Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa
File:                     7e31f3de-8642-3397-8931-556523bd10ad.roa (raw, json)
Hash identifier:          Gum92zPJW0D8tUMEWYeaIuYoBf+8uT1tJrQ+dRQyCwc=
Subject key identifier:   2D:35:43:B3:78:2B:10:F9:26:93:4B:ED:CA:42:08:3B:A7:FB:3D:84
Certificate issuer:       /CN=c3927d26-c229-496a-8940-c88a834f5196
Certificate serial:       010D0C9F432858497279B904FED8829153E2C280
Authority key identifier: DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     12119
IP address blocks:        140.141.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b9:04:fe:d8:82:91:53:e2:c2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3927d26-c229-496a-8940-c88a834f5196
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=2446683d-1068-420a-9b33-34c4c856b378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:63:e0:c1:5d:ff:e3:f9:a6:95:72:44:29:8c:
                    0b:46:1f:4f:5f:3e:1f:df:b4:07:cb:87:d0:36:4d:
                    d3:c7:6a:10:ba:ea:f1:33:f6:b0:ac:0b:50:ee:68:
                    de:ec:1a:93:7d:c5:4b:a8:51:1c:7d:1a:6a:ad:25:
                    be:1c:67:f4:8f:7a:39:b6:a3:30:72:2c:1a:45:7e:
                    9c:80:c4:82:66:95:3f:3e:64:02:81:49:66:ec:47:
                    9f:34:ff:4f:20:40:dc:cd:06:7e:c2:28:77:7f:9c:
                    9d:9a:6d:7c:54:14:6d:ca:0a:c5:90:28:fd:75:6b:
                    e3:6d:84:88:7e:a6:28:79:67:a1:50:a9:37:cb:fd:
                    0e:cc:6c:cc:fb:f8:a8:03:ed:45:57:59:40:a1:2c:
                    2f:5b:d7:2c:64:2d:87:f2:6c:68:c2:63:38:55:1b:
                    98:e6:d3:e0:f1:f2:f9:4b:ef:ea:0e:03:02:07:76:
                    ec:fc:f2:f7:5d:42:1a:ec:5c:f4:ee:cc:ff:12:6e:
                    fd:97:8a:6f:59:60:a8:57:cd:21:84:c0:b8:c7:b8:
                    cb:4d:49:80:81:ef:d4:a7:de:1e:9b:3c:8c:d9:68:
                    d6:30:d8:f1:20:b9:29:71:be:40:3b:36:92:e0:3a:
                    b4:cb:ef:9c:84:fe:8c:29:02:57:17:33:67:03:c5:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:35:43:B3:78:2B:10:F9:26:93:4B:ED:CA:42:08:3B:A7:FB:3D:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/7e31f3de-8642-3397-8931-556523bd10ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196/c3927d26-c229-496a-8940-c88a834f5196.crl

            X509v3 Authority Key Identifier:
                keyid:DE:20:BB:65:C8:A2:DD:8C:6D:02:8C:C9:24:31:D9:0C:60:C5:E7:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c3927d26-c229-496a-8940-c88a834f5196.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.141.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:1c:99:14:f6:d6:29:16:4b:60:88:09:98:42:e5:fd:3d:92:
         b0:e6:97:d4:c3:69:90:f9:53:3d:b4:ff:83:23:bf:2f:12:1d:
         91:17:d2:6f:1d:b9:79:77:49:d5:5a:32:ec:ae:28:f1:e4:8d:
         9b:ff:1a:19:02:02:32:e0:6c:4e:bb:02:7e:9b:87:3b:19:a4:
         32:dd:b4:48:2a:f5:49:83:44:03:cc:93:af:da:3f:87:7d:0d:
         f7:f6:c8:52:8d:13:d5:6b:4b:4b:9b:fc:bb:23:6e:6e:99:73:
         a2:40:31:73:0e:e3:ea:50:2c:ca:3c:3c:36:c4:3a:48:e7:9e:
         c8:a8:89:82:21:08:49:2e:fb:ec:e4:0c:56:5e:70:f1:57:7d:
         cb:ea:b6:90:8c:ee:d6:ce:6d:20:7b:29:6a:69:0d:cc:d0:08:
         42:c8:39:0f:86:ca:e8:80:4d:15:85:3b:e3:ca:2e:f2:ca:f2:
         5b:c3:22:c1:cb:a7:7b:6b:db:6f:3c:b7:c2:78:3f:e9:9b:33:
         1d:ec:26:6f:8c:be:69:df:c5:16:d6:b0:37:45:1c:05:b7:b4:
         2a:a1:00:e3:37:50:7c:d1:68:5c:28:d3:80:f5:45:c8:3c:6f:
         9c:bd:27:ed:a8:56:99:93:98:8c:a7:36:f3:c0:a6:b4:f1:be:
         be:b6:73:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:32:38 2025 by rpki-client