Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/86e7602b-1ac8-3bfa-9c00-051eb400b3b0.roa
File:                     86e7602b-1ac8-3bfa-9c00-051eb400b3b0.roa (raw, json)
Hash identifier:          CisKqDhT+yeY/EU84VYbrqFrIjlghDNGoNsIdnD3YDI=
Subject key identifier:   19:59:F1:55:B1:D6:36:E5:09:77:07:19:41:AF:12:9B:20:3F:A7:D3
Certificate issuer:       /CN=05279918-f5b1-43f7-9748-95aa0c6469f3
Certificate serial:       010D0C9F4328584940397DE3901CDD11786BB080
Authority key identifier: 72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/86e7602b-1ac8-3bfa-9c00-051eb400b3b0.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     15128
IP address blocks:        99.217.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:7d:e3:90:1c:dd:11:78:6b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05279918-f5b1-43f7-9748-95aa0c6469f3
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=242c51ca-f0a2-4ceb-a27a-5466d60913ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:e2:35:eb:89:9c:f1:83:b4:4c:64:6a:68:06:
                    39:12:f2:f1:0d:b1:92:13:01:71:e4:4f:66:37:5c:
                    e9:ec:a8:d1:8e:e1:e6:48:88:e8:9f:c9:66:d8:78:
                    5a:dc:1a:d0:d6:38:63:d6:21:5b:67:5f:fc:84:31:
                    e4:e3:8d:15:80:73:03:3e:e3:52:33:c0:f0:59:e7:
                    b6:df:67:92:a9:7c:e0:28:39:a5:7c:30:82:ea:8b:
                    9b:d5:22:9e:87:db:64:8d:48:b7:6c:fe:ed:3a:d5:
                    79:bc:8c:b1:2e:0d:da:83:22:b9:c1:c1:59:7b:5a:
                    44:b5:cd:a4:66:ae:54:a9:34:f1:56:f2:96:54:d6:
                    fe:9d:2c:c7:28:b5:9c:3b:f3:0c:1f:36:d8:89:98:
                    42:3c:65:cd:99:93:6c:fe:ac:f6:bf:0c:a9:08:b6:
                    89:f6:08:ba:89:5a:13:fb:5b:ed:56:c2:90:7f:4f:
                    16:0d:1b:7b:25:0d:c4:9e:d0:6e:83:0c:04:39:54:
                    34:7b:ab:f2:10:fc:2b:18:45:06:7f:d2:67:0c:a1:
                    3d:91:0e:d5:89:93:59:f4:6f:cc:03:a0:86:dc:23:
                    3f:99:9c:1a:e5:29:59:c6:e3:0e:a2:04:6e:a9:79:
                    8a:b4:0e:c8:60:89:8f:75:79:81:ec:d5:19:1d:a0:
                    84:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:59:F1:55:B1:D6:36:E5:09:77:07:19:41:AF:12:9B:20:3F:A7:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/86e7602b-1ac8-3bfa-9c00-051eb400b3b0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3/05279918-f5b1-43f7-9748-95aa0c6469f3.crl

            X509v3 Authority Key Identifier:
                keyid:72:01:F5:88:07:5E:64:C9:E9:00:F6:1F:3F:6B:AD:F0:DC:C2:CF:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/05279918-f5b1-43f7-9748-95aa0c6469f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.217.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:c4:87:3b:0e:00:58:e8:e0:53:94:e9:ba:f6:dd:40:da:bf:
         0a:1d:49:ec:b1:5a:e8:fa:c2:0e:14:c6:25:26:f1:6d:1b:b9:
         a3:ca:07:1f:33:d9:46:93:ad:63:37:19:05:f6:6b:53:a7:97:
         ec:4a:79:d5:40:29:b3:ae:d1:8a:e7:7d:8f:c4:b3:12:c1:a3:
         9b:98:4c:47:67:07:49:90:17:30:ea:ca:26:84:47:38:92:86:
         b2:53:52:e5:aa:51:f8:e5:81:3c:75:d3:4a:dd:56:db:48:ba:
         2d:d7:b6:34:5a:52:9b:b8:4e:31:fd:bd:87:66:ca:cb:7b:0c:
         ac:d4:fa:70:38:51:07:47:6a:ae:ef:3f:4e:8a:b9:08:fa:6d:
         f8:d0:63:7a:92:e4:4f:b0:19:8e:20:a7:13:b3:c3:1d:f1:46:
         5f:6b:00:6f:1b:05:52:93:25:8a:84:c9:2e:68:c3:da:f8:83:
         bb:e3:64:91:42:82:e9:86:70:c5:7b:b1:49:86:8b:86:5f:04:
         cd:c9:87:31:7d:a3:98:c1:6d:94:2b:82:ae:b5:13:50:2d:b1:
         8f:b3:fc:da:8c:dc:c1:54:6a:02:c6:94:1f:65:3b:f9:13:26:
         ba:6b:70:15:da:af:3c:1d:39:3e:c2:e2:08:a3:58:27:7a:30:
         e4:24:85:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:56:56 2025 by rpki-client