Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa
File:                     8c261214-34d3-3feb-b587-96300f111017.roa (raw, json)
Hash identifier:          0tagtHjxSCrtL4kp5KU894ln0xsznYElf+lSKFR4saQ=
Subject key identifier:   60:E9:27:C9:38:94:B8:09:44:66:6B:27:7C:45:39:92:FF:15:A5:16
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285848E0068A311F6071FBE22A4ED8
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa
Signing time:             Fri 14 Feb 2025 02:00:39 +0000
ROA not before:           Fri 14 Feb 2025 02:00:39 +0000
ROA not after:            Thu 15 May 2025 01:00:39 +0000
asID:                     20115
IP address blocks:        174.83.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e0:06:8a:31:1f:60:71:fb:e2:2a:4e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Feb 14 02:00:39 2025 GMT
            Not After : May 15 01:00:39 2025 GMT
        Subject: CN=c0e518b2-4b0e-4775-bcee-a9ea2993bfe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bd:db:6a:15:3b:df:ba:b9:3b:4f:c2:46:bf:
                    c0:83:77:c9:a5:5c:08:85:d4:7e:13:f7:82:6e:75:
                    47:09:be:c6:05:1c:0d:07:12:7e:29:62:65:be:5e:
                    c2:fa:d4:b3:b2:6d:46:a2:50:be:80:f5:8a:0d:6a:
                    b7:b1:f7:ba:58:8a:97:2f:d5:3f:32:42:de:3b:81:
                    89:ce:fc:c9:d0:8d:6c:8e:6d:ea:fe:37:b2:90:43:
                    a5:4d:56:07:a8:e6:24:29:64:00:48:74:a4:8b:37:
                    70:c5:19:ea:20:49:db:ad:50:23:f3:31:e2:ae:5e:
                    bd:fc:c0:95:9b:52:10:30:40:34:e2:d1:cd:08:84:
                    7c:d2:fb:11:71:14:83:d4:5c:b9:46:f9:c9:e8:19:
                    9f:c4:33:ee:4f:65:83:03:1a:2e:9b:49:83:1d:b5:
                    ef:ba:39:fc:3e:57:4d:e2:72:da:97:e9:fc:5f:c8:
                    db:9c:dc:72:07:25:5d:a1:60:4f:71:d6:6d:79:c0:
                    cc:64:30:33:cd:96:8b:07:11:bc:73:d0:c9:af:e5:
                    fa:c3:e6:46:d1:64:88:70:19:ef:db:ad:5a:82:31:
                    7d:08:6f:10:fe:55:0b:a6:4b:4b:1a:84:01:d3:be:
                    11:08:d8:88:a2:5b:fc:4d:0e:ec:41:06:37:ad:0c:
                    06:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E9:27:C9:38:94:B8:09:44:66:6B:27:7C:45:39:92:FF:15:A5:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/8c261214-34d3-3feb-b587-96300f111017.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.83.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:2a:25:dc:a2:c4:9b:c0:6c:cb:07:f9:b8:c3:11:ff:1d:be:
         d4:3a:d4:6f:b4:07:ee:53:0d:ec:19:0d:83:05:e5:48:fe:f7:
         31:c4:51:93:ac:58:e4:ad:ca:06:98:7e:70:20:2e:cb:ba:0e:
         17:fc:b1:e3:81:70:4c:64:69:7a:a4:d8:b3:63:a6:05:89:e8:
         c7:26:40:ac:3b:89:44:7c:f1:8e:00:d3:e8:30:bc:df:d0:2e:
         01:2e:a2:27:80:3a:f9:a4:ee:2a:2c:61:7f:f4:84:0a:23:3b:
         d1:76:38:61:7d:10:4f:9d:69:87:dc:8d:cb:78:6a:d5:47:6f:
         9d:9a:e2:9b:5b:bd:e9:94:eb:6c:f8:89:6f:b3:73:c7:7f:dc:
         6a:d9:f2:03:9d:c1:e2:b7:df:4d:26:c8:6c:ed:c8:22:80:85:
         e8:a4:af:06:54:74:1e:be:e3:b2:7c:82:5e:56:f1:f7:40:79:
         e0:b0:b5:32:e0:df:ff:29:f3:a2:76:dc:37:14:7a:b9:6f:a8:
         6b:2b:ee:c1:03:2f:f0:c1:e7:21:21:81:5f:8b:db:43:65:63:
         21:76:68:43:ea:dc:65:86:a6:40:1c:d9:30:29:b0:d0:e5:68:
         dc:8a:9b:b3:05:6f:90:aa:d7:e3:37:f9:b7:ab:86:89:73:01:
         aa:d1:e5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:17 2025 by rpki-client