Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb79deea-f7e5-3a7b-b8ef-37763ac09171.roa
File:                     eb79deea-f7e5-3a7b-b8ef-37763ac09171.roa (raw, json)
Hash identifier:          3rdoZyw4ZNj7TlTdpyhgXfjlg+OgtXf8BrArV2z7wM8=
Subject key identifier:   CD:95:F3:9D:53:A1:F6:FF:34:6F:E9:6F:25:61:B2:CF:D6:B5:5B:DC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246FAF8B746A76D248FD880
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb79deea-f7e5-3a7b-b8ef-37763ac09171.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        141.155.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:fa:f8:b7:46:a7:6d:24:8f:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=2a7639c3-a40f-4bbd-9b54-26c6d22c19ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:79:02:82:2b:32:b7:aa:ec:0a:60:fd:01:a6:
                    89:f1:1d:87:5f:11:41:d2:61:ea:f9:b4:00:87:ab:
                    42:e2:7b:6f:01:bf:bf:50:35:07:68:13:c3:eb:01:
                    e0:a1:72:ad:25:b3:76:9b:7f:d5:14:fc:bd:05:48:
                    01:f9:f2:7f:a0:9f:55:36:55:a6:45:6a:93:07:86:
                    1a:36:7e:ae:ee:4a:0c:57:58:00:d3:54:b4:f2:d3:
                    ab:9d:c8:2f:b3:de:b0:91:82:58:99:3c:4f:47:b4:
                    1d:e3:c1:37:cf:66:4d:6d:56:f4:1f:c8:f9:89:d4:
                    fe:07:d5:19:a5:0d:03:d8:91:bc:72:01:a1:dc:cb:
                    ef:66:4f:33:a4:ca:96:07:a3:50:55:bf:1f:ec:27:
                    b5:dc:2a:84:82:e4:2a:a7:da:58:70:61:71:d8:e8:
                    c0:0d:07:8b:ea:c0:59:43:3b:d1:4f:da:60:8f:16:
                    93:0e:4d:d8:83:d7:28:17:d7:04:01:f6:1d:3e:e1:
                    88:5b:da:7e:78:12:1b:a6:70:84:df:3a:f5:ea:c6:
                    91:33:d7:d0:15:86:df:81:bf:5f:03:ef:26:3b:ab:
                    90:8d:80:15:92:49:6e:77:e5:99:b3:86:0f:bc:b6:
                    38:24:d1:75:c0:5d:12:24:53:0a:3a:0e:f3:69:aa:
                    60:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:95:F3:9D:53:A1:F6:FF:34:6F:E9:6F:25:61:B2:CF:D6:B5:5B:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/eb79deea-f7e5-3a7b-b8ef-37763ac09171.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:64:16:86:32:22:24:50:9c:d5:00:24:d2:7c:07:15:e4:fc:
         c1:dd:72:6c:ab:7c:31:e7:71:39:4d:24:7c:14:7a:d5:d8:a7:
         4b:01:a1:4c:3c:ee:44:de:eb:4d:14:95:0e:42:1a:89:ad:b6:
         a7:56:89:32:62:cd:04:dd:10:10:f6:82:09:52:b1:5d:c7:b3:
         ee:25:43:13:c5:8a:86:f0:b3:eb:ba:ed:e4:dd:4c:d5:a9:c4:
         5c:fb:ed:b6:1a:e8:65:d0:fe:7d:67:de:7c:0f:cf:d9:b7:e5:
         2c:5c:fb:49:32:3d:d4:5a:9e:77:05:4a:19:5b:7b:dd:14:2d:
         69:75:7a:12:19:13:20:19:f7:ca:56:3c:4e:a9:91:ce:be:03:
         9b:ed:6b:be:d5:a1:57:16:cf:34:02:37:22:bc:39:fa:de:f2:
         69:82:cf:cb:90:79:ca:ab:90:8f:7c:9f:a1:8d:23:aa:e1:4d:
         3d:09:bf:bd:4b:f2:13:88:c4:75:d2:48:ca:ef:9d:24:8d:80:
         71:c9:3c:e8:ec:9b:0c:9a:16:5e:e5:18:4d:92:16:4e:a3:dc:
         b4:ce:94:da:98:39:4c:17:74:af:f0:25:6f:51:87:35:f1:86:
         77:12:95:b5:8a:c7:19:e0:59:6f:55:76:35:77:75:ba:64:28:
         9c:fe:b5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:10:06 2025 by rpki-client