Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
File:                     67818fc7-8ab6-3138-abb2-01b0da986df0.roa (raw, json)
Hash identifier:          /EnFN/OuiGolhfifommK7MR3W5P5c+HucNTI0qVedPk=
Subject key identifier:   1E:E5:40:57:8D:92:08:30:AC:51:10:2A:82:5F:05:03:15:9C:A4:56
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F43285849D636E5415D379381A3818280
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa
Signing time:             Tue 13 May 2025 06:27:25 +0000
ROA not before:           Tue 13 May 2025 06:27:25 +0000
ROA not after:            Mon 11 Aug 2025 06:27:25 +0000
asID:                     25655
IP address blocks:        173.241.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:36:e5:41:5d:37:93:81:a3:81:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: May 13 06:27:25 2025 GMT
            Not After : Aug 11 06:27:25 2025 GMT
        Subject: CN=c83151df-6154-4aac-8b75-4c2d5fae629a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:8e:d4:40:95:b5:c7:d4:34:47:81:be:77:ec:
                    33:dc:18:7b:d2:cb:4a:0a:ca:26:4f:fb:fd:57:20:
                    c3:df:9e:78:6a:5b:e5:22:27:88:02:ad:57:6f:10:
                    4c:38:1b:b6:2a:b0:2d:36:78:57:76:72:1f:ac:b4:
                    8c:a6:97:44:02:2d:7a:e2:35:04:93:6b:91:4f:67:
                    b4:a4:03:db:e0:1e:7b:5f:2d:fc:cb:f8:af:0b:68:
                    50:4c:d3:41:44:52:9f:11:20:44:46:2d:ba:b6:2c:
                    ff:00:03:55:2d:7d:3b:de:3d:bc:29:33:a8:d6:bd:
                    79:38:ea:f4:b0:6b:e2:29:8f:fd:b7:79:d2:08:71:
                    7b:0a:8a:6d:db:77:02:7f:99:94:76:88:90:41:d8:
                    57:19:0b:3b:c2:c4:3e:3b:f8:d5:81:6c:c5:76:77:
                    10:0e:81:80:78:db:8f:35:48:40:16:d4:8b:0c:0e:
                    b0:ef:25:18:4e:02:d4:9a:c5:fd:2d:d6:20:f7:ce:
                    d8:af:fc:1b:72:05:75:57:7a:6b:c2:e1:4a:6c:fc:
                    8c:7d:7c:79:04:17:df:07:e7:20:0d:bb:1c:de:13:
                    fb:eb:f5:a5:83:97:ce:07:96:0f:73:9d:e0:54:eb:
                    77:a2:7d:5d:9a:27:49:b9:32:b6:92:a0:eb:dc:7c:
                    69:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E5:40:57:8D:92:08:30:AC:51:10:2A:82:5F:05:03:15:9C:A4:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/67818fc7-8ab6-3138-abb2-01b0da986df0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:ab:e2:77:4b:7c:d3:d8:d0:52:39:50:71:c2:77:5b:c8:e5:
         69:ee:8d:5b:a7:9e:1b:fc:6d:13:4f:83:0c:06:d2:17:55:51:
         8f:fa:30:6b:59:ac:48:79:ff:d0:d6:72:e6:cb:f0:4b:08:5e:
         27:76:c7:12:d4:5c:26:1f:7e:7b:d6:4e:2c:15:77:b1:99:05:
         20:f3:c4:8c:51:3d:4d:06:7c:a2:03:7d:61:58:0e:3d:ce:74:
         a2:1f:1a:de:92:2c:cc:de:46:60:7d:00:73:cc:6c:44:34:f1:
         be:76:23:f0:5d:d6:2e:7a:48:9b:70:81:72:a8:cf:2b:60:6f:
         f0:7f:34:f4:18:0a:ca:38:d8:49:6c:24:1e:d2:23:1d:31:e4:
         03:d0:19:13:1d:50:2b:71:7a:6d:46:b1:43:ee:a8:a5:14:0d:
         b4:e6:1d:81:49:c6:3c:42:94:3c:4a:2f:4c:d8:d2:e8:5b:cc:
         67:ef:10:ba:79:6b:09:49:bb:4e:53:a4:2f:03:ba:a4:ee:e6:
         83:69:e9:7a:83:51:a0:f1:08:ee:9f:13:d5:eb:f4:09:72:f9:
         11:89:8c:0c:c7:86:b4:4c:e1:fd:7d:20:15:d7:cd:ce:46:a4:
         01:d7:d4:74:0a:b1:d0:a8:be:5f:13:17:44:42:b5:43:8b:b2:
         07:a1:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:22:39 2025 by rpki-client