Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa
File:                     95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa (raw, json)
Hash identifier:          Q28OYW5EwooOi/n+H9SqdmloIqpn+/VBULaF0SI+ZaY=
Subject key identifier:   D3:4E:AC:8D:4D:3C:FE:B4:09:1B:9C:DE:31:7B:C3:05:A5:AA:11:BE
Certificate issuer:       /CN=b40579ad-1197-47fb-9391-d14ca61638da
Certificate serial:       010D0C9F43285848D2113E91D3F116A51470E380
Authority key identifier: C6:5A:65:62:F3:AD:8D:2C:B6:67:B5:B6:4A:70:33:05:4A:92:8F:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        159.105.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:11:3e:91:d3:f1:16:a5:14:70:e3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b40579ad-1197-47fb-9391-d14ca61638da
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=c3553349-5959-4eb2-8737-d204c6d1b86a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:37:ad:f9:7d:eb:b0:dc:5b:5c:1a:e5:24:b5:
                    a1:5d:e1:5d:a8:0a:8f:e6:11:a6:34:a8:22:e2:91:
                    17:74:42:52:38:52:3a:df:ac:9e:49:4c:4f:67:b6:
                    98:72:49:58:7e:cf:98:5a:c7:e7:42:7b:1c:6a:b4:
                    16:fd:96:03:77:49:c3:00:19:be:1a:d8:d9:4c:69:
                    4b:95:08:1a:fb:b2:0b:d5:e8:1a:bb:e1:18:04:6c:
                    5e:2e:7c:0a:54:8d:11:6b:23:f7:19:96:cd:b3:45:
                    07:f9:45:d2:29:d0:ae:88:83:60:a0:d6:3c:07:34:
                    73:b8:04:49:7e:2c:52:c5:4b:06:cc:1a:d0:b0:ca:
                    99:64:40:cb:99:91:05:35:cd:32:c9:2d:49:7a:75:
                    cc:62:aa:c1:51:3a:cf:37:e2:40:14:a0:db:d4:e4:
                    b0:74:f7:db:60:44:1a:ae:2b:6e:f2:8c:14:8a:63:
                    91:3d:94:7e:95:57:89:00:49:7c:35:02:fb:02:2b:
                    9a:20:52:a1:10:7d:ad:87:37:93:80:aa:ca:43:ea:
                    21:ec:9c:49:37:80:4d:1f:d1:ba:c9:ed:65:97:c8:
                    1f:a2:db:ea:16:f8:c4:50:14:c3:c9:c4:88:b0:7c:
                    57:ab:52:ed:23:60:4f:3a:90:7e:88:ed:4b:c3:90:
                    8f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:AC:8D:4D:3C:FE:B4:09:1B:9C:DE:31:7B:C3:05:A5:AA:11:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/95110d04-c9e5-338d-a5b9-c3b9f9ff8291.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da/b40579ad-1197-47fb-9391-d14ca61638da.crl

            X509v3 Authority Key Identifier:
                keyid:C6:5A:65:62:F3:AD:8D:2C:B6:67:B5:B6:4A:70:33:05:4A:92:8F:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b40579ad-1197-47fb-9391-d14ca61638da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.105.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:23:f2:17:31:da:6b:38:1b:09:1d:b1:2f:b7:19:82:55:6e:
         5a:b9:6e:19:6f:86:01:d9:03:8a:2a:aa:82:49:41:71:14:9d:
         7f:5e:49:62:74:6c:f2:fe:24:10:e8:75:c0:38:4b:8d:3d:a4:
         d1:b6:74:10:b9:ed:ba:12:73:8f:d4:ca:be:17:08:82:20:3f:
         23:1d:5f:19:4b:93:7c:2a:35:fc:ef:48:46:f4:9f:1e:6f:fd:
         be:c9:5a:19:1c:ae:c6:56:f0:6e:ae:3f:cd:9b:98:af:cc:f7:
         35:86:2a:21:c4:30:32:5b:60:aa:fb:ce:38:57:b3:0a:e3:44:
         76:d7:cd:24:a3:04:72:f3:d4:b6:27:de:74:4b:38:8c:c3:01:
         e6:68:61:62:61:89:b5:25:c3:2e:b5:54:a9:a1:30:3e:d0:70:
         78:30:33:21:44:8f:d1:6f:e6:2e:f5:8d:12:c7:45:a3:b0:3f:
         e6:02:58:6f:75:37:62:a5:3d:b7:7e:22:7f:b3:fb:1f:e5:fe:
         44:6a:d7:93:56:a7:91:d2:5d:e5:c5:34:48:89:50:2b:b9:6d:
         18:d6:c4:ca:2c:b4:f9:71:ff:01:ec:8b:c0:16:31:e4:ba:47:
         6d:9c:fa:39:d0:45:25:a8:a4:7e:78:2e:e4:eb:2f:16:b0:63:
         80:3f:31:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:05:53 2025 by rpki-client