Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f164619d-d01b-3427-aaab-0c440b5bb4d4.roa
File:                     f164619d-d01b-3427-aaab-0c440b5bb4d4.roa (raw, json)
Hash identifier:          MxCacpPIcCxRaESR2iek9ObGhieNp/R5cDzaDQLN4J4=
Subject key identifier:   12:CE:A6:A2:53:EE:B9:9B:16:D7:77:D1:9B:B6:C6:3E:BB:A9:94:C9
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848A996346C05569BC09DEC2780
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f164619d-d01b-3427-aaab-0c440b5bb4d4.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397630
IP address blocks:        141.164.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:34:6c:05:56:9b:c0:9d:ec:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=33f67492-ea7b-41df-a1c2-04dd98235a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:3a:9d:51:eb:0a:f6:dc:64:c8:75:ec:68:09:
                    29:65:26:3a:78:a9:00:b4:32:b7:7e:cd:e5:87:f5:
                    09:e3:88:1c:27:21:b3:88:f4:0a:1b:c1:65:5c:61:
                    95:37:77:8a:c7:fc:dd:2c:5f:ec:a9:77:f9:ec:9a:
                    e9:21:1e:ff:16:06:48:48:64:29:a4:a1:8b:b8:43:
                    57:aa:60:ed:61:40:ef:32:47:17:b4:ef:95:68:93:
                    f2:1c:a8:ac:c5:bc:8f:13:c9:7f:55:20:30:da:b7:
                    d9:ec:8f:af:e6:e1:f9:f3:e7:84:4f:b7:e8:52:79:
                    02:d7:97:e1:39:ab:74:91:3b:96:12:2c:2b:9a:0b:
                    1a:46:cb:81:ce:23:b6:a7:e5:f9:5c:c6:30:9a:74:
                    6d:31:2f:ab:a7:cd:a0:95:c4:c7:cb:52:8c:60:60:
                    8e:a8:fd:94:71:c1:1c:26:fb:23:e1:03:84:51:f6:
                    53:d8:63:5a:f8:d4:03:1c:80:6d:20:f6:76:df:aa:
                    27:1e:50:ef:17:7a:35:24:a9:7c:06:45:0a:03:4f:
                    ea:20:06:69:ca:92:66:bd:e6:e3:47:89:33:8e:23:
                    83:2e:12:ff:10:89:f0:b6:fc:c8:c2:ff:9f:e4:8d:
                    c8:23:64:52:5c:84:5d:32:bf:a1:a0:78:22:92:76:
                    82:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CE:A6:A2:53:EE:B9:9B:16:D7:77:D1:9B:B6:C6:3E:BB:A9:94:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f164619d-d01b-3427-aaab-0c440b5bb4d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.164.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ba:16:94:6c:db:e2:a5:32:dc:20:2a:72:0f:17:2f:7d:fb:
         91:5b:52:9b:8e:19:67:e9:bf:45:e9:e9:67:51:12:f4:76:dd:
         4f:60:84:b7:f2:3a:17:9b:16:6c:05:36:d0:74:5d:cc:40:13:
         1d:ed:aa:22:2f:47:ad:ee:f4:5a:01:cc:36:4b:a1:96:e8:40:
         53:67:94:2f:a2:62:0a:3d:ca:23:d2:49:b7:20:7a:a0:2f:60:
         53:0e:43:8a:85:30:8b:3d:a2:3f:94:33:44:09:6d:63:5d:bd:
         b3:46:2a:ce:67:7a:8c:c8:79:39:16:0a:42:0c:84:61:f1:5b:
         e5:7d:4a:9f:26:8c:2f:19:e7:0b:be:6f:73:9f:6f:45:e0:46:
         d8:52:5d:1a:1d:13:6a:09:01:7b:3c:6f:f2:ed:9d:24:0b:79:
         0c:e2:6f:9a:c4:dd:2a:19:22:c2:ad:0a:e5:ad:64:30:a3:9a:
         79:17:44:c3:48:70:d0:6c:d1:61:ed:91:e2:2e:ba:e7:48:e5:
         b3:13:01:af:d3:40:c1:55:3e:4c:8f:05:b6:e8:76:2d:a6:27:
         2d:d4:77:98:4f:77:4b:c6:73:77:5d:0a:82:dd:9d:dc:17:a7:
         d0:36:7d:12:b7:44:a1:c3:18:9e:f4:31:6d:8d:4b:5a:2e:96:
         02:e1:1c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:53:18 2025 by rpki-client