Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa
File:                     31000deb-226b-39dd-959f-c150f230f500.roa (raw, json)
Hash identifier:          B4tgbJFCWtOtnCRW6JI22PDzJQ2QzdIM+9zd/IISjqE=
Subject key identifier:   D2:95:3A:81:46:69:59:9E:91:A5:ED:31:51:7F:1E:6A:FE:F4:F1:B0
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858494B642308402737139895C6C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     46160
IP address blocks:        76.191.118.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:23:08:40:27:37:13:98:95:c6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=efb8f732-9f87-4a35-9018-eb6c01cc3380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:76:61:90:2a:22:af:c8:85:d8:be:d6:b8:
                    e1:67:27:e1:e4:22:95:cd:08:3f:b7:15:b4:7f:e2:
                    9c:0c:e5:cd:0c:6a:07:16:a1:3c:0f:98:c6:c6:24:
                    97:d9:84:9e:19:51:dd:dd:fc:91:ca:6b:75:ee:72:
                    c9:d1:b4:af:a2:d2:85:50:f4:59:89:b9:65:82:c8:
                    45:34:48:d0:aa:ad:d3:36:06:12:8a:81:50:0e:83:
                    ca:17:89:04:d1:30:bb:65:df:47:c1:91:fd:46:39:
                    21:ce:5b:d4:78:c6:c9:c0:5e:b4:51:12:57:d9:fa:
                    02:0c:a2:de:80:26:48:4c:33:aa:63:21:0f:09:2b:
                    f9:09:d8:eb:86:03:9d:ad:78:2e:e0:27:75:7b:fe:
                    4b:94:1d:96:16:0a:f7:2c:7a:39:10:c1:1b:3b:2b:
                    54:5f:32:3c:91:bb:47:1b:87:32:e5:d0:ed:44:52:
                    ae:e1:77:be:b2:80:2c:76:40:93:97:52:e6:75:1c:
                    9a:fa:9c:b1:e6:5d:9e:d0:c8:29:b9:7f:c6:cd:85:
                    5e:20:db:44:c2:a3:c5:7a:d6:51:b7:1e:c7:d4:91:
                    0c:2e:b6:87:c4:58:f7:45:b3:5b:a4:a2:b2:fd:4c:
                    be:7b:4a:c3:9a:8f:94:4d:0e:94:e3:03:2a:7e:61:
                    13:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:95:3A:81:46:69:59:9E:91:A5:ED:31:51:7F:1E:6A:FE:F4:F1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/31000deb-226b-39dd-959f-c150f230f500.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.191.118.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:f6:42:cf:33:d2:35:70:b9:f9:00:e7:f2:a3:f1:b7:a2:ca:
         5b:89:4f:9f:64:0a:61:fc:98:d4:9c:55:9c:f9:7a:4d:69:88:
         c5:16:63:08:91:1f:04:ec:aa:c1:78:0a:42:e5:c0:ba:01:8c:
         f2:a1:54:68:db:7b:b0:1d:ac:83:5c:69:a7:bb:c6:01:ff:21:
         13:65:dd:43:c8:e7:99:0e:c7:3a:49:0a:a3:c2:91:16:db:99:
         04:2e:6b:9d:65:ec:bc:c5:7a:62:76:74:e4:71:b5:98:31:72:
         01:6a:55:fa:d3:b0:d1:4f:c8:b1:ec:15:9a:84:0f:2e:25:fb:
         f5:3a:15:da:ef:0a:28:5c:01:d7:17:50:d1:25:ae:33:82:b6:
         1b:3c:41:e5:08:8b:49:35:b2:b5:98:23:53:6f:7e:44:99:1e:
         35:fe:75:a4:b2:27:a7:db:d8:88:36:7e:d1:77:30:2e:0e:0b:
         04:34:3d:73:bb:56:3c:9e:e6:22:e6:24:0f:01:6e:7b:e9:15:
         66:56:d2:74:ad:20:0a:b3:a2:7d:58:79:64:f0:12:f3:5f:5c:
         84:88:4b:bf:48:e3:98:86:24:9d:66:d4:e9:2a:c4:29:04:d9:
         6b:0c:96:d6:9f:d3:b4:07:d2:93:82:f2:ab:d3:e9:c3:99:f1:
         8e:46:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 07:17:48 2025 by rpki-client