:40 2025 GMT
        Subject: CN=c07238f3-95bd-443a-b9ac-91ab72546b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6d:bc:1e:d3:a5:15:d0:cf:c3:b5:9f:33:a2:
                    f0:b4:a3:5f:10:b2:47:71:c2:c0:3e:12:1e:16:26:
                    31:b1:40:a2:15:c2:c8:63:b0:5f:25:f5:cf:f6:49:
                    c8:bc:5e:30:66:4d:2e:f9:69:05:1d:e0:69:3b:59:
                    85:5f:be:e0:77:7f:05:c3:1f:f2:b6:dc:fe:a5:6b:
                    d1:ca:60:d9:b4:3f:2f:67:27:3c:b2:45:2c:d0:6f:
                    5c:bf:1f:db:69:f5:4f:ef:3c:bf:8a:55:25:11:d9:
                    f7:69:31:0b:38:e0:51:e8:5d:ba:1c:83:66:5f:7a:
                    4b:43:1f:16:50:70:a7:b4:00:19:1b:f7:fe:9e:c8:
                    86:5f:2f:3a:36:8c:d3:c4:15:ca:09:f9:45:33:29:
                    72:60:e9:f0:bb:3d:f9:6f:8b:94:05:9f:06:10:c3:
                    bf:1a:fa:15:d6:f2:64:ec:8c:2d:cc:fa:44:77:3c:
                    ea:8d:0d:4b:95:19:08:0d:23:1f:5a:b9:b9:65:5f:
                    c2:df:5c:c7:59:30:88:05:4a:d3:c5:57:d9:97:de:
                    3f:d9:bb:f5:b3:1a:5c:56:af:f3:82:c2:bc:d4:66:
                    02:a4:0b:ad:e4:2a:ee:87:88:88:3a:1a:c1:eb:79:
                    11:ec:ed:d7:99:8b:15:c0:63:b3:7b:78:37:e2:61:
                    c6:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4F:27:44:03:1A:72:44:0A:9B:EE:92:C1:62:8B:8B:4D:26:28:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c37a5af-af60-36df-838f-5950ccac2dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9/7c827858-1cad-41b0-8c6d-96db973693e9.crl

            X509v3 Authority Key Identifier:
                keyid:C7:E8:89:64:C3:8F:FE:5F:40:DC:81:69:AD:4E:E1:28:CA:0E:D4:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/7c827858-1cad-41b0-8c6d-96db973693e9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.123.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ce:71:66:f5:44:c6:09:32:8f:f4:13:ee:76:15:7d:50:0b:
         80:50:07:f5:bb:59:5f:92:b0:1d:8e:3f:b4:df:b6:37:f9:79:
         82:1b:59:6f:db:58:f8:de:3b:af:e4:a8:05:08:ac:30:eb:b4:
         a3:4b:4f:3c:da:3a:3e:5e:ec:6b:7b:44:62:de:b7:61:a8:a8:
         f8:2d:b4:0d:1d:6e:88:5b:97:54:86:45:33:42:8c:f2:99:3e:
         3d:21:ac:84:0e:fe:27:ac:46:92:c0:37:23:4e:7a:fd:34:55:
         60:67:d5:12:29:4b:7d:d7:7f:1c:69:7a:c0:d3:79:a3:c6:0b:
         51:c0:10:21:47:83:cd:84:34:62:3a:b0:4d:47:f4:e6:08:2a:
         51:f2:1b:78:48:5e:4d:e0:ea:37:c8:8f:e2:f7:28:64:89:2f:
         cb:b7:f3:bb:86:50:53:fd:03:5a:b2:d0:8d:d5:99:83:11:a8:
         26:10:2c:a0:ba:c2:a3:0e:fb:fa:f6:1d:4e:3a:ff:1b:13:be:
         2c:7f:35:2f:51:8a:b7:a7:bd:71:aa:2d:a3:81:37:9f:5d:e5:
         8e:ea:48:6c:d8:13:42:d4:01:d5:bf:8a:6c:a6:31:bb:bd:26:
         ff:18:9d:29:44:00:5d:7f:85:84:57:e1:61:73:bf:17:f9:e1:
         af:bb:4b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:32:18 2025 by rpki-client