Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
File:                     b1ccda99-02e2-3927-8808-445f6fc6880d.roa (raw, json)
Hash identifier:          rTuQ0Ye9uQAEEtW+oQYpGZmUSk4xgfUKwGJJRGWcM4M=
Subject key identifier:   05:9B:A2:82:A5:FA:91:FB:98:9A:B5:C3:F3:40:6C:17:5B:40:A1:2B
Certificate issuer:       /CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
Certificate serial:       010D0C9F432858498CFF1F50D4478D395FE18D60
Authority key identifier: 06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     22135
IP address blocks:        173.242.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1f:50:d4:47:8d:39:5f:e1:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9499a7-dd73-4d28-b3ad-2813e1421c64
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=b319de12-6c2b-4296-8a24-eb8047d5ad78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f0:9d:ce:68:93:f9:c4:a0:b4:58:9a:20:24:
                    d4:94:4e:d9:dd:33:38:f0:05:3f:f4:98:fa:1f:6d:
                    7d:ec:2f:72:fc:1d:76:b5:5e:19:57:be:9e:b1:92:
                    2f:a3:fe:a2:7f:63:6f:60:64:cb:0e:05:62:31:a6:
                    7e:58:12:3b:0e:63:1f:df:f2:1f:4d:e3:80:c3:e4:
                    17:5d:f0:15:32:0e:b8:0a:dc:9e:77:c5:43:aa:fd:
                    29:41:41:b9:12:9a:1a:7b:79:42:5e:77:ef:54:6b:
                    15:86:36:bf:fd:4e:02:f4:76:d7:91:83:d8:2b:55:
                    28:05:5c:85:1a:d6:f0:22:79:79:bf:46:02:2c:29:
                    ba:e6:eb:f0:2c:dd:c5:39:4b:5d:b2:34:55:8b:ab:
                    1d:e2:65:f9:63:14:0e:6e:01:61:a9:02:59:fb:64:
                    98:0c:4e:c6:c5:df:16:de:fc:62:11:1b:ab:86:ad:
                    98:2c:9f:c8:96:a5:bd:73:5a:16:15:ee:01:9d:a7:
                    8f:cc:f5:9c:9d:c8:80:cd:dd:a6:8e:de:cf:28:37:
                    06:ee:c6:b7:09:7b:34:2c:b2:63:6b:0b:1b:f4:5f:
                    99:81:cf:a6:b0:a0:0d:5e:a8:8e:8c:c5:74:f2:fc:
                    96:64:12:07:44:29:9e:4c:d6:4e:f0:34:2f:a0:4b:
                    4d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:9B:A2:82:A5:FA:91:FB:98:9A:B5:C3:F3:40:6C:17:5B:40:A1:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/b1ccda99-02e2-3927-8808-445f6fc6880d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64/5d9499a7-dd73-4d28-b3ad-2813e1421c64.crl

            X509v3 Authority Key Identifier:
                keyid:06:EB:41:40:D5:10:2C:DB:7C:0D:8C:E2:7B:07:16:5A:DB:30:92:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d9499a7-dd73-4d28-b3ad-2813e1421c64.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.242.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:70:45:9d:56:5a:f5:76:ba:55:4f:9f:5c:57:e8:a3:e8:80:
         cb:b7:c0:dc:f3:5d:47:aa:bf:27:8e:36:1e:de:28:f6:12:80:
         09:b7:0b:c0:cd:58:ad:fb:63:3e:ef:dd:90:3a:e9:12:df:1e:
         af:21:22:a7:54:0e:75:1b:58:57:45:b3:c6:a9:2e:b7:22:0b:
         a0:fa:64:28:2a:03:6e:87:38:9f:c5:30:ca:40:d1:2a:74:f3:
         95:19:5e:b2:00:1d:01:7a:2c:9e:b5:6e:f2:93:70:ca:5c:54:
         a9:2b:b2:6e:17:03:ea:55:a7:63:01:69:18:22:bd:d7:1d:fd:
         9d:cc:b3:9d:59:f4:ed:f1:15:7c:a8:f7:9b:52:28:28:dd:3c:
         05:6b:83:7c:ea:5c:53:38:8d:17:9f:cb:fd:e2:89:a4:77:80:
         3d:7c:8f:df:7b:56:17:b4:6d:85:68:e7:ce:8c:e8:ca:06:3a:
         1e:49:b3:f2:6f:66:90:39:17:a1:55:14:a7:75:03:b7:6b:f6:
         41:43:da:e9:93:32:03:91:35:77:0e:a7:a5:43:0c:84:fc:48:
         f3:79:8c:1c:f2:5b:10:28:b6:74:98:6f:64:dd:97:14:fa:f1:
         84:f9:0c:fb:9d:6f:68:60:1d:dd:9c:1c:3f:25:c0:87:15:1c:
         fc:3d:62:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 11:27:57 2025 by rpki-client