Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
File:                     01890417-85b0-3fa8-b911-bc45f0339762.roa (raw, json)
Hash identifier:          lUYOaC47qVLF2i6ndx26udmSa6BcJ1kDj6anwVvM3ws=
Subject key identifier:   4D:C1:CF:E1:AA:79:05:C8:E0:C3:96:6B:4B:EB:4F:D1:59:08:13:34
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCBCEA427757165331780
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        70.40.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cb:ce:a4:27:75:71:65:33:17:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=b1ad18d6-27b8-4d88-8ebc-72e7e1da122b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ef:ae:00:39:52:54:cd:2a:8b:1a:8e:c4:4d:
                    09:96:13:a0:9d:5f:cb:ad:6c:bd:7b:b8:12:26:8b:
                    be:e0:88:77:08:ce:fa:3d:13:31:77:e0:c8:b3:d8:
                    44:ad:ca:0a:73:82:f0:53:c4:f2:c9:dd:5a:63:aa:
                    f0:1a:d5:79:d5:5d:1c:ce:07:e2:03:4a:d8:9b:24:
                    af:13:c0:d5:af:da:fc:59:21:d1:58:ed:37:35:61:
                    32:16:0c:48:b2:61:27:68:77:82:6a:37:be:75:5b:
                    00:b1:78:c0:62:c5:3d:0c:7e:aa:04:e0:86:57:91:
                    cc:c5:a2:5a:20:8c:c0:17:66:b5:92:59:4e:fb:5c:
                    0c:5d:20:c8:7a:93:83:de:93:be:05:96:aa:b5:91:
                    bf:b9:6c:06:03:9b:18:60:c6:8a:54:9b:91:e3:69:
                    f6:cc:41:f0:57:c3:cc:37:2a:48:9f:54:2a:30:fb:
                    db:0f:62:d6:eb:32:fc:c5:76:49:f4:94:8f:4d:a4:
                    ff:da:28:72:81:de:ff:75:81:c8:3d:26:67:f8:c6:
                    e0:85:26:a0:d7:b6:1f:62:b2:bf:89:6c:2c:97:a1:
                    c3:4a:6d:8d:a1:5d:9c:d2:6b:2a:88:ea:c2:f6:92:
                    48:9e:66:92:0a:6c:0b:5f:bd:95:ce:23:50:d8:6a:
                    c8:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C1:CF:E1:AA:79:05:C8:E0:C3:96:6B:4B:EB:4F:D1:59:08:13:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/01890417-85b0-3fa8-b911-bc45f0339762.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.40.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:34:80:db:ce:bb:21:56:9c:a6:c6:5e:57:67:5e:c3:97:
         59:27:1d:29:83:62:99:1d:39:4f:62:ad:29:63:82:06:7b:16:
         d1:cc:3c:b7:a0:be:a1:29:d8:0c:80:e0:47:50:04:bc:b8:fa:
         19:94:e3:5d:e5:e8:19:3c:f4:da:3d:17:12:13:7e:11:97:26:
         79:64:44:36:ce:da:53:0c:3a:9b:ce:7b:64:97:93:79:17:d5:
         77:7d:8e:6f:33:dc:6d:40:3c:4d:fc:6a:eb:8c:50:f6:e9:aa:
         d1:c6:5d:b2:09:8d:a4:be:7f:e7:fc:87:69:97:62:be:63:cb:
         9f:80:e4:93:81:00:f1:c4:e5:f5:c3:30:26:24:41:41:a8:6c:
         c0:e8:16:5c:d3:33:3a:cb:8c:cf:c7:26:cf:2c:ba:37:d1:23:
         69:3e:22:55:6e:f4:90:53:36:cb:25:6d:f4:9f:66:cb:09:4c:
         5a:2e:8e:6d:77:60:99:6f:42:71:c8:4a:86:ed:b2:f2:76:d3:
         65:a5:9a:5e:89:03:48:34:92:b4:e2:1f:67:ed:8e:9d:6a:57:
         78:ee:cf:28:c8:4e:24:c9:73:36:ba:72:6a:14:f3:14:40:e7:
         1d:87:c6:bd:73:a2:e1:e6:25:b4:0b:dc:2f:72:67:24:05:bc:
         eb:fa:2f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:44:08 2025 by rpki-client