Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d93ccd96-763e-363c-964a-79d3b8982441.roa
File:                     d93ccd96-763e-363c-964a-79d3b8982441.roa (raw, json)
Hash identifier:          CdlPQ6zY/IkokM3cOoVe6mItO7VTTilW02UOAZXKuB0=
Subject key identifier:   33:4D:BF:92:CC:92:5F:47:49:7B:AF:E9:73:EE:43:6B:B1:7C:04:4A
Certificate issuer:       /CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
Certificate serial:       010D0C9F43285849B6DF5580DA2F3B371EA68D72
Authority key identifier: DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d93ccd96-763e-363c-964a-79d3b8982441.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     139070
IP address blocks:        57.140.184.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:55:80:da:2f:3b:37:1e:a6:8d:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9f29a16-e7b1-40c8-87bc-34e2c5624862
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=732815fe-69e1-4d8a-bcb2-5ebf6b379b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:30:fe:3d:28:b4:d4:a5:a9:b7:34:b0:81:58:
                    76:e7:25:cb:a7:ef:9f:0d:e8:44:2b:b7:80:7a:8c:
                    8c:c8:17:13:f2:74:49:c5:ae:36:5b:13:4c:04:c1:
                    44:7f:f6:28:aa:c1:91:4a:d3:c9:be:9a:e0:c2:99:
                    73:80:d7:61:71:a9:0f:b8:b9:a2:9b:ce:fb:98:b8:
                    65:c0:66:ea:cf:87:32:ae:cc:77:c4:72:88:08:71:
                    59:b2:24:39:93:91:1e:27:7e:59:fa:c1:e0:fd:69:
                    16:23:bc:ea:da:57:91:ae:58:1f:52:7e:fc:e9:28:
                    9c:93:a3:d4:c0:4c:d7:36:f7:83:df:89:fc:76:4d:
                    c7:2a:68:76:0b:27:c3:61:31:ff:79:9e:57:7a:7f:
                    4d:2e:72:4c:0e:d4:02:3c:63:39:a7:29:2c:9d:c4:
                    4e:46:0f:d2:b0:67:7a:69:5a:9a:40:5d:1d:7c:88:
                    80:a0:42:58:9f:11:17:ae:4d:c7:7d:5c:ca:0a:30:
                    72:57:42:76:b3:7f:fe:e7:c2:0a:b8:3b:3b:24:03:
                    e8:69:e9:21:ee:69:43:47:c1:d8:f3:f3:45:17:f3:
                    d5:3c:60:c9:a9:17:cc:de:9b:6a:f5:fd:c3:b3:68:
                    c8:9b:a8:89:36:54:ab:fb:90:1b:f3:ef:7c:f9:22:
                    e2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:4D:BF:92:CC:92:5F:47:49:7B:AF:E9:73:EE:43:6B:B1:7C:04:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d93ccd96-763e-363c-964a-79d3b8982441.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862/d9f29a16-e7b1-40c8-87bc-34e2c5624862.crl

            X509v3 Authority Key Identifier:
                keyid:DB:FA:83:FE:6D:96:CD:CC:6C:DE:3A:15:B4:20:98:9D:63:D7:B6:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f29a16-e7b1-40c8-87bc-34e2c5624862.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  57.140.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:ac:42:be:83:d0:72:22:d6:63:2e:d2:f1:48:20:bc:d4:
         04:0d:2c:82:da:87:c3:f3:c8:7c:1a:98:67:05:7c:f3:76:e0:
         f3:44:8c:cc:09:16:98:a1:de:02:1d:65:de:f0:37:0d:51:69:
         7c:84:75:ac:a1:f2:31:08:c1:02:40:f4:49:c4:27:90:98:38:
         cf:e3:70:67:b3:55:25:a5:30:5a:5f:6d:0b:85:17:6c:15:35:
         7d:4e:ba:0d:dd:85:06:86:e3:bd:50:73:81:f7:5b:7d:ae:0d:
         1a:4e:df:a7:56:c7:9f:a6:58:1e:11:8f:07:3b:36:0a:5b:95:
         a9:bd:ff:55:ac:1c:bb:fa:ac:34:dd:f2:b5:c2:82:d6:2e:14:
         96:ef:e4:79:0e:78:e8:76:5f:1d:e1:80:11:ce:9e:3e:25:a0:
         60:89:18:7f:8a:18:18:9f:ed:e7:04:5c:30:9d:f5:b0:3c:ae:
         34:8f:54:47:df:72:58:dd:c6:a8:a5:ab:25:d2:62:ab:38:0e:
         eb:c4:b6:cf:ae:b6:e4:a4:30:3b:42:71:a3:37:6d:43:11:a6:
         8d:f4:01:e9:cb:af:bf:a5:75:07:19:70:79:72:14:b7:f9:8e:
         64:4b:e3:4c:73:6c:84:6e:ec:73:29:ea:09:1f:08:c1:2d:a8:
         b6:30:cc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:50:14 2025 by rpki-client