Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
File:                     5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa (raw, json)
Hash identifier:          NhK5hGtiTHp8vSfgK4YWpFJ2071PILf++TBV3X0lAv4=
Subject key identifier:   E4:C4:1C:28:E1:F3:35:DA:1A:36:44:70:84:7F:74:F3:F5:E4:16:95
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849D85FAC3DF094681AF7188100
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        143.223.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ac:3d:f0:94:68:1a:f7:18:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=7105b1fd-d0a8-4abe-9a1c-b7702031bbd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:30:d7:df:ca:c9:b7:1f:10:a6:f9:6e:fe:97:
                    5e:07:4a:9b:b9:3f:0e:b5:a3:62:3e:a3:b9:1d:b9:
                    43:5e:e3:ed:d9:cc:05:93:5a:a8:bf:0c:88:9a:92:
                    ce:08:78:54:d8:bf:f8:9a:0a:c6:63:d3:38:a1:3e:
                    85:ba:3a:a7:ca:94:25:53:29:b1:2c:17:a5:86:8d:
                    a0:fc:cf:19:85:99:b6:c2:7d:9a:3b:4e:ee:d8:e3:
                    f3:40:b5:68:bc:7a:4d:fb:64:fd:0a:0f:ad:0d:a4:
                    e5:cb:6e:88:4d:45:d3:23:7c:df:67:ad:7e:2c:47:
                    91:87:de:03:8c:7c:bd:67:9d:a8:be:de:91:2f:24:
                    5c:d2:b0:cb:27:7b:ca:3b:83:9b:b2:f7:85:34:3a:
                    36:6f:44:ac:c7:60:17:fe:34:ea:7e:f5:7f:c7:c3:
                    36:c9:05:5c:d9:b3:27:e4:44:eb:16:da:92:6b:ec:
                    a9:ab:71:90:52:79:c5:66:66:ee:7f:4e:46:63:8a:
                    5c:ca:e5:6a:18:5e:65:b8:ca:85:89:d8:b5:56:b5:
                    e7:73:2f:6e:bc:cb:8e:ff:0a:33:0a:26:1d:3e:52:
                    e1:a9:4d:43:9c:1c:e1:61:e1:36:1d:da:93:7b:f0:
                    6e:5c:fc:7c:d2:04:a8:3a:88:86:a6:36:8d:1d:c5:
                    6e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C4:1C:28:E1:F3:35:DA:1A:36:44:70:84:7F:74:F3:F5:E4:16:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/5dcadb9b-86c2-3fdd-b9fa-ba155fb3bf1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:af:ac:dc:13:90:55:22:24:37:ad:67:91:dd:e5:89:7e:2b:
         c5:34:0e:5b:5b:d7:9a:45:a1:42:2c:b1:8a:6e:57:c8:0b:64:
         86:9f:64:ac:f3:6a:e9:83:4b:6f:17:f4:4c:4b:62:a2:11:e3:
         b9:0a:46:44:d6:a9:0c:c3:cb:80:96:60:0a:4a:3c:32:ef:8c:
         af:76:06:e3:c2:d1:74:86:13:b4:9e:c1:fa:ee:5c:af:7d:06:
         1b:54:4b:4d:bf:cb:cd:c6:5f:20:ef:c7:d4:35:97:97:10:9c:
         ac:e2:92:99:0b:e4:38:90:e5:f7:20:b4:2f:f0:df:93:7a:e7:
         76:51:ee:7d:58:d5:aa:19:d1:98:1b:1d:78:bc:49:4f:1d:78:
         dc:3f:91:72:f0:a7:34:99:31:ad:d9:14:bf:70:76:f5:65:49:
         c4:a1:73:5b:0b:f5:c7:6c:97:14:8a:20:df:41:da:3b:0b:b0:
         5a:2c:1c:23:a1:e1:3f:d3:41:44:4a:d0:72:8d:77:f1:3c:5d:
         c8:61:b4:f8:a0:21:49:b7:f3:b5:bf:de:d6:19:a8:bb:d4:e1:
         f9:dd:51:c8:91:4e:cf:c8:37:01:08:eb:88:ee:af:e1:b4:80:
         1b:e5:76:ad:af:a5:a2:02:f9:5a:bc:74:6e:7a:4b:ee:e2:0b:
         0c:b5:e2:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:29 2025 by rpki-client