Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
File:                     974ff7ae-7cf3-3c09-bdbf-28451326b447.roa (raw, json)
Hash identifier:          wcal1LwT3/ttS1HdXlFDGSf4otexYguyPPUxGo9oymk=
Subject key identifier:   22:15:27:37:31:61:5E:DD:6C:2B:88:8D:52:3A:C8:56:F0:E7:C1:F4
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F43285849ABB4A7330BA2328F8E99F840
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:a7:33:0b:a2:32:8f:8e:99:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=5db97366-a0af-46dd-ad02-3a9902bb2204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6e:48:09:10:49:35:8b:30:09:c6:3c:d8:88:
                    9d:fb:d4:f5:85:a6:46:80:f4:de:2d:49:54:f8:74:
                    63:c8:97:23:eb:17:fe:fc:5b:f3:1c:4e:ca:28:e3:
                    79:e2:51:c6:6c:4b:71:44:b6:7d:e3:6d:10:c1:24:
                    18:45:a2:75:28:e6:23:f2:51:28:d2:83:cc:72:9f:
                    b1:74:e9:e9:7e:4f:c4:6a:fb:d2:d3:15:86:4b:e7:
                    3f:92:2a:0b:55:3b:23:40:98:04:d2:15:51:4e:f5:
                    6e:6d:03:be:b0:e9:dc:8e:30:81:6a:6e:a1:80:cc:
                    ae:a4:98:14:bf:c3:c3:1e:5c:e1:84:2f:a5:29:d0:
                    95:33:41:b3:f8:5e:ab:5f:fb:89:67:64:27:c7:33:
                    90:94:49:f9:0a:64:8e:4b:ad:40:be:a5:6a:17:5e:
                    ea:ba:9c:ce:98:11:ab:e4:79:93:59:20:72:c5:ee:
                    48:c3:fc:df:20:65:8c:3a:37:bd:ee:1c:11:c2:21:
                    e4:45:71:df:7b:0e:44:c7:43:2a:12:27:81:a3:42:
                    fe:2e:df:ed:30:e2:b3:38:02:08:e8:b1:64:00:e8:
                    d8:df:51:7b:c7:df:0a:70:5e:44:04:e4:0c:53:d1:
                    42:e9:41:bd:c9:a6:5f:25:e8:fa:98:7b:12:5d:44:
                    fe:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:15:27:37:31:61:5E:DD:6C:2B:88:8D:52:3A:C8:56:F0:E7:C1:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:18:55:d6:7b:3f:83:28:44:fb:75:a4:73:57:67:29:75:89:
         83:9a:a5:9e:72:68:b3:67:4d:32:d9:70:56:de:16:93:31:da:
         68:c2:84:ec:ed:c0:8c:e6:97:d7:7f:2a:52:fe:c2:b2:88:85:
         12:5b:61:25:a0:ba:e5:bd:0f:e4:3d:a7:36:11:43:7f:6e:a2:
         29:2d:b6:ff:ff:c6:95:3c:8a:78:68:27:08:56:40:2a:c0:e3:
         9b:6c:2d:62:5b:f9:ae:27:78:b9:ca:1c:c5:4a:93:5d:97:22:
         15:21:3d:4c:33:e8:35:95:9b:d6:89:10:d2:58:33:01:89:e9:
         50:ce:0b:9e:93:9d:98:ba:d6:44:84:6c:ba:9e:b3:e4:85:ec:
         02:f4:7a:4a:1b:54:8c:3e:fe:05:c3:e8:93:78:7a:9d:e1:d3:
         39:53:0d:ee:24:2a:be:c7:d3:9a:3d:f6:d8:59:5f:39:79:35:
         67:fa:d3:a8:e3:17:20:43:25:c4:05:53:7b:a4:88:d1:3e:ef:
         87:b3:1b:cc:8d:66:f6:40:5c:0d:a8:32:f8:ee:bb:90:de:c0:
         9c:43:13:ed:75:2a:18:40:9e:59:29:a0:a1:ff:ef:4c:97:e6:
         76:32:47:9a:99:14:9d:20:46:9a:dc:be:fe:28:0b:59:ad:72:
         77:8b:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 04:29:28 2025 by rpki-client