Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
File:                     2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa (raw, json)
Hash identifier:          p+2GcFGibf9lJM72R01/fPBmdz7hV7GsvSyom+eH4D4=
Subject key identifier:   5F:F7:2C:9D:2A:0C:85:77:77:33:E7:EF:A1:93:9C:89:A9:5E:1B:0E
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C24806DECA6D715F6A6A600
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     12079
IP address blocks:        153.114.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:80:6d:ec:a6:d7:15:f6:a6:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=afcd1107-1213-4a95-9fc9-2f39fe5c047c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:16:43:c0:9a:1c:f7:e1:c2:ff:bd:7c:b1:65:
                    ca:63:07:bc:66:98:2c:fa:8d:99:c6:a6:f0:a1:03:
                    61:c1:eb:1c:8d:67:31:77:1e:2c:a7:38:af:83:8a:
                    6a:12:9d:07:5b:c6:32:9a:b9:54:a6:b5:32:39:2a:
                    b1:b9:f6:f7:e2:3f:2b:21:e7:c4:19:92:e0:11:af:
                    e5:4d:40:69:45:3b:dc:e2:27:96:e3:d5:a5:26:97:
                    6f:87:17:67:24:bf:e3:89:2d:c2:5c:74:39:8e:83:
                    7f:c0:a2:8f:c7:09:61:d7:43:29:53:10:ed:f1:8e:
                    a7:95:d6:b8:f2:55:cd:a6:0c:5b:e4:7c:96:cb:f0:
                    35:2d:d8:80:79:de:2a:f3:64:b8:9d:7f:c6:cb:b7:
                    4f:1f:63:79:63:8f:aa:ac:a9:2d:fd:79:58:26:b1:
                    49:ed:53:10:1a:cc:ef:01:8c:84:64:b6:3d:14:01:
                    a1:84:55:84:4f:20:f5:22:34:97:42:30:86:fe:18:
                    fa:a2:ef:3b:7c:96:29:b5:bd:8c:19:9a:cd:40:57:
                    a8:82:7b:f2:3d:58:25:cc:4f:3e:81:75:64:e2:65:
                    11:63:a2:8b:c5:5c:ea:86:5e:ce:e4:48:28:47:4d:
                    00:fb:5d:ca:9b:02:02:7e:ad:80:eb:15:b1:32:b5:
                    49:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:F7:2C:9D:2A:0C:85:77:77:33:E7:EF:A1:93:9C:89:A9:5E:1B:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2057dcf9-3a9b-30b0-a792-0116b07dd31b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  153.114.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:9d:cf:1f:9d:7d:d3:d7:26:18:79:a2:0f:c7:a2:08:ae:5e:
         fb:8c:a2:d9:3d:bd:c5:fb:83:d4:e4:72:84:bf:7c:94:b2:20:
         62:5a:89:d8:fb:be:47:5b:77:94:1e:7b:d9:6d:a9:87:42:86:
         92:cd:52:c0:6f:25:62:41:fd:4a:1a:75:00:58:b2:cc:69:6c:
         3d:94:fc:c5:6c:c7:90:da:36:fe:56:f5:e2:4b:79:38:b6:5e:
         a7:e3:50:8f:14:cf:94:18:a7:d5:e5:d9:39:df:f7:cd:3c:3c:
         71:59:3a:54:71:57:ca:12:c3:c1:38:49:e2:20:bd:9e:ca:30:
         43:fc:3e:83:92:22:a7:ee:ad:c6:e6:09:5d:7a:59:91:15:35:
         85:65:46:f4:a5:d1:05:44:eb:30:7f:c7:51:89:c7:7e:4b:c8:
         ba:c9:71:9b:2b:69:f9:66:04:d1:b1:43:2e:0c:70:cb:b6:68:
         64:f6:10:f2:b8:7b:37:46:ef:35:e7:59:91:ad:30:e5:37:0b:
         1a:45:53:95:bd:08:3b:93:15:0b:de:e5:a4:17:ef:a1:be:b8:
         0c:60:97:a9:73:7a:a0:62:36:44:b3:6f:3e:70:55:fe:ca:b6:
         90:bb:63:60:53:9c:f8:35:21:b7:a2:dc:f0:79:1d:67:9e:fb:
         d9:8e:04:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:25:28 2025 by rpki-client