Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/ac15673f-f6e2-3e8a-8633-387708e8f25e.roa
File:                     ac15673f-f6e2-3e8a-8633-387708e8f25e.roa (raw, json)
Hash identifier:          wDvwxcqQaRL3DUlND2oixhCe8fhCwvvF9J5aEcDtl3U=
Subject key identifier:   E8:32:55:8A:6B:10:A9:EA:CC:EA:34:60:6B:25:E2:77:77:B0:B2:96
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285849CA6A11506369F07AF2EC6100
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/ac15673f-f6e2-3e8a-8633-387708e8f25e.roa
Signing time:             Fri 09 May 2025 01:00:47 +0000
ROA not before:           Fri 09 May 2025 01:00:47 +0000
ROA not after:            Thu 07 Aug 2025 01:00:47 +0000
asID:                     14593
IP address blocks:        143.105.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ca:6a:11:50:63:69:f0:7a:f2:ec:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: May  9 01:00:47 2025 GMT
            Not After : Aug  7 01:00:47 2025 GMT
        Subject: CN=a1462688-60f1-4388-aba1-8b55eaaa6c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:7a:52:2b:0c:1d:c9:5d:2a:13:3f:de:98:
                    56:3b:b6:ab:63:86:5a:d2:1c:4e:09:6c:95:9e:92:
                    43:01:67:76:24:79:a7:fa:63:78:00:61:d5:22:83:
                    21:6c:6c:1e:4e:e9:1d:a7:8f:15:9f:1f:07:82:8b:
                    af:67:7c:fa:34:a1:c6:39:04:3e:ec:67:41:d3:f6:
                    d4:4e:a8:16:ca:99:36:5c:64:a9:b0:63:d8:0c:4e:
                    59:58:84:ea:a8:e7:12:69:dd:ac:87:3d:ec:05:87:
                    c5:13:d9:2f:e7:f4:09:1a:e3:b4:9a:7e:00:36:b4:
                    96:33:69:cc:98:8c:55:62:35:f3:01:d2:9b:ba:6d:
                    f2:4a:7c:92:99:a0:79:8d:20:ed:d8:ba:11:d3:2c:
                    0b:e5:f3:4b:f0:60:88:78:fc:d1:f4:2b:7e:b0:cf:
                    c6:76:08:06:63:58:7f:e4:f5:b0:a9:a4:e2:05:4c:
                    46:54:3d:04:98:d4:4e:de:ac:cd:37:06:39:44:f7:
                    10:59:49:fc:01:15:35:c2:bb:83:3e:e5:60:5c:d9:
                    a3:c5:0b:ba:1f:a0:ae:6b:d1:57:07:90:9e:b5:f5:
                    58:6d:6e:25:2b:ec:f1:74:84:3d:e7:6b:e5:a0:e4:
                    09:fa:be:d1:08:29:9c:cc:f9:30:fd:92:8f:95:c3:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:32:55:8A:6B:10:A9:EA:CC:EA:34:60:6B:25:E2:77:77:B0:B2:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/ac15673f-f6e2-3e8a-8633-387708e8f25e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.105.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:1c:69:ca:d4:1f:ac:3e:8c:73:9b:57:a4:f3:11:fd:00:ab:
         50:96:93:3c:45:3f:c8:7d:6a:55:75:f1:6d:1b:dd:47:f4:6f:
         48:84:87:86:b4:64:0e:45:2e:51:b6:e8:22:5c:08:87:24:85:
         6f:a6:a7:36:86:64:92:cb:e4:a1:20:2e:8c:99:d6:0a:09:cb:
         a8:ae:d7:0f:4c:27:1c:b5:c3:da:0e:a8:90:d7:f9:c5:c9:5d:
         d1:82:f7:16:6a:9f:bd:1e:5c:9e:9e:61:7f:98:62:af:24:bf:
         2b:84:af:71:fd:24:1d:c8:ea:c1:3d:60:95:73:b0:ce:42:bc:
         eb:b1:d8:b6:17:f1:04:a9:ec:01:e5:f2:08:f3:21:37:e5:7b:
         6e:ff:ea:84:c4:b7:94:c1:f3:f4:c6:10:db:90:fd:f6:d8:47:
         30:fe:27:80:ce:d6:0e:c9:4e:93:ad:ec:7d:80:91:f8:b2:68:
         8c:e1:87:72:d7:58:f9:7a:2d:18:99:d5:bb:b9:4b:07:31:7c:
         84:2b:b6:32:74:37:b3:b9:de:69:9c:6d:30:ed:2a:26:26:41:
         6d:3c:31:ea:4f:d5:7b:76:75:cd:06:41:4b:bd:7c:06:bf:74:
         16:fa:06:73:01:be:f1:86:6d:3c:c8:70:da:32:e3:2b:1a:e3:
         74:ff:a3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 08:38:52 2025 by rpki-client