Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
File:                     be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa (raw, json)
Hash identifier:          fN/fhC4yTIfc7D+3yu9Higse5NsiABjt+tbmlUGx9uE=
Subject key identifier:   8D:91:AE:F0:4B:E6:97:33:EA:3E:A2:A6:71:B0:BA:E7:12:65:0A:21
Certificate issuer:       /CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
Certificate serial:       010D0C9F43285848FBF126F1D0A062E97C753500
Authority key identifier: 52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa
Signing time:             Mon 24 Feb 2025 02:00:38 +0000
ROA not before:           Mon 24 Feb 2025 02:00:38 +0000
ROA not after:            Sun 25 May 2025 01:00:38 +0000
asID:                     0
IP address blocks:        138.112.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fb:f1:26:f1:d0:a0:62:e9:7c:75:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=314186df-87ba-4dd5-adbf-1c6c2bbe04a8
        Validity
            Not Before: Feb 24 02:00:38 2025 GMT
            Not After : May 25 01:00:38 2025 GMT
        Subject: CN=46d2db6f-c712-4238-8db1-bf00605347cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:9f:b1:24:a4:2f:5e:2d:2f:44:86:66:74:c9:
                    a9:18:c3:1c:30:fb:a1:63:9d:fc:aa:b2:c2:f7:8b:
                    cd:c9:5e:83:4b:b7:a1:b6:ff:98:79:5e:16:6f:2d:
                    3e:55:8e:3f:44:10:f2:59:c9:3b:45:8f:5a:49:0a:
                    45:6c:5c:b2:bc:42:cf:19:e0:7e:ef:d0:91:34:a3:
                    e8:e3:0c:35:73:4a:e6:e8:5c:03:99:0b:ad:be:8c:
                    e1:41:4b:bf:1a:d1:fc:87:9b:06:12:e5:87:1a:72:
                    d6:10:5c:5b:36:d0:42:7b:4f:ee:1e:1e:1f:97:8d:
                    3a:dc:4f:5f:b3:e5:c5:95:3b:41:d3:41:81:60:ee:
                    e6:04:9f:e2:1a:02:4e:2e:ed:e9:1f:a5:27:d5:c2:
                    3b:9f:fa:35:d6:39:9a:38:43:71:20:61:63:7f:a6:
                    6b:95:fa:ac:88:a0:8d:d9:54:a2:50:d9:df:a9:39:
                    8c:ee:cb:21:31:50:ba:66:33:fe:2f:c7:9d:2c:91:
                    30:d0:ba:84:d5:75:16:ba:cf:69:ad:5a:32:33:ab:
                    22:eb:1d:d9:6b:a4:97:42:86:5c:6f:c1:74:90:c9:
                    ad:84:c3:35:c7:15:8a:8d:1d:0b:ab:97:65:f9:e0:
                    ed:31:7a:68:5b:29:2b:0c:65:43:d3:f8:cb:e5:75:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:AE:F0:4B:E6:97:33:EA:3E:A2:A6:71:B0:BA:E7:12:65:0A:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/be97c91f-e7a5-3d64-a9ee-7537b3eb686e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.crl

            X509v3 Authority Key Identifier:
                keyid:52:15:C8:9B:51:37:0E:94:F1:AB:C2:AF:7D:C8:F6:BB:E1:F2:E5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/314186df-87ba-4dd5-adbf-1c6c2bbe04a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.112.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:29:de:63:02:cc:f1:df:e5:20:27:b1:d1:fa:8b:29:27:2d:
         3c:90:8e:6d:89:76:2a:12:04:8e:8e:2c:07:0a:0c:88:3d:f8:
         90:ed:4e:64:cc:97:16:64:ec:3a:68:3c:2c:4a:83:f2:d3:7d:
         a8:73:cb:e2:c0:58:cc:7d:57:0d:37:5e:cc:3d:f7:23:94:14:
         f9:38:15:d6:a8:44:a6:e5:02:4a:5b:83:3d:e4:a5:82:91:a5:
         1c:ff:72:48:6b:06:4f:61:69:87:ce:34:b1:ec:97:17:ca:7d:
         bc:10:1c:bf:8d:76:6e:be:50:c5:d1:ce:a0:ca:99:a0:df:42:
         a8:a1:91:c8:94:fe:e3:b9:13:57:3b:a4:eb:19:ca:fe:e7:7a:
         dc:07:d6:52:f8:8b:01:7c:2c:6f:e4:be:6d:8d:e4:58:f0:e3:
         7f:56:1d:53:04:ee:1e:8f:94:8c:c6:5d:46:2e:d6:be:b7:2a:
         3b:7f:e3:09:61:0f:a6:fa:55:84:86:5f:27:48:ea:f2:8e:a9:
         06:5b:13:ea:b2:aa:f4:15:1b:da:89:b1:c6:8f:bc:3c:d5:a6:
         2e:f6:ae:dc:1d:01:3c:d8:34:a5:98:2f:6a:95:f6:38:17:b4:
         b5:9a:55:2a:71:d1:8b:a1:2b:a5:0a:b5:23:66:d6:88:52:aa:
         8e:de:e9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 02:50:40 2025 by rpki-client