Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c9a4f445-a7ba-3d6a-ae16-2a6ffdf449fd.roa
File:                     c9a4f445-a7ba-3d6a-ae16-2a6ffdf449fd.roa (raw, json)
Hash identifier:          eVCxYbEjKyl1+XRIt2S1Tn0i2RDbIdkujrH7xYKxSHE=
Subject key identifier:   D5:A1:01:76:33:E6:80:77:10:0C:A0:18:D3:FF:44:72:0D:95:E4:B0
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C6B32CA99CD315D7950A9F8
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c9a4f445-a7ba-3d6a-ae16-2a6ffdf449fd.roa
Signing time:             Wed 16 Apr 2025 20:02:59 +0000
ROA not before:           Wed 16 Apr 2025 20:02:59 +0000
ROA not after:            Tue 15 Jul 2025 20:02:59 +0000
asID:                     31898
IP address blocks:        131.229.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:6b:32:ca:99:cd:31:5d:79:50:a9:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 20:02:59 2025 GMT
            Not After : Jul 15 20:02:59 2025 GMT
        Subject: CN=230774d5-a600-452a-aae0-b6c36bfbf70f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:68:cf:24:fc:4c:e3:aa:ab:bd:e7:44:ae:
                    55:e9:61:02:fe:fb:d8:d0:ac:f7:79:ec:27:b4:f4:
                    3c:c5:06:c6:a3:d6:3c:18:3c:9e:70:c2:8c:a3:5c:
                    db:aa:93:64:4a:dc:5b:f0:08:dd:2a:d3:d1:2f:23:
                    04:89:29:74:bf:b3:9f:3b:3d:d0:50:bf:e7:9d:67:
                    83:31:03:98:9e:ea:e7:21:45:95:2c:89:c7:2d:6a:
                    6c:a1:ee:9d:a8:15:a8:9d:78:2e:14:ed:6d:b4:74:
                    fd:76:65:07:8c:67:d5:d1:75:66:b8:47:2a:69:e4:
                    b3:99:99:45:f0:1c:73:0d:30:ef:1a:50:e5:9d:6b:
                    51:12:5c:07:74:d0:57:49:93:51:d6:bb:60:8b:a0:
                    0d:a5:e3:bd:5e:f3:b5:aa:c5:bb:5f:16:a4:40:b6:
                    44:bd:09:0b:63:99:b1:b5:c9:4d:37:b1:f8:bd:84:
                    db:31:ae:1f:74:f8:96:63:48:e1:b7:e9:75:b4:f2:
                    47:c1:b9:ad:3c:16:aa:77:39:ac:14:16:6a:17:5e:
                    fe:34:f4:51:2e:d1:c4:54:cb:17:6e:15:7b:22:22:
                    9e:be:48:89:d4:af:78:ff:77:c8:4f:1f:71:4d:83:
                    60:36:0a:8b:53:a9:84:df:26:37:57:f6:17:e5:32:
                    20:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:A1:01:76:33:E6:80:77:10:0C:A0:18:D3:FF:44:72:0D:95:E4:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/c9a4f445-a7ba-3d6a-ae16-2a6ffdf449fd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:99:62:34:3d:17:96:ed:b8:c5:fe:7b:6b:d8:33:35:23:6b:
         99:a2:83:4b:4c:bd:63:a4:96:6e:75:b2:70:43:69:5d:4a:2e:
         3d:c4:0d:ed:68:1e:3a:7e:0f:44:8f:b3:80:f2:96:d0:9b:f2:
         da:25:03:f9:3a:fa:2d:14:66:54:93:4e:8b:67:ae:cb:57:01:
         75:27:ec:94:77:42:d1:18:91:55:9e:c5:5e:07:f7:6e:a5:b5:
         91:1c:01:38:73:74:ad:1f:dd:6a:95:b4:e9:2b:2c:cc:0e:81:
         95:44:c3:51:de:46:75:d1:22:41:eb:d5:42:a9:c1:a6:5b:30:
         70:f2:3c:a6:6b:64:8c:aa:91:72:b0:9e:f3:ed:f3:34:81:1a:
         99:81:68:03:29:b3:73:a3:81:52:e8:9b:da:8a:b2:06:4b:0a:
         1a:67:d3:d1:69:d7:6a:be:32:7d:95:b9:05:7b:67:b4:68:bf:
         27:41:55:32:eb:e0:f3:0f:ec:d3:f2:4a:2a:b6:b6:63:15:a8:
         ef:d2:4e:57:e2:a6:1f:37:9d:2c:39:e6:b5:a0:22:fe:76:11:
         4a:f9:f1:13:5f:d3:28:c7:78:2b:2e:40:13:f3:d3:a0:55:1d:
         00:37:82:6c:71:0f:c0:34:96:a2:fc:15:81:a9:34:fc:72:29:
         9c:bd:36:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 11:57:11 2025 by rpki-client