Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
File:                     d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa (raw, json)
Hash identifier:          AXVVtNGSILYu4fosy0Yen40zpefwDJ/hKTqG44e5OS8=
Subject key identifier:   59:9C:2D:2C:A7:6B:8A:CD:09:9E:AE:73:DA:AB:60:6C:5C:AC:D3:A4
Certificate issuer:       /CN=36c39fb8-4da4-452b-a86f-8d28342d9446
Certificate serial:       010D0C9F43285849350EAC4855AD88DF999F00D0
Authority key identifier: 7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     396045
IP address blocks:        142.202.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ac:48:55:ad:88:df:99:9f:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36c39fb8-4da4-452b-a86f-8d28342d9446
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=4567a987-0d02-4a3a-8b63-ace6b5064c07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:d8:1e:44:8a:7d:e3:b7:79:ef:20:48:a5:f1:
                    52:e9:2a:bb:79:e5:78:1c:55:53:dc:a0:09:46:ae:
                    0d:f5:e1:cd:b5:87:f4:58:9f:0b:be:28:bc:4c:02:
                    50:2d:cd:7f:5b:61:56:15:cc:f5:90:bc:bb:28:fb:
                    f1:67:d2:2e:6e:94:ce:01:12:8e:84:f2:04:84:3c:
                    e8:e5:f8:22:54:0d:b5:6a:44:fe:22:f0:43:df:fa:
                    d6:9e:fa:70:0d:ea:df:f6:b2:6b:4d:86:e1:62:c4:
                    c4:8a:bd:79:79:ea:f0:2e:67:03:97:7b:1a:98:a2:
                    6f:58:79:6e:89:ac:1e:0e:e6:2c:bf:a4:95:da:e2:
                    c2:f7:99:9c:75:f4:fb:df:11:56:56:3a:e2:5f:32:
                    bd:8d:14:7d:4b:06:58:fc:58:a3:20:81:b4:c0:4b:
                    0b:c4:b3:6b:78:e1:22:0a:ce:d5:c0:3b:fd:65:43:
                    27:ef:86:62:3c:63:09:ba:1f:f4:56:d0:62:2d:ee:
                    a7:92:e3:51:a7:79:28:17:c2:04:a6:2e:47:ae:07:
                    cb:df:79:ec:d0:a4:f7:ed:99:5b:13:25:62:cf:45:
                    4b:03:9c:89:f4:24:62:31:be:e9:85:9b:c3:0a:de:
                    32:d9:38:fe:b1:e5:a4:b1:4b:7d:ef:3c:c3:fb:31:
                    dc:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:9C:2D:2C:A7:6B:8A:CD:09:9E:AE:73:DA:AB:60:6C:5C:AC:D3:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/d9c4d901-5eb9-325a-8552-6abf07c27c0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446/36c39fb8-4da4-452b-a86f-8d28342d9446.crl

            X509v3 Authority Key Identifier:
                keyid:7A:55:39:FA:30:D8:56:4E:4F:C7:AC:72:2C:B0:02:A7:E4:5B:AE:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/36c39fb8-4da4-452b-a86f-8d28342d9446.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:79:37:72:95:fe:aa:99:5c:e6:e3:1a:21:27:9b:b4:00:2d:
         cd:11:e3:b4:13:3b:db:3d:fc:7d:8a:25:34:9d:38:66:25:61:
         e6:cc:f9:56:ef:0c:32:71:a6:f8:89:d5:6b:a8:ff:79:56:20:
         24:b7:af:33:dd:f9:b1:89:78:a0:eb:f4:68:d8:f6:9a:1c:80:
         9a:e2:ad:e9:e1:32:52:48:ac:ac:70:33:13:5a:81:cf:a2:46:
         c3:3d:49:3e:32:a1:bc:03:19:d8:41:6a:6e:0e:c5:82:0a:2e:
         65:3e:f6:d4:92:90:1d:d6:fc:d0:7a:07:3e:a2:da:85:f5:6f:
         1f:f3:09:bb:8b:01:62:8f:88:d8:0a:53:99:89:fc:d5:a4:55:
         e7:58:68:87:c9:7e:6e:61:d8:bf:32:a9:b9:e7:5c:af:4b:32:
         a5:09:15:da:f0:87:02:ae:f2:f8:ac:f1:5e:33:a1:95:7e:01:
         fe:45:dc:47:7c:76:a0:7b:45:a1:74:d4:ae:a0:0c:9f:16:1a:
         af:2b:e7:37:96:5b:85:4c:df:ef:75:c5:e9:93:b7:93:42:2f:
         e2:41:b2:d0:a4:35:5c:96:1b:44:1e:96:b7:a7:e5:12:b8:11:
         18:58:f9:05:49:81:9c:2e:99:8f:62:b8:77:d9:a0:86:03:82:
         7b:91:c4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:37:26 2025 by rpki-client