Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa
File:                     f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa (raw, json)
Hash identifier:          uWBmdlShU81ykKLZ3tWxIiUqq/5hSRcO2/J/LagB614=
Subject key identifier:   26:AA:9E:30:D9:61:2B:C1:92:95:16:8A:B5:F1:58:FA:80:51:EE:0B
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CC7B98407568619577A40980
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     397630
IP address blocks:        199.101.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:98:40:75:68:61:95:77:a4:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=95354cf4-d466-44f6-a373-b6e540ebd2ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d3:19:74:bd:5e:16:ad:9b:72:51:6c:1a:14:
                    c5:df:a7:ab:38:36:10:6f:92:0a:4e:af:2e:9d:63:
                    0e:85:10:a7:43:7f:c9:2f:ef:c4:a9:8e:00:d3:5a:
                    ce:24:79:b2:f1:f6:e0:db:f1:5c:83:95:b0:d2:f1:
                    b2:86:33:41:01:cd:14:12:ab:31:7a:27:6a:0b:ff:
                    0f:5d:64:3b:d2:d6:10:ae:d9:b4:80:f5:81:60:c8:
                    1f:8f:6b:b5:d3:dc:89:58:d1:57:6e:6e:ee:2e:e0:
                    a8:50:49:83:74:36:45:68:f5:ed:d5:c0:a4:e7:68:
                    0e:ab:e4:e2:fb:ff:4a:2b:9e:19:0c:03:63:0d:eb:
                    1c:0b:bc:8e:2b:4e:8b:ee:bf:6a:3f:2c:01:3b:04:
                    74:22:95:fe:40:52:f5:e7:d6:94:a4:b4:e3:f7:79:
                    c5:f0:26:ae:d7:4b:f6:b6:58:ee:b8:02:78:17:19:
                    9d:87:91:21:7c:69:5e:f1:29:96:b1:be:61:34:5c:
                    21:08:4f:63:f8:21:87:df:95:e5:07:3d:9c:c7:ee:
                    0b:6e:0c:b7:ac:cc:b4:f1:9b:58:26:22:bf:c1:eb:
                    c4:7c:f4:89:ce:54:62:c9:a4:e9:19:6d:7a:ed:b9:
                    42:c7:c5:82:62:0e:36:a8:b1:91:56:90:80:fd:f8:
                    03:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:AA:9E:30:D9:61:2B:C1:92:95:16:8A:B5:F1:58:FA:80:51:EE:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/f94bfc7c-f25a-3f5b-821d-0bae8aa199dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:5c:e0:4e:98:eb:d1:58:3c:d6:1b:91:c8:94:f6:16:81:75:
         6d:91:4e:c6:77:c3:ed:ed:84:a9:3d:03:d8:aa:65:85:65:db:
         08:be:80:a6:a8:84:08:de:41:61:b7:3a:36:1c:15:61:04:3c:
         cb:15:5c:62:76:8b:98:05:b7:f6:67:eb:93:e8:34:a2:35:bb:
         08:a8:dc:00:15:02:8b:bf:2b:79:4b:46:91:e5:ee:ed:ec:0a:
         28:96:40:90:ad:34:3b:34:a3:5f:1e:cb:7c:fa:1f:5f:54:a2:
         4d:58:03:4a:15:fe:e9:e7:3b:d7:9c:a8:96:9c:94:91:81:ee:
         fe:0f:8a:77:96:79:3c:e4:6c:a5:4b:f3:02:96:70:2c:98:0e:
         ff:5d:81:39:ce:f4:b1:2b:7d:26:aa:b0:8f:c9:06:95:03:1b:
         0e:f4:32:10:70:2c:63:a3:f1:fe:f7:f9:b8:d3:0b:43:d4:6a:
         21:d8:23:4a:e6:db:ac:d7:1a:d6:12:50:b1:87:02:db:96:e0:
         df:eb:6e:c3:9b:fa:5c:9e:a4:66:5f:cb:e7:72:e8:1f:10:62:
         74:72:4c:ff:31:3b:79:96:c4:99:f2:d7:76:57:77:ac:d5:51:
         0c:87:16:53:c5:92:86:ac:3b:bb:fa:1d:0c:64:df:3b:ee:c3:
         74:e6:5b:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:54:44 2025 by rpki-client