Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa
File:                     61746f6a-fd7c-355d-9f05-6815b64818eb.roa (raw, json)
Hash identifier:          ogObQUnNifiLol7wVL/Sf0ESlrBwOPM6TtMCEMZE9mk=
Subject key identifier:   44:AD:41:11:8C:9C:3A:E3:FE:EB:53:9C:83:F6:C8:B4:86:C2:72:31
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5822D97D067A92E01D9DB00
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        142.250.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:2d:97:d0:67:a9:2e:01:d9:db:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=37877971-1632-41a7-bc8e-6f2ac05106b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:2f:bd:60:41:88:3f:92:fc:e2:e3:d9:21:
                    03:b4:c0:60:69:e7:89:5c:b6:d6:ca:12:d6:27:f8:
                    55:79:e7:fc:3f:9c:9e:30:ea:9b:6b:85:b8:6e:dc:
                    c5:63:3c:8e:36:41:20:f1:84:95:c3:08:91:a1:2a:
                    70:b3:e2:50:36:e0:c9:88:43:55:ba:9b:23:4a:01:
                    1b:c1:db:f1:12:a9:78:63:80:a4:2c:a5:52:28:c7:
                    47:45:f0:b3:59:a8:f1:32:b7:11:9a:ed:a8:58:75:
                    8a:85:f7:c4:58:47:bf:32:b7:40:8f:59:0b:57:4e:
                    e2:0d:58:9e:bd:9f:ae:b6:04:cb:f8:0b:7f:fc:56:
                    5a:04:98:d8:6c:1e:13:39:59:5d:e3:f2:9c:f3:4b:
                    68:b1:49:23:19:1d:7d:fa:82:c9:db:1f:4d:5e:09:
                    21:b7:e5:12:2d:11:9b:d7:af:bd:87:6b:3c:4d:da:
                    2d:f9:69:d7:ff:70:05:9f:40:ae:83:01:c6:1e:21:
                    6b:7d:30:a8:98:87:5e:67:2f:a2:25:bf:a6:84:07:
                    a3:60:e8:00:ec:8e:16:6c:7f:d3:27:96:00:b2:78:
                    17:05:ba:76:c0:2f:09:4d:09:f3:f6:46:7f:72:45:
                    3c:84:31:66:f7:f0:4d:5d:3e:5f:0e:5d:af:b4:d2:
                    b5:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:41:11:8C:9C:3A:E3:FE:EB:53:9C:83:F6:C8:B4:86:C2:72:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/61746f6a-fd7c-355d-9f05-6815b64818eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:0e:d8:5f:5f:58:1f:e0:d7:98:f3:62:7f:b2:ba:3c:ea:69:
         8f:ed:1e:12:21:96:7e:81:e0:73:a2:ee:cf:48:42:7d:cc:8d:
         8c:46:4b:26:67:bf:93:b9:bc:9f:95:2f:a6:c0:47:dd:26:f6:
         f9:76:ee:58:fd:a5:da:8a:d8:f6:19:b4:98:8d:fb:a2:34:e0:
         69:ac:84:a6:e3:c7:75:cb:c1:6e:7d:80:a6:53:24:97:0b:bf:
         33:39:f0:32:66:de:d0:82:c5:b2:cc:9e:7a:bb:0d:8f:e9:b5:
         08:4b:41:40:5f:71:62:55:1a:09:fe:54:88:f8:0b:03:29:41:
         68:89:9d:18:2d:37:84:09:09:7c:54:f2:97:a4:a1:76:9d:73:
         ea:6d:06:ff:ef:72:a8:62:50:34:58:f1:17:18:8f:16:19:69:
         0e:c4:42:03:8d:11:0f:51:7d:22:cb:d5:61:bb:96:73:97:b3:
         19:f9:c8:43:51:15:45:d1:8d:14:49:47:46:c4:37:6a:15:aa:
         ab:7b:0f:85:c9:16:52:0e:52:59:82:68:59:73:1f:05:57:e4:
         c6:1e:1d:19:72:83:50:df:09:e6:20:d9:b4:26:af:d4:ba:f7:
         1d:39:24:61:62:41:69:b9:99:8c:bc:93:e0:4c:d3:5f:07:7d:
         69:41:1c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:45:50 2025 by rpki-client