Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
File:                     e01fe237-d6f0-3180-bbea-fe38f284c022.roa (raw, json)
Hash identifier:          lHHmvOhdjWB23It/DAtw/a7cYT/CuL0WSaVlJAxbJ3I=
Subject key identifier:   2B:AF:87:58:07:27:2C:7C:A2:08:71:13:6B:C3:8C:71:73:0C:B0:33
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F43285849AD1A0010798195ADEC7CE080
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa
Signing time:             Mon 28 Apr 2025 13:01:00 +0000
ROA not before:           Mon 28 Apr 2025 13:01:00 +0000
ROA not after:            Sun 27 Jul 2025 13:01:00 +0000
asID:                     18934
IP address blocks:        142.202.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ad:1a:00:10:79:81:95:ad:ec:7c:e0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Apr 28 13:01:00 2025 GMT
            Not After : Jul 27 13:01:00 2025 GMT
        Subject: CN=55ad2cd0-945a-4f07-93c4-49ba88e4a145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:dc:d7:aa:55:72:39:cb:06:eb:7e:f2:0c:8a:
                    2b:59:24:45:cb:42:d2:fd:a5:87:19:71:be:5a:b1:
                    81:0e:cd:a6:41:68:51:f6:62:2d:62:5f:ef:96:b9:
                    b9:bb:8f:48:df:d7:84:81:e6:d9:c5:34:4e:37:8c:
                    66:a5:9a:9c:2d:54:e1:2c:ad:19:f0:48:81:e3:73:
                    3e:ba:ba:fe:ef:94:34:fc:e5:82:02:0f:f5:d5:ad:
                    59:bc:99:2d:f2:7d:2f:24:c0:b2:05:16:38:df:23:
                    d9:66:c4:8c:c8:f1:87:68:31:49:75:ab:3a:e3:08:
                    a3:be:5d:fb:d0:a0:92:35:57:1f:4c:50:d1:49:d8:
                    e8:90:a6:af:f5:cf:40:4c:81:25:d7:ba:1b:91:21:
                    86:aa:97:44:a6:dc:27:ef:2b:6b:2f:4d:2f:a9:15:
                    a6:12:67:ce:35:74:1c:60:a5:4a:c0:d4:0b:9e:e0:
                    13:60:a0:ca:64:7e:5a:34:81:ad:14:9a:10:9b:ee:
                    85:d4:0e:27:77:76:99:9a:70:f4:4f:9d:e4:6c:83:
                    59:37:2a:58:0f:b8:2f:3a:18:2a:3d:2e:55:f9:1f:
                    13:17:2c:b8:38:a0:97:4f:c4:f5:f3:86:7d:ed:67:
                    15:4f:8d:c3:2b:56:81:4d:e1:45:11:c2:6b:29:fe:
                    3e:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:AF:87:58:07:27:2C:7C:A2:08:71:13:6B:C3:8C:71:73:0C:B0:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/e01fe237-d6f0-3180-bbea-fe38f284c022.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:c2:fc:1b:9d:f2:42:a6:13:b4:9f:06:9f:6b:99:28:12:de:
         df:3b:e8:a2:94:f8:3d:4c:28:03:37:40:08:e6:4f:d9:e0:88:
         6a:f6:43:9c:5b:8f:e9:ca:d9:b2:94:f4:a7:7c:ce:8e:b6:cb:
         30:16:ac:00:d1:11:a7:42:8f:93:1a:b3:b1:10:6b:99:dd:61:
         d9:03:9a:7c:af:2f:20:5e:82:09:34:cc:16:70:fa:b2:f6:89:
         74:05:18:5b:a8:ca:09:b9:84:0e:fe:21:66:16:9d:7a:8b:37:
         82:f0:72:c1:ac:4c:09:b4:98:6e:79:2a:4f:4b:4b:f3:9e:17:
         c6:f0:bf:fd:3c:e5:3b:20:77:18:e8:e3:4b:9d:78:a4:1f:cd:
         67:05:49:f7:07:6d:7f:31:62:c2:34:77:3d:19:cb:32:a6:46:
         12:83:df:5c:e7:12:09:35:45:16:df:1d:3a:b8:10:3d:f3:38:
         5a:35:8e:85:31:3d:b6:4d:4a:3c:86:e5:ba:6a:c5:b2:cf:37:
         23:c8:de:33:2c:8e:04:99:5c:a5:46:5a:e7:74:da:5d:c4:4e:
         79:6b:47:2a:77:2a:81:34:4e:6c:68:5f:23:4a:0e:7c:ed:90:
         d9:64:7a:21:e5:7c:53:bf:e9:38:a9:80:24:3b:a7:f4:4e:5d:
         4f:60:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 06:34:49 2025 by rpki-client