Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa
File:                     70af7514-4dbc-3963-8c42-158baab7fb82.roa (raw, json)
Hash identifier:          oIpcFjwhYR4jxspaQSghjaW3ge0d6bp+mgqIqV3ESM8=
Subject key identifier:   59:1E:16:34:DC:11:C7:F4:01:6D:0C:C1:D2:23:CD:4E:D8:1F:61:CE
Certificate issuer:       /CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
Certificate serial:       010D0C9F43285849D633359C1967E75861C0D3E0
Authority key identifier: A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa
Signing time:             Tue 13 May 2025 06:20:00 +0000
ROA not before:           Tue 13 May 2025 06:20:00 +0000
ROA not after:            Mon 11 Aug 2025 06:20:00 +0000
asID:                     25655
IP address blocks:        173.241.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d6:33:35:9c:19:67:e7:58:61:c0:d3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a944cd-51a8-4d10-ae57-724de26a1d62
        Validity
            Not Before: May 13 06:20:00 2025 GMT
            Not After : Aug 11 06:20:00 2025 GMT
        Subject: CN=049afd38-3a70-41df-aeba-a34348770b5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f0:c0:70:a5:c5:54:75:0c:85:06:3c:50:cd:
                    08:bd:f1:bd:4a:fc:e4:fb:98:e1:f3:ea:70:50:00:
                    6a:51:2c:35:40:d0:2f:f1:53:cf:58:4c:8f:8c:1c:
                    53:01:fa:4d:c0:ba:80:a6:d9:e7:7e:87:3a:a1:2f:
                    3e:fc:31:06:18:cc:66:69:df:9e:f5:66:8d:90:d8:
                    cb:5a:b2:a2:6b:88:38:72:bc:27:70:72:94:34:40:
                    38:aa:94:2d:90:f5:36:dd:72:8b:2e:c9:cd:f3:95:
                    36:df:4c:9c:d4:dc:31:a9:36:89:99:d8:79:a3:ff:
                    8a:c7:e0:44:fc:44:f4:53:a5:32:cb:3a:69:92:5d:
                    20:96:7c:61:dc:2b:a8:d9:0b:cc:6a:ab:5a:5f:73:
                    22:af:c8:5d:4b:75:4f:af:9e:5a:47:65:b7:81:93:
                    ef:8a:7e:0b:62:dd:17:7e:a3:8b:22:24:8a:c5:39:
                    7d:6a:2c:69:87:5d:ff:01:d0:b8:b8:69:6b:fb:92:
                    51:fa:ce:71:8b:a1:4a:f1:85:e3:cf:fa:16:4c:4f:
                    3c:2f:d4:95:d8:97:1f:46:34:40:58:a1:9c:82:8b:
                    7c:90:3f:68:6c:41:67:3e:fa:33:b8:37:4f:5f:37:
                    eb:c1:fe:03:15:ba:bf:86:43:c2:c6:94:7b:3c:0c:
                    22:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:1E:16:34:DC:11:C7:F4:01:6D:0C:C1:D2:23:CD:4E:D8:1F:61:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/70af7514-4dbc-3963-8c42-158baab7fb82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62/c3a944cd-51a8-4d10-ae57-724de26a1d62.crl

            X509v3 Authority Key Identifier:
                keyid:A8:60:9F:B9:17:C5:EA:2E:CC:FE:2F:5B:43:53:D1:C2:5F:AD:7D:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/c3a944cd-51a8-4d10-ae57-724de26a1d62.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.241.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:db:b5:e2:b2:ca:38:25:4c:fd:45:af:ec:e2:63:f5:32:85:
         ec:bb:18:54:89:f5:21:7f:9f:99:78:a7:fd:00:e7:5e:a1:84:
         c6:48:e3:4f:d8:89:db:4c:11:6c:4d:7f:b7:73:bd:51:02:b1:
         e7:ae:de:83:f7:c5:ca:c3:9c:ca:e9:47:89:dc:6a:5e:19:26:
         02:89:7b:80:2f:54:7a:7d:0c:70:b7:e5:cb:a2:54:ba:97:b8:
         ab:73:d3:f9:3d:b4:4f:37:4a:24:52:82:31:62:d6:a2:a5:21:
         3b:e2:3f:39:0d:4d:2f:ae:81:bd:62:ff:1a:eb:a8:a3:b2:4c:
         f4:71:5c:cc:6b:7a:c0:8a:96:12:11:8e:74:d2:f9:67:72:ed:
         af:00:d0:26:93:6b:f9:09:7c:ae:91:3f:b7:0f:a4:1a:69:54:
         50:94:bc:fd:c6:7c:62:d4:ed:c0:d9:0b:2e:9b:64:9e:81:8e:
         d2:d6:fa:8c:62:ef:5e:53:ff:58:94:5f:34:1f:fb:4f:00:64:
         14:a2:14:d8:5f:7a:7d:8f:68:2e:b0:b1:c6:8e:ac:14:75:57:
         32:90:af:70:e9:f0:fc:46:1f:ac:9e:9e:f8:f8:84:8b:b6:0e:
         bb:29:93:78:a8:f2:1d:87:be:0d:79:6a:7e:d1:20:bf:73:a5:
         1d:2b:09:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 13:37:10 2025 by rpki-client