Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/76548cae-139c-33af-aa60-a19dbb8ef83b.roa
File:                     76548cae-139c-33af-aa60-a19dbb8ef83b.roa (raw, json)
Hash identifier:          4IR4kWwR0ihv5rm7KIpMOiNzUyQDHhshuE3kY5nIs+0=
Subject key identifier:   82:C9:BF:3E:2F:83:47:CD:51:EB:53:DC:6B:B7:7B:D9:65:06:91:CE
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A151A97F032A448E56200
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/76548cae-139c-33af-aa60-a19dbb8ef83b.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11164
IP address blocks:        163.253.44.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:15:1a:97:f0:32:a4:48:e5:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=4a2abed4-f773-452f-8700-2c327969e1af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:56:f1:6f:4e:51:67:6a:cb:90:83:d3:19:0d:
                    13:85:3a:fd:57:0d:4c:45:bf:e2:3d:25:1b:7e:cf:
                    e2:7f:f3:d8:07:12:32:3c:a9:3e:89:f6:f8:5d:1e:
                    3f:05:61:28:5b:2d:d3:bb:d6:76:4f:97:40:c4:1b:
                    7d:ed:15:77:44:6b:02:66:e6:cd:6b:05:c0:a0:a0:
                    57:e8:75:a4:12:f6:9f:32:01:9e:f8:f1:fc:55:53:
                    09:fd:04:b1:04:2f:d1:4a:fe:35:8e:e2:08:72:25:
                    63:32:66:24:28:b9:21:e7:b7:e1:18:dc:88:7d:fc:
                    e1:36:0d:d2:0a:63:2c:b5:fa:95:7c:e2:0d:f9:30:
                    ee:34:79:f6:da:e6:19:b9:39:09:f3:c1:b8:23:36:
                    1e:2c:1f:0b:af:b6:92:55:4a:76:32:50:84:56:a5:
                    42:91:d0:b5:99:21:cf:ee:61:6a:ec:d3:7f:92:e5:
                    55:4a:09:d6:ca:61:53:a4:7f:8e:ac:1a:8e:ae:4f:
                    d8:0b:d2:f4:af:2a:7b:f8:66:01:a1:69:c0:38:0f:
                    73:e6:16:89:00:fa:7d:fc:18:20:6b:8c:6a:ce:9b:
                    ae:cc:af:f3:23:e3:b7:67:25:67:c5:31:3f:e3:b9:
                    a5:17:49:8f:46:94:09:57:c3:76:95:57:3b:6b:d7:
                    95:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:BF:3E:2F:83:47:CD:51:EB:53:DC:6B:B7:7B:D9:65:06:91:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/76548cae-139c-33af-aa60-a19dbb8ef83b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.44.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:e6:c3:3d:9f:f1:1a:a5:44:a1:79:00:d5:0e:ff:10:e0:94:
         90:6a:1c:94:06:3c:61:16:27:a4:3e:b0:54:5d:fb:33:3a:a9:
         99:75:6c:c0:6d:a5:de:97:7b:80:24:92:35:10:71:31:c2:b8:
         2d:a1:6b:1d:86:e0:14:e8:d7:34:1f:e6:7c:18:56:f1:72:2f:
         1a:db:a9:f7:20:b6:b0:da:92:84:52:4b:7a:88:80:7f:9b:7f:
         67:2f:30:cb:56:58:31:65:6b:84:64:3e:71:f4:4a:c5:eb:83:
         e0:eb:17:0a:3c:43:dd:ba:db:2d:82:e8:e3:09:61:b1:7b:0d:
         06:95:0f:8c:c4:ae:0c:82:11:5e:cc:f9:b0:38:ec:82:62:4e:
         d7:3e:49:b1:39:54:56:41:70:fc:cc:3d:1d:89:5f:bd:41:ad:
         0a:58:6a:32:ff:40:da:16:17:61:c3:3e:02:ad:a9:09:b9:ad:
         03:50:7e:1a:b2:50:29:9d:46:31:6b:0d:33:e9:85:5f:90:5c:
         7b:a9:0e:aa:46:1b:ad:5e:8f:9b:a1:d6:94:ca:e0:53:40:bb:
         be:e2:67:8c:59:24:63:d9:21:56:d2:7d:54:9c:5c:17:01:b6:
         72:5a:02:3c:09:04:00:a8:ce:71:95:65:01:c6:db:84:86:bc:
         d0:a4:b7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 21:16:10 2025 by rpki-client