Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a32933ee-5961-34a4-8c38-52f521795e0a.roa
File:                     a32933ee-5961-34a4-8c38-52f521795e0a.roa (raw, json)
Hash identifier:          OwztqWWccGdNI1QgNypcyXIvGNSum0ku1yI/Hz5MRNA=
Subject key identifier:   27:B9:B3:38:12:DB:F0:6C:2D:99:18:CD:A0:4D:6D:D4:AF:16:93:E6
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F432858494B673710261940B00173BD00
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a32933ee-5961-34a4-8c38-52f521795e0a.roa
Signing time:             Mon 24 Mar 2025 13:07:25 +0000
ROA not before:           Mon 24 Mar 2025 13:07:25 +0000
ROA not after:            Sun 22 Jun 2025 13:07:25 +0000
asID:                     138244
IP address blocks:        141.140.13.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:67:37:10:26:19:40:b0:01:73:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Mar 24 13:07:25 2025 GMT
            Not After : Jun 22 13:07:25 2025 GMT
        Subject: CN=e008098d-f4a1-4045-903a-3ead642d412a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:11:ff:b0:71:22:94:cc:ca:7e:8b:11:c2:5e:
                    fa:31:6f:a1:f7:7e:99:d9:38:72:78:4b:81:fb:06:
                    90:ed:1d:bc:81:a5:3f:65:06:49:4e:29:fd:d2:69:
                    7c:39:1d:79:2b:41:ed:2c:d8:27:00:14:c9:df:dd:
                    1d:d6:b8:7c:dd:ca:c2:21:dd:a9:2b:8c:99:52:43:
                    fc:1f:30:2c:22:4e:18:6a:4c:65:fc:15:14:e7:95:
                    8d:03:c3:0b:fd:c3:cf:1c:62:10:18:73:35:58:f9:
                    67:15:76:2e:5d:fc:5e:c7:c4:85:c3:e8:e7:28:16:
                    aa:d2:b9:dc:94:bb:02:11:38:1d:6c:c1:5c:b3:e1:
                    b1:ad:5e:00:f9:aa:09:b2:1d:3c:02:e6:c1:ad:7e:
                    83:dd:70:0a:8d:e6:13:3d:5c:6c:9d:11:29:4b:a9:
                    2f:9f:6a:2a:3d:2a:1a:80:bd:8f:31:93:22:3f:a4:
                    4f:71:27:6d:b4:dd:2e:4e:66:fd:f6:26:b7:1d:59:
                    07:6a:9b:a2:61:4c:d2:fb:03:3b:b5:4c:96:e5:26:
                    19:d3:b3:88:87:30:a6:8f:12:96:8c:64:e5:d6:a7:
                    21:20:1d:c0:ff:7a:34:02:eb:0b:4d:c7:38:cd:57:
                    5c:e0:0b:39:ea:20:61:a5:25:c5:d3:1b:ff:98:87:
                    a1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B9:B3:38:12:DB:F0:6C:2D:99:18:CD:A0:4D:6D:D4:AF:16:93:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/a32933ee-5961-34a4-8c38-52f521795e0a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.13.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:22:da:50:2b:46:53:ca:71:d4:73:75:08:b3:18:cb:c6:50:
         db:00:8b:9f:43:db:85:57:04:dd:e3:ee:de:90:dc:f8:06:58:
         27:f2:80:ff:f5:24:f9:aa:f3:0d:63:83:c6:e5:7c:89:5b:8b:
         07:69:2f:c1:70:8f:a2:55:a2:14:29:4c:8f:64:08:c6:59:1d:
         30:7a:80:a5:f5:ba:b3:03:47:7a:47:65:ed:88:d7:24:34:13:
         68:3f:12:4e:10:53:28:32:4e:d8:eb:ff:c7:f7:f4:8d:b4:7b:
         91:53:70:74:41:3d:68:44:1d:06:23:13:a0:33:88:8a:66:8e:
         50:b3:3d:cd:07:8b:5d:99:a3:2a:e4:aa:cb:f5:ad:40:1f:ad:
         47:98:e0:0f:f0:0c:65:ed:6f:2c:98:f1:bb:8d:a1:08:13:de:
         80:0c:5b:8b:ab:a2:4a:89:b6:0c:41:7e:e5:17:15:1c:e1:7b:
         fd:74:f0:f2:6a:8f:6f:0e:40:da:de:09:e9:4a:8e:96:65:c4:
         5c:54:74:69:18:3b:fe:0a:20:a1:c4:ed:7c:8c:96:1d:f9:73:
         57:91:bd:1f:93:9f:d3:f2:f4:6a:32:fa:cd:d6:ca:5b:ac:ef:
         3a:18:c0:a4:f2:9a:87:e2:08:c1:0d:61:a1:6c:f9:98:b6:f4:
         43:d0:a0:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 04:38:14 2025 by rpki-client