Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa
File:                     7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa (raw, json)
Hash identifier:          hWHBuRnR4UA71hTO+wdwFaPnj4quBL9D1PHfykRSaC8=
Subject key identifier:   CF:2F:27:FB:01:40:0A:49:46:6E:43:FB:CC:C7:5A:FF:66:AA:C1:77
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C5816E47AE4C819E5BE179C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        173.194.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:6e:47:ae:4c:81:9e:5b:e1:79:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=09e496a1-aca2-4931-97af-087209a82922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0c:0e:da:b0:69:b6:43:f4:7e:54:b9:1c:1c:
                    c4:ca:c0:dd:ab:ca:70:e6:ba:7c:8e:4c:df:33:7e:
                    e8:4e:74:35:d8:b9:15:0d:4f:55:b1:42:43:51:7e:
                    39:72:ee:4f:bd:e4:95:d8:4c:d3:c6:44:ef:b1:40:
                    b5:70:5d:38:3a:96:14:c8:10:ec:7f:18:80:9d:8a:
                    33:48:9f:ca:44:1b:3e:6e:35:79:70:59:1f:71:df:
                    0e:01:27:08:b0:55:46:3c:23:be:96:9a:01:24:c2:
                    30:97:0c:02:8d:95:c6:2d:2a:58:7b:7f:53:75:ee:
                    13:6c:0f:4d:fc:cd:c9:1d:93:b8:29:95:49:47:57:
                    0b:64:94:94:b2:f6:57:4b:8e:bc:97:d2:78:4a:89:
                    27:b3:94:86:ad:95:0c:e9:ca:ce:01:69:76:fd:99:
                    75:2f:2c:19:cf:a5:d5:91:3e:d4:9c:eb:d5:dd:60:
                    d5:7e:5b:e7:75:3e:cd:e0:06:e5:7e:31:35:64:72:
                    96:be:2b:dc:64:1d:86:56:84:d6:f5:7a:e1:be:4d:
                    f4:68:ab:1d:e0:12:c2:a8:89:f1:06:a6:f6:f6:a1:
                    ab:84:a5:97:56:50:b9:5c:43:69:5a:56:15:92:a7:
                    ca:01:39:42:30:16:c5:c3:12:69:a9:0d:5a:d9:d9:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2F:27:FB:01:40:0A:49:46:6E:43:FB:CC:C7:5A:FF:66:AA:C1:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/7a473d71-18ff-344f-9bb9-85ce2c1a2667.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1f:10:bb:f4:da:93:ff:7f:bb:dc:81:b4:2e:6a:ba:f0:dc:
         04:f8:9a:2f:e3:a3:75:c9:9d:f8:35:f3:1f:26:f5:da:78:9b:
         1a:ee:d3:3b:3f:f1:80:b5:e3:f3:dd:6d:a2:45:ac:f0:5f:96:
         7b:43:12:ae:52:67:f0:52:46:2e:fe:92:67:33:86:75:f2:c6:
         15:07:a3:67:5e:8f:2a:9d:b0:b9:6e:76:fa:c4:bb:c9:da:f9:
         5b:af:6e:09:16:9a:b2:c1:89:5b:03:df:ea:de:84:e4:e7:bb:
         d9:86:6f:34:6b:42:52:ad:a7:2c:54:6e:6d:92:4d:ca:d3:71:
         67:15:5a:39:d0:a9:f8:4f:23:b6:a5:26:fb:25:fc:2f:13:ee:
         dd:07:74:97:42:a2:34:8c:b0:1b:88:c5:46:bc:ae:16:05:27:
         54:81:72:0f:24:c6:6e:e5:f4:0c:06:27:8c:3e:15:ae:b3:c9:
         19:dd:3d:11:92:c1:6f:73:8f:bc:42:18:87:29:63:e5:98:0c:
         1d:09:c8:53:73:9d:38:27:7c:0a:f7:06:b4:90:b3:cd:64:5c:
         2d:e3:51:db:0f:66:0e:3f:b4:4e:e2:6c:3d:ca:f5:74:9e:37:
         4a:80:7e:a3:2f:a7:14:4f:03:8a:2c:fe:1d:d8:2f:10:b3:72:
         8c:03:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 08:48:35 2025 by rpki-client