Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca07bd5a-4cc9-384c-a3b3-f7c829a576fd.roa
File:                     ca07bd5a-4cc9-384c-a3b3-f7c829a576fd.roa (raw, json)
Hash identifier:          yP9K31cm3p8DENct+wSVjeDswq4gTScPPUKw7/y+WbE=
Subject key identifier:   64:72:74:68:30:0C:83:78:2F:72:DF:F4:D0:E4:AA:9E:D1:38:95:04
Certificate issuer:       /CN=24652152-0111-4df2-a7ef-61ad3cdecb58
Certificate serial:       010D0C9F432858496CE457948BAD9B74A4726340
Authority key identifier: 59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca07bd5a-4cc9-384c-a3b3-f7c829a576fd.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     13389
IP address blocks:        216.179.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:57:94:8b:ad:9b:74:a4:72:63:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24652152-0111-4df2-a7ef-61ad3cdecb58
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=6998d186-9027-4247-82f9-37f40db421e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4d:56:78:bf:ba:29:82:f5:b4:e2:61:51:57:
                    c7:24:f1:48:6c:f0:80:b7:ee:f8:03:90:12:1d:6d:
                    26:d6:e3:69:56:fe:e9:9a:16:5b:dc:01:0e:8d:af:
                    91:89:10:ef:26:ff:b9:4d:c0:5a:7a:8e:cd:69:62:
                    55:b9:10:18:4e:2e:d6:65:34:3b:5b:5b:18:44:96:
                    ce:1c:67:62:bc:89:1f:20:f6:d4:d4:05:0f:75:9b:
                    23:57:9a:bb:56:f5:d3:2b:85:ee:02:04:0c:97:f7:
                    7b:79:a9:f3:36:8f:f5:e8:e3:2f:b3:3f:57:e3:1a:
                    5b:74:74:e0:cc:4d:d6:67:bd:a9:9c:d5:1f:fe:15:
                    86:75:c4:b9:15:d7:16:51:9f:27:18:b8:fa:b6:65:
                    ad:aa:44:26:2a:cf:7f:3f:f3:8a:1e:25:b8:5d:04:
                    ea:4d:c5:9b:e0:ea:b0:2a:16:3d:d3:e9:56:60:ca:
                    a1:9f:a3:fc:50:06:d8:82:23:7e:5a:df:40:64:df:
                    71:6c:f3:f3:ca:d0:ec:46:96:8c:fe:34:07:bb:3e:
                    fd:c2:cd:39:ef:d4:9f:39:f8:a3:5b:0d:ea:1a:20:
                    d5:be:d3:35:e2:0c:ef:77:3a:42:16:9b:2f:c0:ea:
                    09:97:d3:96:2a:63:a4:76:df:c8:4e:63:b6:62:46:
                    99:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:72:74:68:30:0C:83:78:2F:72:DF:F4:D0:E4:AA:9E:D1:38:95:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/ca07bd5a-4cc9-384c-a3b3-f7c829a576fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58/24652152-0111-4df2-a7ef-61ad3cdecb58.crl

            X509v3 Authority Key Identifier:
                keyid:59:0F:20:E3:0E:B7:11:6E:4F:E7:33:BD:03:59:36:F0:2B:C5:EC:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24652152-0111-4df2-a7ef-61ad3cdecb58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.179.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:db:b7:da:4f:26:0b:21:fa:43:7a:25:6f:c3:ff:af:81:de:
         e1:3c:0f:b1:e6:cf:a5:21:2d:56:b3:a1:7d:95:8b:25:c6:0d:
         1d:2a:c2:06:2c:ce:5a:83:c6:44:cf:6a:9c:fe:1e:bb:23:b0:
         64:36:43:a8:df:eb:88:39:0e:8b:ad:5b:3d:27:24:00:8a:0f:
         cf:d5:71:54:b2:c3:57:7f:8b:89:a1:44:d7:9b:41:06:2c:f8:
         2d:c8:cf:f5:04:a7:fd:8c:9f:ee:75:2f:58:9f:fd:7e:f9:05:
         96:81:94:e8:ab:ac:81:aa:a7:50:61:0d:d6:81:59:c6:37:90:
         77:46:87:80:71:c1:a0:9b:e9:8b:ca:02:fc:12:8d:ad:b9:87:
         72:b2:a2:6d:4f:ef:2d:f5:ca:88:61:bf:c0:4e:35:05:2f:fd:
         6d:03:97:44:75:72:e8:37:ee:a1:bc:fb:cc:bf:05:78:e1:51:
         f3:d6:c9:ea:b4:5b:31:8e:93:46:1a:4a:2b:73:85:ea:8e:c0:
         b9:63:88:d0:44:21:3e:ab:63:45:96:50:38:c7:c6:cc:9c:5b:
         bf:96:b7:68:47:ad:fa:b2:e9:08:00:ee:13:7c:55:a0:1a:83:
         b9:a8:a8:c3:5a:82:dd:7f:49:64:e5:5a:40:7a:92:f9:37:e2:
         8f:8f:46:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:56:08 2025 by rpki-client