Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa
File:                     783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa (raw, json)
Hash identifier:          H78FEn1CL13yvxfCW5/uJtBSKKovRppwrOzZKbtaFlI=
Subject key identifier:   30:1E:A4:40:02:00:5E:99:01:37:A5:89:F6:35:52:C4:03:8C:D9:5E
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C84C0CE9CD1982B34ED94860
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     15169
IP address blocks:        70.32.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:0c:e9:cd:19:82:b3:4e:d9:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=b13615f8-afaa-4916-a273-c2fb426b8174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:cf:2e:d8:c8:66:25:c2:34:01:ab:f8:60:e4:
                    1a:a2:78:f4:8e:f9:c6:3b:d9:d7:ca:9e:9c:d5:92:
                    5e:7f:16:f6:c4:76:ac:2d:15:85:01:99:8a:20:b5:
                    44:e1:e2:7b:b4:90:80:b8:e1:ef:c6:db:89:c1:db:
                    48:fc:da:08:7a:3e:63:f4:64:a9:6b:2d:f9:96:ef:
                    8b:60:9c:ee:e4:9c:cd:e2:0c:56:2e:34:76:de:d9:
                    37:b9:01:d5:83:26:98:a3:4d:79:6f:99:b6:cc:6e:
                    b1:27:38:3f:49:ef:7b:83:66:60:c1:89:41:4a:4c:
                    ab:7c:13:d9:8e:e6:a2:33:38:fb:47:90:6c:ce:bf:
                    08:56:c6:5f:6e:6b:a7:f7:fc:1d:eb:d0:02:64:7c:
                    c7:1f:a7:16:99:46:19:ab:b7:eb:a4:82:7f:b8:05:
                    de:13:40:cb:1a:6b:aa:00:0f:a2:6a:cd:78:15:d5:
                    11:8c:8c:9c:3c:8f:51:55:15:d9:ae:7c:25:c2:3b:
                    a5:44:7d:38:c5:e7:41:6b:2d:8a:e4:41:be:0a:0b:
                    61:f9:fe:8a:32:f3:f1:28:e4:40:41:e5:ae:41:8b:
                    71:31:8a:cc:11:56:c4:04:15:37:d5:8d:2f:e3:67:
                    59:e7:2d:7b:d7:ba:ac:34:1d:15:26:f0:29:7a:76:
                    e6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:1E:A4:40:02:00:5E:99:01:37:A5:89:F6:35:52:C4:03:8C:D9:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/783eaeb3-512b-3dfa-a1e9-282d321aa78d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:93:62:01:4b:5c:28:e8:0f:d7:24:9a:0d:b5:7c:7c:f5:41:
         a5:bf:79:e1:59:8b:a4:7a:26:1c:bc:9a:a0:94:fd:79:4d:0e:
         80:c6:fe:e7:56:66:39:39:b3:39:02:31:d9:12:54:f8:b8:d8:
         48:2d:bc:82:69:c1:28:bf:cc:1c:8e:18:ba:c3:c8:b0:56:ce:
         2f:05:5c:da:00:58:0e:85:68:3c:a4:61:36:73:d5:1b:9c:2b:
         56:b9:3c:ec:ed:66:db:43:b8:9c:7e:97:ef:ff:dc:f2:52:1e:
         2b:d6:cc:48:e7:07:85:df:98:c5:87:cb:40:aa:34:ec:b7:59:
         8d:31:d1:65:7d:92:36:cf:ba:03:3b:98:3d:04:35:76:b2:3b:
         cc:60:ca:fe:4e:16:85:f3:14:58:11:29:e4:07:56:c1:5b:89:
         ab:ed:1a:af:f9:ab:85:ba:04:ee:f4:07:ac:b3:ce:50:03:3b:
         e4:ee:15:ae:32:18:3c:aa:b2:4a:16:fc:b4:9f:56:2f:2e:ab:
         60:ad:6a:ee:a6:1f:f9:6d:06:74:19:cb:81:3f:94:a4:10:00:
         d6:b1:fe:a5:9c:94:be:9b:58:0e:9e:82:66:46:e9:7b:ce:b1:
         5a:5a:91:e7:ca:54:ee:a8:01:f5:b0:43:df:61:ad:6a:bb:62:
         c5:f6:be:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:19:23 2025 by rpki-client