Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa
File:                     48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa (raw, json)
Hash identifier:          sODK3Yr6cxD863vApq8d0jx3+v6ruNCruB6sdhVx3UI=
Subject key identifier:   FC:56:B5:80:DA:35:1B:C2:61:C2:B5:D8:5C:EB:36:ED:1A:72:50:19
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BAC736C3405B207F52C000
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        142.250.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 05 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c7:36:c3:40:5b:20:7f:52:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=58b9a972-7948-47f6-91a6-58c359ed1a8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:35:ee:2d:f4:eb:73:73:dd:8d:a5:76:dc:
                    47:f4:bf:8c:48:d0:5a:89:ff:1a:49:58:c2:df:0c:
                    a0:21:74:49:e6:e4:5a:c1:30:7f:f7:1c:55:66:97:
                    aa:2c:1c:c0:da:8a:4b:8c:28:cd:e7:ba:38:da:bf:
                    9b:80:c6:0c:c9:35:61:13:60:93:a7:d7:e9:e2:76:
                    e5:92:41:09:8d:97:ca:9e:72:4c:4a:b1:89:e6:a6:
                    0f:f4:3b:20:8d:18:14:fd:dc:ec:34:9d:d3:34:5d:
                    60:e8:07:3c:c7:5a:73:2b:8a:9b:65:a0:1c:d9:05:
                    d4:bb:e8:c5:65:e4:e0:23:aa:70:dc:58:32:f9:03:
                    86:e0:66:7e:60:bc:78:0b:44:1d:a8:1f:4b:b2:6f:
                    9b:45:06:5d:d4:86:8d:6b:bf:00:e3:ff:d3:dc:3c:
                    da:91:24:d6:70:4b:1e:60:b9:de:2f:5f:bb:2f:39:
                    79:b9:76:bf:fc:97:cd:68:5a:f8:21:a3:02:46:b7:
                    23:48:fb:ee:5d:b1:44:1d:b5:55:4c:1b:16:34:ea:
                    d7:6b:b3:00:72:26:73:83:85:52:15:39:be:5b:c6:
                    3a:a2:4f:eb:89:d7:69:a8:11:8b:a0:be:e2:e1:c2:
                    a1:c1:87:fc:4e:fc:ee:34:67:38:fa:e7:78:63:04:
                    a5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:56:B5:80:DA:35:1B:C2:61:C2:B5:D8:5C:EB:36:ED:1A:72:50:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/48a8d3df-9c4e-3937-96fb-5dbdc5e42492.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.250.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:30:64:16:7d:f2:8e:ec:32:d6:16:7f:54:1f:fc:8f:c8:ab:
         13:8d:12:18:69:ae:0d:6b:0f:42:0a:5d:49:06:fd:66:18:96:
         20:c2:52:05:fe:eb:ee:06:0c:b6:85:26:bb:4d:e2:92:aa:ca:
         87:23:72:9c:66:4c:11:86:35:9c:03:bd:fd:a0:7b:8d:60:b5:
         cf:c1:08:47:08:be:91:78:13:d3:ec:25:e3:96:97:e9:98:89:
         3c:70:e3:8d:c2:ab:45:97:a5:13:7c:bf:a0:70:32:b6:9f:fe:
         0d:c8:e3:53:1a:dd:83:d1:49:31:69:75:53:55:7c:15:5c:f2:
         25:7a:41:c7:ce:3e:55:b3:a7:97:82:4a:ec:29:3f:2b:60:2f:
         cb:59:b1:0b:95:c7:c7:f5:f3:e8:93:39:fd:a4:ba:43:a4:2d:
         17:2a:c3:68:10:e8:97:60:88:68:3b:db:45:dc:26:34:e1:3d:
         9d:d7:2c:2e:96:8a:31:05:79:93:92:3c:55:55:7d:91:2f:d4:
         a1:b7:a8:b1:1b:9f:ea:f8:18:ed:0d:37:89:e2:c1:f9:73:2c:
         49:aa:1c:35:88:b3:34:42:5b:c8:b1:ed:27:a1:2d:dc:5f:10:
         61:0c:42:6f:eb:69:e0:bd:93:89:19:68:05:94:70:66:42:b5:
         74:16:f7:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 10:29:28 2025 by rpki-client