Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa
File:                     64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa (raw, json)
Hash identifier:          uSKwaB2yrpsvi36m0XVY4VCohCp1t9jTdl+XPtr53Qg=
Subject key identifier:   EF:8C:CD:E4:D8:66:6C:4D:3E:2B:4D:D5:AF:D4:85:CC:BA:7C:AA:40
Certificate issuer:       /CN=70b47ad9-010b-4764-8cef-4d3e66669003
Certificate serial:       010D0C9F43285848E9CBD947D43F54EE8AF9FF00
Authority key identifier: 37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        168.151.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:d9:47:d4:3f:54:ee:8a:f9:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70b47ad9-010b-4764-8cef-4d3e66669003
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=c943b046-ebcb-4744-8630-e59968980a4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:79:c3:e2:38:f5:49:17:38:10:14:3b:f0:1d:
                    47:1f:a9:07:5f:c6:c7:4b:fe:f2:20:55:f6:63:f0:
                    e1:a2:92:61:f0:ee:df:df:7f:54:c5:6b:e5:f9:42:
                    17:b4:cc:70:86:f2:9e:64:dc:be:80:13:13:75:49:
                    92:79:21:2e:2f:4c:01:c7:58:0a:32:9f:15:f7:bd:
                    f4:21:51:67:e2:68:08:a2:5d:0f:0b:5e:59:27:32:
                    a7:8c:4f:83:40:30:30:61:35:cc:46:e0:f8:62:3b:
                    53:87:20:ea:23:2a:a0:8c:44:90:6e:f5:24:e1:a1:
                    40:ab:09:1a:98:3d:ac:e3:5d:43:d4:bc:43:4b:88:
                    44:e9:63:35:8d:0c:24:66:1f:39:80:25:d5:0f:e5:
                    5e:62:0c:35:89:2a:1d:d5:ca:18:3c:3e:4b:fc:66:
                    8d:a5:8a:14:e0:cd:ed:57:24:0a:69:f7:92:39:96:
                    de:7e:7b:38:21:32:65:c5:4f:34:41:0f:f3:36:c4:
                    e2:54:b9:b9:f0:dc:3a:07:ef:56:ef:43:e3:95:b5:
                    fd:11:8e:00:a9:8e:ab:3c:46:30:bc:18:65:3b:d7:
                    29:81:d9:35:4f:f3:c9:d6:e7:c8:8a:69:b1:85:9b:
                    ec:68:ef:25:a0:61:45:89:84:cd:06:fc:e0:19:09:
                    63:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:8C:CD:E4:D8:66:6C:4D:3E:2B:4D:D5:AF:D4:85:CC:BA:7C:AA:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/64f4a54c-0b73-31ab-a72e-3fefba1e06d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003/70b47ad9-010b-4764-8cef-4d3e66669003.crl

            X509v3 Authority Key Identifier:
                keyid:37:56:35:08:DC:09:93:B8:89:6B:FF:F2:2B:9F:A0:44:00:78:06:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/70b47ad9-010b-4764-8cef-4d3e66669003.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.151.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:19:b1:ef:45:12:6e:0a:db:d6:0d:ef:b9:cc:05:12:90:5a:
         9c:a6:19:80:c2:51:83:52:fb:9e:da:3e:3d:27:98:f8:d2:59:
         27:5d:cf:70:13:b4:09:55:b0:bf:d0:1b:43:2f:a7:bd:9e:da:
         4c:af:89:31:c7:72:cf:22:f3:15:dd:34:fa:a8:fe:23:fe:e2:
         0d:42:a8:32:49:cd:c6:63:6a:d1:53:17:47:02:60:3d:5d:98:
         65:32:48:cb:a2:84:7f:50:17:99:0a:b7:2e:a8:3e:83:88:76:
         17:45:ea:13:05:81:a5:2d:79:a5:f2:04:70:c6:64:6e:c2:2c:
         b0:59:d1:3e:6f:b7:02:b5:1f:66:82:2b:43:62:64:ec:f1:89:
         5a:8d:bc:cb:43:4a:e8:4b:77:0a:e3:10:dc:93:82:a3:07:6f:
         34:af:80:18:d6:8e:81:f0:bd:74:2c:07:9b:f2:ff:af:b6:15:
         e0:15:4c:95:1e:ef:d0:22:14:ba:91:df:bc:64:ce:18:b8:30:
         ac:c0:fe:25:a5:a6:06:7c:b5:bb:5a:48:bd:b3:22:dc:b4:d3:
         e0:40:4b:67:1d:23:93:06:c8:d6:97:16:dc:36:23:12:30:5f:
         7b:d7:6e:24:2a:d0:5d:92:bd:78:9a:80:45:4f:48:6e:ea:61:
         7b:1f:35:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:29:56 2025 by rpki-client