Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87c35751-696a-3033-9839-d8ed24836080.roa
File:                     87c35751-696a-3033-9839-d8ed24836080.roa (raw, json)
Hash identifier:          ZyLUSYPKMmqkZ4iq1cLZQ5jvSnTxtu7i+khhOJm0bwU=
Subject key identifier:   4E:28:79:88:34:A3:3B:22:A8:8B:45:0F:7A:BF:E9:86:0C:53:A0:86
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F43285849303FAF4120B90E028D05F9E0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87c35751-696a-3033-9839-d8ed24836080.roa
Signing time:             Fri 14 Mar 2025 19:40:57 +0000
ROA not before:           Fri 14 Mar 2025 19:40:57 +0000
ROA not after:            Thu 12 Jun 2025 19:40:57 +0000
asID:                     6079
IP address blocks:        140.228.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:3f:af:41:20:b9:0e:02:8d:05:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 14 19:40:57 2025 GMT
            Not After : Jun 12 19:40:57 2025 GMT
        Subject: CN=ec39d308-2ca5-4456-910e-0cb0ea326563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:22:a7:2e:08:7a:3b:37:0d:34:2b:c3:16:fe:
                    44:8e:f0:44:f9:6f:dd:6d:9a:d7:93:89:a0:89:00:
                    02:1a:41:0b:08:67:30:3f:ba:19:ce:52:44:6a:13:
                    c9:f8:25:91:ec:e2:77:51:c8:06:6c:8a:14:7c:7c:
                    2e:90:ce:9f:c5:88:ad:6e:c4:44:ac:03:88:30:97:
                    8e:36:67:aa:d8:13:04:86:42:7b:0b:f0:4c:01:e6:
                    ce:0f:05:5a:0e:4b:63:cb:5c:3d:35:36:a8:80:e6:
                    1f:94:23:5b:92:9b:57:c8:98:62:c6:19:4b:67:a8:
                    71:cb:28:b6:c5:63:8a:84:52:7d:5e:c4:a4:ab:26:
                    24:42:7b:51:12:31:04:c2:00:3a:d1:d9:fe:06:08:
                    1d:69:ba:96:f8:c9:5f:96:19:fd:eb:2c:3a:62:ec:
                    4c:ed:2b:7b:5c:a4:b1:ec:bb:cc:7f:f4:e7:af:35:
                    4d:17:bb:0f:c7:9c:44:b5:d6:fc:8c:d8:be:b5:3e:
                    3d:02:f4:b8:60:9d:9c:cd:39:1e:24:c6:ab:c9:0d:
                    17:76:4d:da:a9:83:1d:9b:69:3d:60:09:0a:7f:b8:
                    97:b0:0f:c2:f9:64:79:cf:21:1b:f7:df:1d:bf:d3:
                    e0:12:89:86:fd:ba:ce:54:8b:2b:ce:cc:20:ee:eb:
                    ad:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:28:79:88:34:A3:3B:22:A8:8B:45:0F:7A:BF:E9:86:0C:53:A0:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/87c35751-696a-3033-9839-d8ed24836080.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.228.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:c2:d1:c5:98:04:fd:58:53:ba:b7:f4:05:5e:b6:a1:fa:ab:
         59:7d:da:a3:1b:3b:ca:e1:05:71:1a:03:0f:b6:c9:cd:77:ba:
         11:cd:6b:ed:24:d8:2c:1f:8f:fe:cd:0e:50:2e:45:0d:4f:ae:
         94:e3:b8:2a:09:fb:09:93:c0:2d:21:cd:6f:9f:c5:de:f6:64:
         fb:38:91:9f:44:a2:7e:87:a0:85:38:d0:87:4b:1e:fe:28:62:
         61:92:ec:50:7e:92:6b:ec:71:b5:5f:ed:07:1b:da:0e:15:42:
         6a:a0:c9:80:20:2e:92:4d:f9:62:ed:ad:61:dc:04:6c:60:e2:
         fb:66:f1:8c:a3:ad:b7:8f:fa:d0:7e:be:97:27:04:5c:af:2c:
         22:a7:d6:73:60:69:b9:6f:f3:af:23:59:29:a8:d1:a7:cf:75:
         46:5b:37:ce:ff:cd:20:3e:1d:d1:30:02:23:41:49:8e:25:f0:
         09:85:7a:d0:a8:fa:c9:f7:4a:7d:83:e7:aa:10:5f:12:a0:d4:
         98:b0:ab:d8:b2:df:3d:77:31:2d:e0:ef:ac:be:94:b9:0c:79:
         9e:a3:55:a6:ce:e4:a6:9c:35:5a:3c:55:91:8f:15:e5:92:3a:
         a0:01:b1:e1:51:2c:13:89:d5:74:5b:03:6f:63:ad:4b:53:ac:
         b6:16:58:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:12:02 2025 by rpki-client