Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa
File:                     cfa7cf23-8b99-3993-9542-8d4224a4493e.roa (raw, json)
Hash identifier:          jE9YS5liQHFNkNPe6yBVDZMTaCXn6c6LOE79ugwM3vs=
Subject key identifier:   71:31:83:FE:F2:E7:DB:B6:CD:BD:C7:D9:0F:2D:B5:C2:55:8B:0D:32
Certificate issuer:       /CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
Certificate serial:       010D0C9F43285848B35B61BA8A6C7817C9FB9F00
Authority key identifier: 8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        142.147.54.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:61:ba:8a:6c:78:17:c9:fb:9f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5ae0cc6-b00f-4742-aadb-ab8ea354d895
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=47c130da-29d5-4547-968b-4845a0ff71aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:31:07:37:ab:ed:dc:73:ed:f5:d2:3f:94:09:
                    be:ef:32:83:10:66:ed:b2:52:ad:43:6d:ba:76:bf:
                    f4:81:23:b4:91:22:6b:63:08:ff:51:ae:3b:a7:ef:
                    93:7d:cb:fa:0c:df:15:0b:a1:f6:db:1a:06:48:26:
                    d1:54:41:02:d4:f2:2d:fc:ed:40:9c:27:4d:1d:8c:
                    49:6d:4c:e5:70:ec:cc:4c:e1:ca:38:26:9f:97:1f:
                    54:52:77:52:9a:73:7d:3d:83:b0:4a:ea:a3:51:50:
                    36:3a:79:d2:d4:fd:34:f2:08:e4:2b:86:aa:91:de:
                    84:3e:87:a5:3d:17:c9:dd:b5:2f:ab:ca:0a:34:b6:
                    d9:aa:f6:da:8a:b0:7e:5a:8a:6c:02:2a:07:d2:ea:
                    28:c1:cc:20:93:24:97:c3:85:12:14:b6:4d:26:cd:
                    b1:c0:49:fe:32:cb:31:b1:77:e4:f3:45:b1:fa:6a:
                    10:c1:da:90:0b:a5:a2:0f:a9:8c:db:0d:d3:0d:31:
                    c4:8b:18:92:fc:f9:2b:f0:2a:83:42:de:52:80:b9:
                    74:a3:36:9f:29:89:ac:4e:c0:aa:dc:cd:6a:26:68:
                    bd:b5:87:7b:15:d0:55:7d:6c:f9:7b:22:88:40:c3:
                    b3:27:30:89:51:cd:85:3d:7f:c3:bc:b2:03:9f:05:
                    74:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:31:83:FE:F2:E7:DB:B6:CD:BD:C7:D9:0F:2D:B5:C2:55:8B:0D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/cfa7cf23-8b99-3993-9542-8d4224a4493e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.crl

            X509v3 Authority Key Identifier:
                keyid:8B:9B:62:95:30:5B:9F:57:9B:22:EA:3F:C8:93:30:B1:33:CE:F7:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5ae0cc6-b00f-4742-aadb-ab8ea354d895.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.54.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:0b:e6:4b:96:03:e3:e2:60:04:af:f6:ce:44:45:08:cc:f3:
         1c:8e:04:4f:ec:55:a7:fd:74:85:cf:02:fd:07:81:c0:df:57:
         e0:41:28:e1:da:8c:86:e5:2c:86:b5:4f:8e:eb:47:48:75:23:
         f5:e9:d8:7b:32:c5:75:39:2c:e7:88:90:b1:d9:97:08:37:19:
         eb:f0:53:f1:d1:4f:5c:d5:d3:13:f2:07:2e:fe:27:1e:6c:f0:
         7b:cf:ad:30:c1:cb:29:91:fe:f2:6f:92:4c:99:15:8a:f6:2c:
         e9:97:a4:70:f2:96:5b:b3:a1:f1:2c:6a:88:bc:a5:f2:59:49:
         d3:cd:0b:ed:9b:de:c5:cf:f2:9f:15:ca:e5:fe:93:d6:bd:4d:
         81:94:2e:7b:fd:3d:ed:6c:55:fc:a6:cd:79:94:6d:70:01:0e:
         e7:82:98:71:25:6b:2b:6a:dc:6f:8a:1e:e7:62:5d:1a:ae:ac:
         a4:b0:f2:cf:42:21:6c:65:1c:60:ec:f3:ae:0f:31:19:12:67:
         59:8b:8b:bd:b1:4f:22:b9:34:de:77:a0:d1:d9:5f:f8:68:27:
         84:5b:7b:6f:a2:41:a5:c1:bb:2d:31:bc:3b:e9:88:1f:f4:b5:
         60:a9:f6:31:59:92:97:c5:93:e1:b3:a6:bc:c2:00:ce:39:2a:
         f2:fc:45:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:42:20 2025 by rpki-client