Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d56a5825-fa02-3b9c-90b5-518f419566f2.roa
File:                     d56a5825-fa02-3b9c-90b5-518f419566f2.roa (raw, json)
Hash identifier:          Z16m/5gK0T9YF8YrCTkdGYWfI5HPr2Fyx3vv4EuDNys=
Subject key identifier:   27:82:C6:0F:65:6D:E3:80:55:FE:0B:6C:CF:E9:0E:0A:8F:BF:38:3C
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858483B5009EBECC873F1EA845080
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d56a5825-fa02-3b9c-90b5-518f419566f2.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     40317
IP address blocks:        137.118.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:09:eb:ec:c8:73:f1:ea:84:50:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=e7ca5ed4-c963-4445-bd82-a03a412138a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:4e:a2:87:f0:86:c1:d3:ab:6e:2b:97:b2:fe:
                    ce:9c:88:44:c2:55:69:52:74:55:6f:a6:b3:27:a6:
                    89:f0:38:16:18:2b:fc:56:db:37:31:17:a2:19:f4:
                    02:9f:85:12:cf:ea:69:07:fa:09:30:17:a2:b5:54:
                    e8:6c:bc:da:c5:a7:c4:3f:c0:97:56:d2:d1:d8:3f:
                    ff:a1:6f:d0:50:59:d7:96:bf:de:8b:6a:dd:fb:3a:
                    dd:10:59:83:0f:40:f3:3a:b6:1c:01:46:d7:2e:e5:
                    e9:51:f2:7e:33:6a:fd:3a:24:f2:cd:ef:72:15:18:
                    1a:1d:55:7d:ee:03:3e:5f:03:2c:33:fa:88:ca:ae:
                    03:b3:5f:b3:d2:52:29:d5:49:b3:7f:5e:13:f5:22:
                    f6:ef:8d:93:44:b4:e5:8e:f1:5a:4b:f5:f6:87:3a:
                    1a:c7:dd:b4:76:b6:00:32:eb:65:27:27:63:80:5d:
                    bf:bb:8d:7a:1f:bc:a8:e4:42:9e:3b:5d:98:4d:21:
                    c5:32:08:2c:f5:ce:f6:1e:31:90:63:97:dd:1f:c2:
                    81:07:fc:43:fe:e7:f6:19:a3:ab:52:c4:69:84:a9:
                    ad:74:55:3c:07:7d:1c:3b:c9:29:96:1c:2c:7b:3c:
                    f2:ee:be:4e:56:e8:39:c3:ee:49:23:44:b7:ea:46:
                    5c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:C6:0F:65:6D:E3:80:55:FE:0B:6C:CF:E9:0E:0A:8F:BF:38:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d56a5825-fa02-3b9c-90b5-518f419566f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.118.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:4b:f2:7f:67:07:64:e1:6d:4c:6e:7d:3c:1a:7f:43:49:8d:
         05:7f:8e:bf:fd:92:09:c1:d8:bd:79:68:3e:9c:5d:58:a3:d8:
         b9:e8:7a:25:34:83:3c:cb:1f:ec:4e:07:72:94:4d:b2:b6:aa:
         22:1b:be:dc:99:9c:a5:58:83:c5:a2:b0:a5:a2:f3:dc:57:fc:
         30:0e:14:33:8e:27:cf:25:ec:b1:12:2f:56:14:e0:1d:6d:00:
         e3:c5:21:ba:75:42:05:88:c7:66:ae:68:f8:a6:c1:dd:35:a8:
         9a:cc:30:62:63:58:36:6a:53:22:8e:be:77:aa:41:09:ab:d2:
         55:b4:39:d0:2b:c2:3e:df:a8:3e:d3:bc:85:20:07:aa:9a:ef:
         0b:48:21:5f:94:9d:fb:de:90:95:85:6c:56:93:c7:02:b1:b5:
         63:79:a7:8b:87:b3:39:50:1b:ca:24:c7:fc:9e:3f:09:09:62:
         07:b4:c5:c6:31:23:93:ee:3f:f9:63:1d:b9:e5:3b:d5:a8:cb:
         19:a2:6c:3c:b8:af:0f:fc:d6:67:86:d7:4b:f7:3f:49:2f:d9:
         6d:e5:1c:2a:66:4e:53:d0:75:b3:52:fa:95:85:ec:42:2e:26:
         08:86:cb:3f:7e:ae:e0:2f:8d:c1:67:51:d7:a0:90:b1:97:aa:
         73:78:aa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:28 2025 by rpki-client