Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
File:                     cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa (raw, json)
Hash identifier:          wWBNuzXfzH9oTx4xEK4SY/H7JZttMbxqKbvDZpXDYis=
Subject key identifier:   11:99:F0:FB:02:89:1C:CB:C4:7C:47:67:D2:91:F3:8E:4C:B1:C9:E4
Certificate issuer:       /CN=05437be8-72be-4526-bdc7-04862534a038
Certificate serial:       010D0C9F43285849C4D4C11CA5E2175C794BBA80
Authority key identifier: C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     399035
IP address blocks:        162.142.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:c1:1c:a5:e2:17:5c:79:4b:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05437be8-72be-4526-bdc7-04862534a038
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=2576fc74-2edd-4ef1-b8c2-81e02cd5b660
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a4:78:c4:f3:fd:85:44:79:f3:3d:2a:b4:42:
                    08:82:ed:42:c2:33:58:ab:78:fd:f3:7a:ae:46:81:
                    7f:8e:bf:c1:2b:eb:bf:77:04:bc:0f:c4:60:3e:c7:
                    f4:39:6b:1b:8b:de:78:09:a9:66:97:ca:92:d4:73:
                    32:9a:4a:b9:44:39:8e:c1:39:21:39:38:22:b7:87:
                    ac:c3:42:4c:a0:b7:6d:9a:f2:70:10:32:c7:69:6d:
                    ce:cc:9d:6b:cd:36:81:03:bf:40:23:df:83:82:d8:
                    36:8e:36:ca:ec:29:51:d1:39:1c:5a:8c:31:24:64:
                    8a:c0:94:57:56:91:3b:8f:d4:eb:e6:0d:71:ba:0c:
                    51:56:fd:21:52:9e:34:06:ad:74:cc:ff:cc:ef:9b:
                    4a:8f:90:a4:f2:36:78:ae:81:a0:7d:e5:bd:6c:7d:
                    4a:92:ea:80:f6:b6:88:75:70:66:fa:4b:ef:60:e6:
                    3c:be:d2:c8:51:12:2b:7b:4d:ec:de:10:c6:40:61:
                    75:82:2b:61:aa:48:ce:e7:1e:2f:80:67:f7:90:7d:
                    a1:5d:07:92:1a:6e:2f:ff:ef:ed:8a:7b:10:56:4f:
                    da:e6:5b:9d:44:9f:d5:b5:3c:16:67:14:6b:77:81:
                    32:a3:15:15:cd:01:cb:75:96:76:f9:38:1d:96:5e:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:99:F0:FB:02:89:1C:CB:C4:7C:47:67:D2:91:F3:8E:4C:B1:C9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/cf5bcca4-5a5c-301c-9c8d-ef2e12035755.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038/05437be8-72be-4526-bdc7-04862534a038.crl

            X509v3 Authority Key Identifier:
                keyid:C3:03:49:15:9B:48:48:BC:E7:B0:E3:1B:32:7F:83:D7:97:DB:AF:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05437be8-72be-4526-bdc7-04862534a038.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.142.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:82:a1:55:d9:b1:36:4e:ee:95:cb:13:15:bc:a2:06:1c:21:
         38:70:b4:4a:64:e4:54:75:ca:60:11:6a:34:82:ab:21:06:db:
         0d:3f:7b:1f:f8:6d:58:a1:90:9d:f5:fc:69:0d:c5:77:fb:cc:
         3e:43:18:52:45:47:f6:19:fd:57:6a:80:d1:c9:7e:1a:10:22:
         73:91:f2:f7:95:81:0a:9c:fe:f9:de:f9:ba:fe:4c:37:be:ad:
         62:46:7e:83:62:c7:40:25:d9:83:c9:ea:cc:d9:5e:d3:3f:f2:
         3d:8e:16:3f:71:61:ee:f3:ff:25:d4:e6:e1:14:00:3d:9c:c4:
         37:e7:05:64:ac:77:78:6f:bc:42:1d:91:6c:67:08:1a:f2:7f:
         77:e0:40:83:1a:bf:ee:29:d6:81:74:d0:1f:ad:3f:7c:f2:d6:
         f5:28:48:94:99:9a:73:5b:80:30:f5:c4:73:35:ca:68:d4:19:
         53:71:6a:5d:ef:a1:ff:46:97:ad:d9:3f:9a:c3:dc:a2:25:88:
         b8:ef:a6:b8:f5:52:5c:04:e7:08:f9:f1:3d:de:17:74:ad:eb:
         09:14:35:a2:a5:0e:05:18:73:16:c7:ab:15:20:9f:45:3d:7b:
         8c:3a:a4:c3:ff:55:07:29:2d:3e:5d:6e:5c:2c:ef:34:0b:a8:
         1e:63:9b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 03:55:42 2025 by rpki-client