Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa
File:                     c965a724-c4de-336f-8a53-949c52b703a1.roa (raw, json)
Hash identifier:          n1SCCkA7W818ZbF+oKw5MJe32pTNG6pqWes4UUfV/6I=
Subject key identifier:   49:2F:59:54:AB:2F:B2:26:C2:C2:02:79:E3:B2:30:36:95:98:02:11
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA93AA60B57985C7570640
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     577
IP address blocks:        142.117.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:93:aa:60:b5:79:85:c7:57:06:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=374d7076-c081-45e3-8bfd-ecb25c9c1cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:41:aa:57:21:b9:8a:57:2a:56:1a:ae:fb:18:
                    b7:42:e7:3d:3c:68:d8:6c:f8:1c:b6:f7:25:7e:9a:
                    52:b3:e4:b9:0f:07:4b:ba:1d:a4:c3:70:db:b1:31:
                    26:fa:a7:10:db:12:e3:35:7a:6f:fb:24:74:1e:74:
                    47:54:e5:7e:52:75:cd:e4:20:1d:5e:32:c6:b4:23:
                    77:59:05:4c:d7:51:a5:a0:ef:f2:53:96:54:90:7a:
                    31:3a:09:53:a5:38:72:29:37:de:23:44:bc:7d:47:
                    24:6d:e2:49:ae:b5:99:32:29:44:e5:e3:da:84:29:
                    18:bd:8f:4c:10:0d:4b:ff:58:67:cf:e9:13:2d:ee:
                    cd:41:c3:f8:f2:f2:a6:76:e2:d1:75:24:09:7e:4b:
                    79:b0:5c:c0:59:43:3c:f4:13:2e:e1:d3:33:45:9e:
                    52:be:be:df:cf:85:20:36:a7:dd:3a:70:15:1d:18:
                    dd:23:6a:1c:8a:91:8a:6c:7c:dc:b3:ce:8f:ee:2a:
                    2a:56:e4:16:ef:e9:b8:1e:52:3c:d3:03:49:9d:0d:
                    67:b0:88:2e:03:5a:a9:57:8d:93:c8:ae:48:35:9c:
                    90:48:8b:dc:cc:cf:ab:7e:9d:33:e9:e2:71:92:bc:
                    71:0d:d4:74:49:c6:96:3d:12:9e:1d:b9:4e:e2:85:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:59:54:AB:2F:B2:26:C2:C2:02:79:E3:B2:30:36:95:98:02:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/c965a724-c4de-336f-8a53-949c52b703a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.117.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:de:b3:09:26:a7:95:6d:eb:2b:cc:b7:24:62:22:7e:04:5d:
         1b:56:31:40:d6:36:ba:10:0c:45:48:46:68:db:12:b8:96:e9:
         81:cc:60:3e:3e:40:f0:94:5b:24:30:36:52:38:bd:03:07:1e:
         a0:fd:b1:21:a6:bd:07:9c:e0:6b:e1:e8:34:34:a0:33:b6:44:
         ad:2d:d3:cd:87:3b:f7:ff:aa:96:29:52:00:ae:ef:8a:21:f3:
         42:b1:0c:55:fc:1f:d0:d4:eb:86:74:c5:b9:7b:6f:5d:be:b8:
         0f:de:0d:bb:71:83:f1:7f:cf:e5:c2:bd:f5:bb:c1:0e:45:3c:
         38:49:44:c8:4d:0f:1d:63:c0:32:21:29:2c:be:a0:c9:57:6c:
         54:14:37:ee:65:cf:8d:9f:b1:90:67:66:9a:4a:22:05:18:59:
         a4:d3:3d:74:e7:a3:f9:f6:36:a1:7d:5c:57:26:b6:76:4f:d1:
         7a:fe:90:84:c7:d9:19:02:b0:3a:da:63:89:33:a2:66:12:51:
         bf:f6:1a:08:47:c5:19:4d:e6:47:ad:0d:76:42:e7:9d:0c:31:
         1c:7f:40:e9:5b:3a:00:32:f6:b2:b4:39:57:cb:2b:7b:44:74:
         33:8b:54:f3:5f:96:7a:65:33:6e:e4:71:df:b6:a7:4a:82:e7:
         df:7b:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 16:05:11 2025 by rpki-client