Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/74160dea-776f-32a5-8541-f5fde4c814ab.roa
File:                     74160dea-776f-32a5-8541-f5fde4c814ab.roa (raw, json)
Hash identifier:          eJveO8WQMI7nzgDDSOu2amEYVm3ilXTchIExbg4IEHM=
Subject key identifier:   BE:DC:86:30:DC:3F:F7:06:78:F2:91:2F:BB:D8:EC:4F:27:15:81:A4
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858486960637CE2A6A3259B1618C0
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/74160dea-776f-32a5-8541-f5fde4c814ab.roa
Signing time:             Thu 02 Jan 2025 14:00:52 +0000
ROA not before:           Thu 02 Jan 2025 14:00:52 +0000
ROA not after:            Wed 02 Apr 2025 13:00:52 +0000
asID:                     30102
IP address blocks:        170.249.143.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:69:60:63:7c:e2:a6:a3:25:9b:16:18:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jan  2 14:00:52 2025 GMT
            Not After : Apr  2 13:00:52 2025 GMT
        Subject: CN=e1a913cc-bd5e-4eae-8d84-58ba0ddacc77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:42:3c:1d:e8:23:4f:3c:fe:ee:8e:6b:07:ff:
                    ff:a3:84:0d:5e:db:2a:24:34:56:c7:df:2f:ab:0d:
                    dd:4e:3d:4a:f1:8b:ac:c3:84:0c:8d:c4:eb:f6:98:
                    aa:87:0c:6c:0e:02:d4:2e:d1:7d:e7:ce:a9:a4:19:
                    e3:0b:ba:60:df:05:da:a4:cf:44:00:ae:49:6a:97:
                    55:73:cd:83:00:16:54:37:1a:54:02:3d:7b:96:e4:
                    6a:1f:2c:dd:d4:61:7d:48:c1:8d:7e:ad:9a:9a:da:
                    b1:3b:99:73:12:77:b0:2d:7b:98:37:4f:d1:a0:23:
                    c2:c1:c5:65:d6:a9:ab:ba:3a:31:78:65:a1:95:63:
                    88:53:7e:b9:7a:5e:2d:f5:eb:57:29:e5:14:55:21:
                    ed:90:25:26:37:5a:c4:b2:18:14:5c:98:67:89:62:
                    ac:7a:93:84:1d:03:70:69:e5:1b:e2:44:c7:ca:0f:
                    76:af:d1:d7:7f:f1:13:e1:71:2f:b0:1f:ac:60:12:
                    b4:6b:0c:55:94:13:93:09:87:a6:7e:07:7e:8a:34:
                    c1:c8:78:e0:b9:08:a8:d0:b1:fb:5a:a2:f6:d6:7f:
                    b9:a0:27:a1:9b:a5:73:cb:2d:b9:0c:eb:42:eb:d0:
                    8e:d5:55:af:0e:77:0a:c7:b7:07:6b:c3:d9:73:1a:
                    f2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:DC:86:30:DC:3F:F7:06:78:F2:91:2F:BB:D8:EC:4F:27:15:81:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/74160dea-776f-32a5-8541-f5fde4c814ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:4b:12:18:74:24:ae:8b:5b:c5:5f:41:94:c7:be:ef:07:58:
         ac:83:f0:a3:f9:69:ce:f0:8c:22:46:dc:04:b3:26:9d:f0:cd:
         e9:1d:6a:ff:de:cb:46:e2:97:58:cb:37:45:6a:eb:8f:be:7a:
         64:ee:d5:ca:fd:4c:d9:77:8b:64:a5:87:53:9a:7b:3b:ec:1e:
         ef:ff:ae:e5:93:60:9d:ee:8f:5f:7f:77:45:f8:83:7c:45:3f:
         32:c3:eb:94:77:4c:82:de:5c:d9:23:4d:d7:37:c4:a4:5c:b5:
         2f:5d:50:54:02:fa:83:08:f0:86:a0:53:de:9e:52:af:3d:2e:
         7c:e9:7d:f9:71:e5:00:df:f9:14:69:2e:ba:bc:fc:45:16:9b:
         7a:bf:92:14:3c:c1:02:08:c9:a4:b9:ba:b9:0f:31:09:59:84:
         f8:cd:4e:96:3e:c6:da:13:79:6b:6b:76:60:64:b5:5e:f1:9d:
         62:b3:1e:60:54:fa:72:b4:f7:69:10:6a:c4:71:9f:a9:13:fb:
         29:c1:9b:ef:f9:13:71:d2:a1:2e:7e:56:77:31:fb:e7:b0:a8:
         65:56:93:ec:b7:cf:d1:28:88:43:54:d3:81:df:8c:93:dd:dc:
         49:a5:7e:23:e7:35:03:0e:ae:6d:f9:bf:01:94:b2:3a:b7:0a:
         bd:b6:95:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:09:02 2025 by rpki-client