Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
File:                     4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa (raw, json)
Hash identifier:          CTwTRFJXbrSaL2Y34OwCIIs26UH+NSLfkfbrgen9UYM=
Subject key identifier:   AF:C5:B0:AC:29:4C:94:5C:91:81:BB:55:32:73:6B:60:4B:A1:8C:5B
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285849C79F603D18A0FEC1DB5A7080
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa
Signing time:             Thu 08 May 2025 01:00:47 +0000
ROA not before:           Thu 08 May 2025 01:00:47 +0000
ROA not after:            Wed 06 Aug 2025 01:00:47 +0000
asID:                     137443
IP address blocks:        198.44.172.0/23 maxlen: 23
                          198.44.172.0/24 maxlen: 24
                          198.44.173.0/24 maxlen: 24
                          198.44.174.0/23 maxlen: 23
                          198.44.174.0/24 maxlen: 24
                          198.44.175.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c7:9f:60:3d:18:a0:fe:c1:db:5a:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: May  8 01:00:47 2025 GMT
            Not After : Aug  6 01:00:47 2025 GMT
        Subject: CN=a418764c-97a5-48df-ac69-ed4d37bbb4d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b1:04:d9:7e:b1:ef:28:48:c4:a2:b6:05:a5:
                    4c:0d:64:a0:53:fb:15:c7:28:4d:c4:fd:ee:68:89:
                    50:3a:db:9a:2e:13:8e:5f:20:68:eb:30:5a:38:c1:
                    cc:da:c7:17:93:46:cc:2e:84:87:d4:3f:88:05:52:
                    44:d0:45:6d:48:28:9e:ad:fc:30:ef:43:cc:6a:72:
                    cb:49:76:1f:13:64:54:20:0b:fe:fd:1e:d4:a8:2c:
                    97:9d:e6:5c:c8:63:b7:b4:32:ce:ab:75:fb:87:f0:
                    79:96:90:a0:5f:0b:23:e1:7d:80:e9:de:5f:9a:08:
                    1b:50:e3:48:d9:14:e7:bc:01:80:85:15:08:cb:40:
                    88:a9:64:d3:fb:f8:44:2d:fe:ec:fd:53:82:55:0e:
                    13:d8:a1:36:11:80:a9:12:f8:fe:1f:f3:db:e6:9e:
                    d8:ae:c0:b9:94:d9:d6:6d:c5:97:d8:ce:eb:22:58:
                    a5:c9:06:df:f0:8f:19:62:d0:19:0a:13:c9:de:d8:
                    d8:2e:4a:e6:34:1c:e2:f3:c0:28:fc:e4:57:bc:c6:
                    e5:05:3b:f5:e0:7e:33:2f:a1:47:e9:cb:93:df:3d:
                    01:f6:bf:90:15:2a:7f:68:4e:42:1a:5e:ba:7b:fd:
                    78:7c:23:66:87:bf:55:4b:d0:35:00:fc:a2:da:1c:
                    0c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:C5:B0:AC:29:4C:94:5C:91:81:BB:55:32:73:6B:60:4B:A1:8C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/4e2cd7fe-733c-343e-8ec9-91664ca73f8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.44.172.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:fd:28:33:d3:1b:81:b9:33:c8:5c:c3:3a:22:52:88:e0:7f:
         68:4c:d1:57:2e:b9:39:de:a5:91:ae:3f:5d:6c:62:00:c9:50:
         8b:3e:b4:4c:d2:6c:57:a3:a9:53:ee:ae:28:08:54:29:3d:78:
         56:7c:e2:ba:a9:36:d8:ff:1e:ec:89:fc:d2:7c:f9:be:9d:2a:
         24:b0:e9:74:2a:7a:84:5f:17:f9:87:70:df:5a:48:18:f3:89:
         79:49:82:5e:e4:f0:eb:8d:a2:24:0d:8e:40:e5:49:0d:d8:8c:
         63:b9:1a:5d:51:dc:67:21:79:c5:d7:9b:f9:16:8b:b8:03:5f:
         9c:7b:3c:98:c0:de:17:2e:66:43:28:c0:07:38:98:48:30:2e:
         13:bf:9d:95:d5:88:9a:a3:a7:c9:66:71:3f:b5:77:93:9a:70:
         4e:9a:14:c5:cf:87:e6:17:22:4a:fc:32:6b:2f:c1:ae:dc:b4:
         cc:2b:90:62:dc:41:e5:db:43:7a:d5:fe:5f:22:1c:fc:1c:ec:
         71:f4:c6:68:3d:e1:69:f1:60:ff:85:12:a0:c7:fa:97:e4:04:
         ce:50:5a:9d:06:30:ef:40:e6:0b:18:67:55:01:00:87:8c:b7:
         a2:ab:d4:12:17:71:9f:91:3a:3a:b3:28:9d:eb:d9:88:79:9e:
         76:1f:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 05:27:21 2025 by rpki-client