Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
File:                     286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa (raw, json)
Hash identifier:          mcevsz0lPu8LO9iZlzxthhSFsQDD2agm53oUaCkhRYg=
Subject key identifier:   CF:69:14:27:7C:FC:FD:E0:11:73:41:62:F3:EF:EB:7F:2B:B5:C1:C6
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F432858492CAE83A91AEA993F9C78F880
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     397849
IP address blocks:        136.143.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:83:a9:1a:ea:99:3f:9c:78:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=a18091cf-1a0b-4d92-92ac-4340887db662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:be:bf:f4:91:dc:3f:3e:ab:41:75:f0:37:83:
                    47:c8:c4:4e:6c:d0:4e:51:a4:b1:7e:7e:ea:1a:9a:
                    6e:97:e1:f1:86:81:af:48:8e:ab:ed:f7:f7:29:bd:
                    a5:54:a3:14:5b:a7:a9:7f:1c:b4:aa:8c:62:9e:77:
                    59:69:a8:53:b0:99:90:eb:dd:0a:ce:64:48:02:75:
                    e1:6e:9f:c5:59:bc:01:f5:6d:29:c9:4a:43:f6:f6:
                    b8:ef:f0:a5:f8:05:8d:a4:c8:86:bd:68:85:e8:27:
                    13:cf:2a:82:16:82:f4:c5:25:09:fa:4e:f6:90:8a:
                    9f:49:b8:0e:3b:db:02:1b:b4:17:d4:47:c3:7b:ac:
                    c0:2d:b5:5f:c8:a8:3d:b6:9d:aa:d7:99:3a:9c:b6:
                    82:86:c2:cc:90:b5:82:95:32:c4:8e:42:43:ff:5f:
                    31:9e:e6:df:42:5e:12:64:0a:3c:86:78:41:a4:6c:
                    9c:b5:1c:03:b6:bc:8f:77:55:10:1e:43:7f:da:47:
                    02:29:01:d9:15:69:10:c2:28:9f:06:94:67:3b:ba:
                    5f:1b:73:9b:ae:ba:0d:51:be:a0:f2:d9:d5:19:b7:
                    ea:e3:a3:ee:22:10:85:79:66:a9:ce:c4:c7:58:f5:
                    e2:e9:b8:7c:de:38:e8:16:57:cb:e1:87:c7:b8:4a:
                    be:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:69:14:27:7C:FC:FD:E0:11:73:41:62:F3:EF:EB:7F:2B:B5:C1:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d0:6d:80:5f:99:d1:af:a3:ff:14:04:45:27:6f:69:1e:20:
         6b:1b:c5:c2:5b:3a:53:94:0c:28:f2:90:b1:eb:71:bc:f6:e1:
         ea:da:32:3e:fd:08:b3:75:f4:c7:97:f5:ac:cf:1b:55:f0:3f:
         02:a9:d7:53:53:fa:8a:e5:e4:91:9e:e1:ac:ee:08:76:fd:fb:
         da:43:6e:18:18:d7:87:d8:31:18:60:e1:50:17:66:d8:3d:35:
         c3:3c:f6:b3:96:0d:0e:bf:75:af:05:27:16:ff:4d:18:fd:76:
         28:99:a0:55:73:d2:c7:90:d6:60:8b:92:97:b9:e6:79:80:b0:
         79:0a:1e:14:0d:30:a9:8e:74:1f:ad:b9:e4:5c:56:56:ee:62:
         02:57:09:da:db:57:96:1e:5f:58:7c:f4:26:ba:a3:fa:bf:b4:
         35:72:5f:9f:d7:22:8f:53:0c:61:4d:03:59:fd:e0:b4:07:71:
         5e:9b:75:d1:b4:64:fb:26:12:67:ec:02:27:5f:94:35:08:40:
         8e:2b:ca:b4:72:e5:26:30:e0:63:f5:18:1c:20:cb:7d:95:f2:
         40:5b:11:9d:b6:68:09:c7:41:9c:49:60:64:da:4f:18:24:d5:
         f9:f7:6a:4d:28:d9:76:69:ba:a5:c5:8e:5b:e5:e4:e3:7b:e3:
         dd:53:e6:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:00:55 2025 by rpki-client