Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa
File:                     de1bc31c-8942-32b8-94cf-739ae5317afb.roa (raw, json)
Hash identifier:          ZtAmTnyg/DgYUPSxEZZon8PjYk/JZTJrGz939zS1wWY=
Subject key identifier:   FB:C7:47:14:A2:72:EB:02:72:15:B3:83:EC:7B:AC:B7:BC:2A:4D:D6
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F432858491ED6D638C07F5B7477C6FC20
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        199.187.171.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d6:38:c0:7f:5b:74:77:c6:fc:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=695a2713-d822-4e58-bba0-1c06a55671ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:24:cf:cb:f7:2d:a2:ec:d9:21:4d:59:84:
                    c5:3b:31:89:6d:79:e9:4b:e1:26:21:e3:2f:43:a9:
                    a0:bc:64:b6:67:55:3b:0e:03:cf:1c:61:3a:43:a2:
                    d7:30:76:48:ec:5c:fd:6d:25:68:02:37:5d:37:9d:
                    25:56:41:72:81:5c:4d:2f:34:86:59:38:64:f8:be:
                    29:7e:72:d8:69:70:4c:49:3e:03:69:56:7b:20:b7:
                    65:57:c3:14:de:37:46:d0:10:7c:d4:9c:29:3b:f3:
                    01:e4:f9:9e:d6:86:f2:4b:57:02:63:dd:40:64:2a:
                    32:61:af:b3:6d:d2:6d:82:45:f8:8f:3a:0d:95:19:
                    6e:31:04:d2:45:a4:58:14:24:fe:36:d8:40:44:b2:
                    0f:2c:a6:7f:58:35:77:93:05:1e:8e:db:cb:05:4d:
                    99:a7:5b:47:86:68:26:55:78:08:a2:2b:05:6f:41:
                    60:5e:89:4e:ca:04:52:60:96:2c:43:ec:cd:f5:e8:
                    b7:ee:2b:2d:28:57:17:41:4f:8a:07:20:c8:b8:69:
                    be:86:fc:73:cd:96:bb:2f:88:6f:d8:e3:77:83:bc:
                    5a:ea:71:1f:9c:3c:cb:ec:e3:cb:01:e8:d1:47:cb:
                    56:bb:c9:40:c5:10:2c:e2:be:c5:8d:07:f0:ea:9d:
                    81:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C7:47:14:A2:72:EB:02:72:15:B3:83:EC:7B:AC:B7:BC:2A:4D:D6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/de1bc31c-8942-32b8-94cf-739ae5317afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.171.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:1d:ee:ee:a1:ab:17:99:7d:8d:b7:61:95:c3:93:f5:80:77:
         f4:cb:7c:7e:6a:9d:0c:80:20:15:a8:80:40:07:81:a9:08:84:
         b2:bc:e1:e7:f6:3d:4c:a2:33:a3:a8:34:22:ce:fa:76:37:cb:
         12:29:b5:f3:04:97:75:95:75:ed:28:a0:a3:58:3c:5d:fc:99:
         16:8c:0f:b4:18:b3:ab:f0:8b:72:ba:a7:8b:57:ef:02:37:22:
         f9:7e:05:e9:6a:b1:dd:1e:1f:19:80:f3:bf:93:9e:c0:ed:6e:
         6e:4b:56:bd:c6:b1:44:29:a5:76:34:aa:76:2c:05:e0:0e:11:
         5b:79:ff:25:4e:fb:3e:c1:41:33:c6:0c:5b:ab:11:b5:bf:da:
         4d:c3:7b:99:d9:a4:f1:6c:c9:3a:0b:d8:07:3b:63:b9:2d:40:
         5b:57:79:f6:65:b0:e7:79:a7:75:2f:d3:93:d4:e1:11:4e:cf:
         3a:35:de:42:6b:dd:f2:75:58:12:64:ba:95:1c:96:f8:d4:1f:
         b4:2b:f9:0c:4f:53:90:a4:c5:01:e8:e0:4c:7f:c8:7a:07:e7:
         88:52:2d:cd:4d:67:8f:36:7b:a9:54:c3:ef:58:a4:01:16:ed:
         ce:26:73:1d:ec:69:90:c7:9d:09:4e:2b:df:f3:c0:63:54:22:
         da:ee:09:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:32:02 2025 by rpki-client