Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10d99432-e377-3887-a385-03ed95665f32.roa
File:                     10d99432-e377-3887-a385-03ed95665f32.roa (raw, json)
Hash identifier:          le+f+OsJNiFsDii1uMPQASIUWA7krfEF2lj4IwbQApM=
Subject key identifier:   EA:5E:54:44:6D:C1:B6:0A:CA:EB:D1:EC:49:FA:4B:E1:EC:8F:CA:11
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F6A47903270D383A646E0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10d99432-e377-3887-a385-03ed95665f32.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     20115
IP address blocks:        174.80.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:6a:47:90:32:70:d3:83:a6:46:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=c2ab7120-78b8-47e1-9f2e-5a0fa5f4b502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:21:d0:e3:24:3c:45:ca:d7:71:7a:8f:7d:c9:
                    b6:71:36:12:e4:71:7a:63:12:b8:49:cd:19:3a:4f:
                    ff:d5:37:09:db:3e:cd:38:7b:a7:5b:45:e0:e5:21:
                    da:f7:40:84:9c:13:81:6b:ae:1b:a4:63:38:40:16:
                    04:6b:8c:ca:50:38:f0:79:b9:b2:88:76:c8:ce:e3:
                    c8:88:67:04:fa:db:b6:3a:71:f5:41:52:95:b3:e9:
                    0d:20:1e:18:15:20:e3:92:2a:c4:0e:b9:92:0e:d5:
                    2f:7e:8f:40:c2:6d:f2:0d:c1:9f:cb:a3:86:31:58:
                    b5:c6:de:46:b3:2a:bb:f2:8f:32:41:f9:8d:86:ec:
                    40:3d:67:d9:39:79:5a:5f:d7:03:18:46:a8:06:85:
                    26:d9:40:c1:1b:22:6f:74:1b:3f:32:9d:e6:e2:13:
                    85:fd:75:64:4f:f0:f6:d1:51:56:0a:b3:29:0c:1f:
                    ee:7c:50:bd:57:63:64:d4:7b:79:1f:e5:a9:a5:3d:
                    23:b9:e3:96:43:a2:f9:5b:b9:89:8f:32:30:06:70:
                    3e:18:f8:a7:78:c0:d2:a8:77:e6:b4:99:15:f2:3f:
                    98:66:c4:87:17:f2:88:70:56:f9:ed:69:58:ce:9a:
                    82:e3:35:d6:3f:09:2e:98:3c:b2:d4:72:9e:ed:84:
                    91:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:5E:54:44:6D:C1:B6:0A:CA:EB:D1:EC:49:FA:4B:E1:EC:8F:CA:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/10d99432-e377-3887-a385-03ed95665f32.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.80.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:80:a7:9f:e5:ce:9b:a3:bf:f9:12:10:fb:6b:71:c5:b7:e5:
         ba:71:aa:7f:91:4c:53:7c:30:42:bb:0d:7e:69:39:3a:f5:c3:
         27:68:91:8f:da:cd:45:c8:d2:05:a7:d2:1d:81:33:8b:6a:e7:
         1b:03:bd:dd:a7:49:77:6f:49:43:73:8c:74:e3:1d:3b:94:5c:
         d5:3b:1c:47:02:fd:81:7a:f6:ac:39:af:dc:da:9b:69:e8:b5:
         3c:d9:e3:77:ba:95:1f:18:e6:84:b3:aa:79:5d:b2:f6:d6:14:
         9d:ef:1d:90:2d:39:10:ba:cf:8b:26:f5:ce:2c:b8:d1:3a:bc:
         2e:42:f6:98:2e:f4:0f:f2:f3:bd:18:07:c4:b3:da:ba:78:65:
         ea:93:82:0a:76:4a:f0:34:5f:a6:0e:e8:ff:c5:98:f1:35:9f:
         7f:e7:a6:57:d2:09:0f:21:36:63:f4:19:0f:15:45:34:c4:58:
         b2:bb:6e:b9:e3:8e:e5:d2:3b:07:6a:b8:5c:6f:9b:27:b2:b1:
         80:d2:fd:ae:45:6f:9e:f8:2a:fd:62:03:ed:b4:2c:1f:f6:87:
         83:77:43:e7:94:c9:0a:4a:a5:a5:2a:e5:4f:94:ce:92:57:32:
         08:64:00:42:91:25:92:2a:b9:bb:2e:16:42:3c:ac:61:45:58:
         ae:67:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 01:43:33 2025 by rpki-client