Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9484b0d8-31f5-3945-b838-63089bb5c498.roa
File:                     9484b0d8-31f5-3945-b838-63089bb5c498.roa (raw, json)
Hash identifier:          iR4KhNYKHTv3xJcYqj0tUUOnQWxoe7Uka5ZYq/Es8NQ=
Subject key identifier:   4A:0C:81:2E:34:19:7C:2C:FA:FF:52:3F:F5:1A:9E:1E:01:74:5A:D5
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285849B14A040756D86D81489AD840
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9484b0d8-31f5-3945-b838-63089bb5c498.roa
Signing time:             Wed 30 Apr 2025 01:00:47 +0000
ROA not before:           Wed 30 Apr 2025 01:00:47 +0000
ROA not after:            Tue 29 Jul 2025 01:00:47 +0000
asID:                     834
IP address blocks:        173.214.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b1:4a:04:07:56:d8:6d:81:48:9a:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 30 01:00:47 2025 GMT
            Not After : Jul 29 01:00:47 2025 GMT
        Subject: CN=27828818-189a-45ad-b5d5-c11ca3e113f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:ae:da:bc:d1:c8:29:72:57:b3:5a:57:4f:
                    0b:f9:2d:3f:1c:21:56:a4:b4:04:33:45:55:50:69:
                    08:8d:70:33:ed:65:27:e8:47:e4:d7:2f:69:24:8c:
                    8e:41:b1:1c:2a:f8:7c:e3:c1:6d:f8:b0:f9:8d:01:
                    a9:01:6c:b3:b1:32:da:bc:30:49:27:36:b5:1a:55:
                    f8:5a:da:b7:0d:54:4c:6a:26:57:1f:cb:9a:cf:bb:
                    99:d6:f4:4d:c7:18:4e:7d:60:17:6d:28:10:57:a1:
                    6f:70:df:b6:dd:f4:14:f9:0c:c6:71:4e:8c:65:ac:
                    e3:ab:70:5f:8d:07:79:85:8e:37:55:e9:3d:00:f8:
                    45:cc:03:ec:fa:e5:c0:72:d7:be:20:f6:7d:5e:7f:
                    ae:2c:26:67:ff:a9:91:2c:e8:f3:70:f7:f9:bc:81:
                    b2:14:cc:fc:74:a7:ef:63:39:7a:6a:e7:df:34:2a:
                    48:73:f8:26:c4:c0:67:8e:d7:dc:9d:7d:db:36:db:
                    72:c7:2c:09:90:83:84:80:40:f9:66:a5:a6:42:2a:
                    13:14:57:ce:22:cc:a1:dd:8f:c3:fb:b5:7f:62:ab:
                    f6:0c:04:7e:98:6d:8d:41:39:94:72:1e:1c:02:45:
                    ec:e0:54:f8:e6:c9:e5:21:b8:fb:1d:73:ec:ea:91:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0C:81:2E:34:19:7C:2C:FA:FF:52:3F:F5:1A:9E:1E:01:74:5A:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/9484b0d8-31f5-3945-b838-63089bb5c498.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.214.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d0:7a:76:e9:97:58:5d:ca:15:10:ef:b8:02:5e:52:b8:d5:
         1c:c6:7c:d2:a6:30:29:0e:ed:4a:19:f4:67:0e:c2:1b:a3:2b:
         a3:2e:b7:3b:00:7b:1f:eb:8d:64:06:33:4a:67:ea:48:09:05:
         1f:75:be:e6:71:c2:4f:86:56:ee:11:17:ef:38:e1:30:50:74:
         cb:54:c4:37:4d:fc:0f:bf:6d:c8:2f:f3:2b:87:0a:6a:8e:26:
         81:67:e2:75:22:d6:65:e1:95:f9:7d:49:f0:46:b7:c0:18:36:
         fa:36:6c:a2:43:71:ec:89:5f:ef:40:52:35:64:31:1a:30:ab:
         bb:c0:9d:40:84:92:74:6c:db:7b:2e:51:77:53:6b:3e:6b:85:
         0a:1a:fd:d1:f6:94:2e:fa:ce:c5:2e:6a:7d:67:e4:05:5c:92:
         5e:9b:bf:f1:25:1a:6d:77:b8:3f:77:29:b7:ad:5e:7f:a9:e9:
         6e:c4:53:b0:84:8b:5d:18:3e:b8:a9:ea:e7:bc:0b:1e:b9:7e:
         1a:53:58:05:04:24:d8:38:c7:24:ea:e4:3c:7a:08:69:b4:ad:
         ab:3f:6f:40:ba:5b:4f:f8:ec:2d:97:d9:c3:56:92:31:46:a3:
         0a:4b:45:79:a2:2c:ef:d1:6e:3e:5b:01:3f:bd:d0:b4:e5:b3:
         db:5f:22:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:47:20 2025 by rpki-client