Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa
File:                     aa32f203-9bfe-318a-83d9-d71c9b31611d.roa (raw, json)
Hash identifier:          sSSXrHF9tMzmQWSopO6nPCNMohQ4b9KCZDkNvxsEVE0=
Subject key identifier:   A0:95:6A:56:58:64:EB:AE:76:9C:1A:27:74:A4:06:B0:3B:4E:EF:73
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858488815E3AB7217D9F1792B6120
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa
Signing time:             Mon 13 Jan 2025 14:00:52 +0000
ROA not before:           Mon 13 Jan 2025 14:00:52 +0000
ROA not after:            Sun 13 Apr 2025 13:00:52 +0000
asID:                     13760
IP address blocks:        142.190.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:88:15:e3:ab:72:17:d9:f1:79:2b:61:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jan 13 14:00:52 2025 GMT
            Not After : Apr 13 13:00:52 2025 GMT
        Subject: CN=a1b992f1-2fc0-48da-a41e-d362b22d138a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:fd:a3:86:20:04:9d:6c:7e:34:33:b0:66:
                    c9:82:15:ed:2f:62:f6:40:31:cc:c1:9c:5f:56:fe:
                    e0:0b:75:c4:7c:2d:34:50:fa:eb:6c:6e:e4:61:07:
                    ef:d1:11:93:24:f2:25:3e:d7:7c:3a:18:93:e1:4f:
                    66:d0:b8:31:92:e2:d5:01:17:90:6f:cf:31:39:8a:
                    23:fc:f2:90:cf:44:d6:45:d7:00:7f:34:af:9f:6b:
                    c7:d8:3f:77:2f:6a:cb:b0:6b:b9:12:95:fe:8b:f0:
                    d4:47:d9:92:5c:b5:10:ba:f1:f6:4b:60:62:3d:88:
                    a3:88:1f:d2:46:af:80:c1:2d:66:72:6d:7f:1f:10:
                    a8:f3:b9:a8:29:52:f1:fc:d8:91:64:18:c4:34:62:
                    e8:15:35:92:59:ae:68:be:a3:03:f7:d4:47:02:7b:
                    7c:06:36:a0:9a:00:61:15:9f:bf:aa:97:02:75:68:
                    8f:c7:1d:e1:b5:e1:1c:7c:74:56:a9:28:ac:a0:62:
                    e1:eb:d7:a5:d5:de:09:e8:c4:d5:4e:73:44:44:be:
                    db:3b:4f:30:1d:83:3f:fd:cc:68:d1:63:3d:bc:90:
                    0f:6f:f6:ab:78:86:41:b6:0d:47:c0:0f:fc:3b:80:
                    49:02:db:16:1a:93:ad:bb:2e:98:24:be:b9:48:3b:
                    2c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:6A:56:58:64:EB:AE:76:9C:1A:27:74:A4:06:B0:3B:4E:EF:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/aa32f203-9bfe-318a-83d9-d71c9b31611d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.14.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:76:bf:bc:93:dc:69:6f:d1:f8:7c:7c:be:79:0d:f9:31:9a:
         75:ce:6e:07:7e:1d:33:d7:8c:91:34:e8:1e:a2:69:c7:e7:28:
         c5:5f:9e:eb:ed:9f:4e:0f:ff:c2:3a:9d:8c:d3:24:26:3b:a7:
         67:e5:c1:38:d1:ea:5d:5b:54:cf:3a:7b:2b:fc:14:f6:a9:ab:
         c7:17:ae:4b:96:96:78:6b:e8:15:87:dc:fe:2d:a6:3c:3b:54:
         d0:fb:e8:73:88:1f:b5:64:7f:ca:74:eb:36:54:25:96:55:5b:
         22:17:cc:b9:e8:17:ea:10:c2:3a:ae:3e:4a:07:b4:eb:e0:ac:
         59:93:e9:5e:10:9f:13:25:1a:de:e0:8a:9b:d9:33:17:21:9f:
         8c:55:88:b5:ad:a0:16:e3:9e:a5:90:75:66:cc:bd:f6:c7:c2:
         81:d5:04:f3:48:f3:70:f1:04:43:f8:2c:86:6c:62:d8:72:0e:
         30:7e:bb:a0:ad:3d:ea:4f:da:79:48:d5:b9:5a:8e:a1:ef:22:
         b8:78:53:32:47:48:ce:83:c0:d9:d7:9c:3e:bf:a4:bc:1b:65:
         da:81:30:08:55:f5:0b:46:7c:5d:6f:64:2e:4e:62:89:a2:a7:
         0a:26:54:7c:1a:40:27:ec:c2:bb:e6:ed:22:fb:0e:df:46:cb:
         42:55:8e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:46 2025 by rpki-client