Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bada1dd6-5f0b-3750-8056-3deec5c83779.roa
File:                     bada1dd6-5f0b-3750-8056-3deec5c83779.roa (raw, json)
Hash identifier:          yyDvJ/0HfJemyLx6VFYzt+7lJY+dqrxPUjMTRE/2ksg=
Subject key identifier:   CA:D8:8D:24:ED:3C:DA:5C:E6:F8:EE:57:5D:30:77:A1:0B:73:6D:1D
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285849BF3F61F7D4E0A1E16A47D680
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bada1dd6-5f0b-3750-8056-3deec5c83779.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     396356
IP address blocks:        162.255.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:61:f7:d4:e0:a1:e1:6a:47:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=3a0d09bc-9172-4d57-af17-67cdc2f31303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5b:3b:8d:22:fa:20:5c:42:a6:f3:41:b8:e7:
                    eb:88:16:7d:b8:c1:24:f0:8f:9f:bb:ff:56:78:2a:
                    0a:04:bf:5f:1e:30:c4:fa:45:11:fb:dc:e6:f6:53:
                    dc:ec:ae:02:ed:ec:80:e6:28:d8:3a:d6:96:42:ab:
                    eb:9e:d4:c0:78:7b:6d:eb:66:53:67:f0:bc:d7:18:
                    c6:c8:cd:f9:dd:ec:c4:34:fb:59:35:71:48:94:44:
                    a1:94:65:dc:24:61:6d:2a:7c:19:22:85:d3:5c:e4:
                    56:6e:d7:23:a3:60:36:51:c9:6c:a0:8d:16:00:94:
                    24:a3:c0:c4:b9:7d:e1:e8:ba:cf:92:d3:07:52:f1:
                    41:97:ab:f6:21:fd:da:b1:b3:97:82:13:bd:f5:d6:
                    31:42:44:19:2e:bf:22:37:b1:c0:92:13:20:8b:df:
                    c4:84:db:27:3f:7a:47:1d:a5:16:44:18:82:af:44:
                    2d:f5:ad:5f:25:25:18:a3:5c:8d:fa:24:99:98:69:
                    9c:ae:31:75:d8:b4:3c:a3:64:02:a6:6a:a3:e2:0f:
                    31:bc:17:ca:59:83:bc:ab:f2:bc:17:0d:3c:c2:1c:
                    04:36:bb:e9:3d:5d:7a:d1:10:9e:dc:a8:a5:80:fd:
                    31:bb:3f:f7:05:db:e2:3e:34:ce:29:1a:78:ea:e8:
                    95:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D8:8D:24:ED:3C:DA:5C:E6:F8:EE:57:5D:30:77:A1:0B:73:6D:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/bada1dd6-5f0b-3750-8056-3deec5c83779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:59:17:66:17:c2:9c:42:bf:c1:da:f0:9e:54:71:3d:1c:
         48:b1:60:0d:e1:18:e1:e9:39:e3:3e:3d:0c:e5:96:b5:0d:78:
         8e:fe:79:a0:90:94:43:09:73:49:8a:03:d3:a8:2b:2e:44:38:
         02:a5:de:6c:9d:f0:26:6d:26:26:14:1d:6a:11:25:b7:b7:ad:
         a6:f8:92:c8:83:1b:b7:88:b1:41:b1:6a:28:ad:84:8e:bb:f2:
         a8:ce:ce:ec:5f:c3:58:2d:d9:76:c4:06:7c:09:ca:72:f7:a9:
         dd:24:75:5f:96:7b:31:d4:80:33:9b:01:09:4f:68:38:04:58:
         a1:bb:f5:52:e4:ad:d9:6b:3a:0a:69:3b:9a:13:60:4d:50:7b:
         b4:b9:f7:30:68:57:2b:f8:80:c5:d3:1a:e6:01:fe:d7:3b:b9:
         ef:b3:9a:98:3e:a6:01:05:3d:b4:bf:99:63:fe:37:3c:d9:b9:
         87:56:1e:54:09:55:72:7d:2a:d8:ef:a2:b2:51:e5:99:3b:c6:
         f2:d3:5f:87:da:42:52:be:2a:0f:20:ea:c9:b3:2e:64:92:92:
         c9:04:37:78:43:0a:94:a4:97:49:c1:37:29:3d:ea:04:0d:62:
         ba:7d:43:21:16:52:00:85:4c:c5:42:1c:90:6c:87:2b:5a:00:
         cc:40:e1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 02:57:16 2025 by rpki-client