Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa
File:                     0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa (raw, json)
Hash identifier:          NkpFz0Cz9iZo7HZJ8KiDO2RkT4wJvzg1r957ZHgmtBc=
Subject key identifier:   C1:BD:CC:F7:B1:1D:C5:5C:5D:60:9F:FA:8C:9E:7F:D6:E8:20:4A:CE
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848DBD672305D4AA650F14B4000
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     36183
IP address blocks:        172.225.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:72:30:5d:4a:a6:50:f1:4b:40:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=8a2aaaec-927a-4672-ab31-148026f99f24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a3:74:14:a5:0b:2c:55:40:ff:be:32:6c:91:
                    8c:ca:65:a8:1f:47:2c:e3:a7:c9:14:ca:1f:d2:f5:
                    f8:e2:a4:dd:39:c1:22:6c:be:08:79:aa:8c:3e:c3:
                    68:04:f2:33:5f:2d:8a:d2:b3:31:3e:8e:44:d5:18:
                    7b:b5:d5:73:75:f1:c5:d1:d6:cf:cc:88:e3:c6:03:
                    b3:85:b6:39:be:d3:b5:67:94:4e:55:8a:96:ba:04:
                    3a:73:a7:2f:32:7f:ca:c3:52:36:cf:92:13:6d:1b:
                    db:b5:bc:0e:66:ab:c5:dc:d9:85:9e:4c:b9:12:d9:
                    47:81:5e:3f:64:30:e8:32:ad:c2:93:f2:0b:6c:80:
                    c5:f4:4d:07:a8:26:2a:f9:dc:fc:a5:5f:f9:ac:50:
                    5d:4b:2a:cd:52:67:41:e5:61:f4:06:5e:16:3b:4e:
                    39:d1:3e:9b:bb:c1:12:27:a0:e7:82:95:4d:f2:04:
                    76:5b:2c:af:eb:d6:d1:59:4a:e1:73:bb:b7:a2:5b:
                    e3:28:fd:75:f9:19:3f:f9:82:92:65:89:6c:2d:54:
                    47:78:49:a2:e2:63:e1:0e:09:a5:68:9f:f1:5b:1a:
                    79:55:91:fd:42:4e:5d:2c:91:e2:60:85:95:66:91:
                    8a:90:77:7a:32:d9:68:2a:22:9d:27:10:58:eb:a5:
                    af:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BD:CC:F7:B1:1D:C5:5C:5D:60:9F:FA:8C:9E:7F:D6:E8:20:4A:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/0f4ce7a4-5029-37a3-9d17-638760f4ee79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.225.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:be:f6:64:ed:52:98:3a:d3:59:fb:70:55:92:0a:8a:64:6e:
         46:f1:34:9f:c6:59:2b:23:4b:74:52:58:6f:97:47:c9:61:1e:
         c0:82:eb:5f:e5:a2:e7:78:7c:18:0b:b9:1f:d7:7f:be:77:e0:
         7f:1e:9e:fe:62:91:ef:f8:a9:ac:25:3b:94:90:7d:c4:be:22:
         27:71:d3:83:7f:9c:0e:75:19:93:9f:d6:37:01:ee:9b:32:42:
         7b:55:86:ee:83:c1:12:f2:cd:c1:5a:69:b8:cb:40:5c:cd:31:
         5d:b2:9a:7b:11:7a:c8:88:52:a9:1f:51:19:8c:1e:cb:d2:91:
         a6:5e:ff:25:3f:ff:81:d6:8e:16:e2:71:95:fe:de:20:50:f7:
         97:4d:d0:68:ec:98:fe:2e:ec:b3:dd:a8:34:4d:ff:e5:ca:dc:
         f8:81:89:31:2b:76:e6:7b:55:92:d8:fa:01:18:78:8a:e6:e0:
         5a:3b:19:3f:a5:0b:b6:06:13:31:3b:92:d2:4a:e9:8b:8d:fd:
         3b:de:85:f1:ae:86:33:39:1a:bd:01:70:93:ba:b8:ad:15:d5:
         db:69:f8:f7:89:e2:f4:00:92:9f:a8:0e:1e:42:fc:8c:14:e9:
         ff:d1:58:6b:a4:61:1d:3c:5e:d3:46:01:c4:c4:dd:c1:1a:23:
         f3:62:eb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 11:09:01 2025 by rpki-client