Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
File:                     0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa (raw, json)
Hash identifier:          U/6qLcIh6SFWjKCbdeNHUH1ZJ123lJmN0kh/WKTGa2o=
Subject key identifier:   22:97:0E:F5:0A:EC:4D:61:E3:5E:82:E4:08:8E:96:28:DC:3F:B7:16
Certificate issuer:       /CN=8e159820-cf56-42eb-b9f0-0187b10bb721
Certificate serial:       010D0C9F43285848E510275BD2EA02AC564F2900
Authority key identifier: 3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa
Signing time:             Sat 15 Feb 2025 21:19:33 +0000
ROA not before:           Sat 15 Feb 2025 21:19:33 +0000
ROA not after:            Fri 16 May 2025 20:19:33 +0000
asID:                     376
IP address blocks:        198.73.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:10:27:5b:d2:ea:02:ac:56:4f:29:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e159820-cf56-42eb-b9f0-0187b10bb721
        Validity
            Not Before: Feb 15 21:19:33 2025 GMT
            Not After : May 16 20:19:33 2025 GMT
        Subject: CN=1d3def10-0c69-44aa-bdb1-931f1d2aea11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:9a:f1:1c:8c:46:92:1f:b1:93:d7:2a:9b:
                    5a:3c:56:42:7a:c7:e8:a5:7e:b8:a0:59:58:ad:05:
                    aa:8e:f5:b9:17:37:39:f1:b3:d4:26:71:cd:27:18:
                    e9:10:f1:85:ec:26:3d:8a:a5:bf:d3:75:28:f4:d1:
                    22:b7:c9:28:8a:2f:5a:a1:68:0b:9a:8c:67:05:d7:
                    00:d9:9b:43:eb:46:38:84:52:e1:ab:a8:a2:d4:bb:
                    7e:b1:f0:e0:4a:72:78:5e:bb:55:da:28:87:ad:03:
                    5b:66:d7:af:62:16:b3:90:42:b9:73:f4:02:0d:b2:
                    9d:d0:18:4f:b8:43:77:34:72:bc:1e:0e:52:43:09:
                    31:60:28:01:c2:25:bc:cb:f3:b7:e7:57:f3:71:aa:
                    e9:cb:ae:f3:0d:9e:e9:b2:d1:6d:ae:ec:26:6b:61:
                    1d:75:ce:74:90:4a:93:be:20:c7:cd:06:7a:ef:88:
                    cc:1a:59:d6:bd:c8:e5:a2:f3:72:99:b0:02:6c:4e:
                    39:d7:b4:06:92:db:f0:41:7e:32:ca:dc:ce:38:24:
                    26:56:8f:b3:b4:e4:fb:d3:c7:8a:0d:86:dc:62:4b:
                    d7:bc:87:15:fa:3e:ec:51:04:25:99:13:a8:66:1f:
                    38:27:9f:8a:6b:b1:b2:1a:6f:3d:95:75:b2:de:69:
                    c9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:97:0E:F5:0A:EC:4D:61:E3:5E:82:E4:08:8E:96:28:DC:3F:B7:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/0456ac2b-4ebb-33d5-96b0-a5234dff87fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721/8e159820-cf56-42eb-b9f0-0187b10bb721.crl

            X509v3 Authority Key Identifier:
                keyid:3F:A6:AC:3F:E6:A1:E5:4B:8C:AD:0B:43:6F:1D:87:10:25:27:84:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8e159820-cf56-42eb-b9f0-0187b10bb721.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:2f:88:b8:50:ac:0a:d9:d5:c0:bf:45:13:25:0d:11:ea:b6:
         47:fc:dc:0c:d2:07:d0:89:96:fb:1e:d3:a7:90:08:48:a4:52:
         32:53:5e:17:a8:e6:4e:d5:31:92:a4:1e:8f:01:e4:11:a0:e8:
         8e:6a:89:e7:83:fe:34:36:28:3d:6a:0f:64:2c:a0:11:b5:ca:
         49:a4:a9:0c:7e:57:58:92:29:ed:d4:20:f1:15:0f:83:50:a2:
         3a:02:a1:7c:f0:53:ad:de:3f:de:a6:86:20:bd:ba:28:b4:b8:
         b7:01:b0:e9:bc:98:3c:3f:b4:0e:90:d8:e7:95:9a:0b:8c:8b:
         cd:1f:02:10:7d:8f:62:a9:e4:31:ae:f4:8f:78:48:ee:3c:c9:
         68:1b:63:fc:5f:1e:83:84:15:98:3f:4e:f9:fb:54:a8:b8:a2:
         af:c7:f1:98:ed:0b:be:74:e3:a3:e9:0f:1e:e8:8f:8f:d2:79:
         cf:06:41:9e:b7:11:24:4e:69:ea:b1:2d:a2:eb:f4:fa:f2:30:
         7b:9d:d0:88:35:a2:79:6e:6c:50:95:e9:3e:1b:59:cf:37:be:
         22:98:6a:1b:59:d9:57:df:1d:4b:32:89:b1:34:25:b5:e8:87:
         30:f9:55:96:ca:2f:e7:e8:b4:ee:39:86:29:0b:1c:d1:f3:e9:
         1f:9c:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:17:49 2025 by rpki-client