Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa
File:                     1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa (raw, json)
Hash identifier:          eDvHtdivQhRkt/93Zshi2MLxEDdk5LqJrFYlI48/JAs=
Subject key identifier:   3C:02:48:55:2C:6B:FE:83:27:03:AC:AB:59:14:05:68:47:8D:3D:4A
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285849A4BB3D2BED84FCDBEEB1F840
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     7155
IP address blocks:        172.243.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:3d:2b:ed:84:fc:db:ee:b1:f8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8f837c31-36e0-4033-acf3-5166c4b8e51d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ea:b1:14:af:19:fa:61:d2:b3:7b:ac:85:48:
                    8a:1c:7f:ec:83:24:56:01:11:bb:27:57:38:03:0d:
                    59:b1:d3:8e:6d:08:07:02:bd:57:4d:8a:ae:86:3b:
                    59:8f:ba:ba:08:24:93:56:6e:16:c2:ed:eb:c5:a0:
                    9b:19:36:9a:46:7d:d5:e2:df:3b:97:e7:6f:2d:f7:
                    96:74:2d:89:52:04:7d:bd:d0:bc:0a:0b:c2:fb:6e:
                    fc:16:7b:da:01:7f:74:36:60:a2:5f:f7:02:c9:3f:
                    09:55:ae:74:54:d1:ab:11:96:ac:01:11:51:3c:7d:
                    7c:a5:92:91:1f:3d:cd:69:75:61:34:f1:50:84:1c:
                    8f:24:7d:23:df:a8:11:ab:f1:b4:fd:86:ab:52:68:
                    4d:9f:7d:32:4c:57:ae:33:da:28:45:c7:88:c6:06:
                    56:32:66:66:c2:8f:b0:53:93:cf:5a:e5:69:b6:a3:
                    d1:9d:47:fd:9f:43:f2:cb:16:c3:cd:cb:b0:bf:57:
                    27:ce:4a:42:02:0e:cc:e0:5e:6c:0f:83:53:0b:7e:
                    4b:ca:66:d8:d3:9e:bd:f6:38:64:10:97:e4:33:b8:
                    32:b1:30:3e:82:aa:9e:92:cf:ff:8f:cc:36:81:90:
                    35:37:5e:44:b0:ff:d7:77:b2:f8:3f:78:30:36:5c:
                    5f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:02:48:55:2C:6B:FE:83:27:03:AC:AB:59:14:05:68:47:8D:3D:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cca9ea6-23b2-3096-aa5c-3865f6b7908f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.243.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:a9:49:b8:c0:f0:9d:7f:2a:15:89:c2:57:09:af:d8:79:f0:
         f6:80:11:f3:70:53:00:e0:2a:90:3f:e8:4a:e8:f4:a3:fd:44:
         d4:44:20:43:bc:42:39:1d:9c:e1:66:e7:8a:ea:20:76:78:06:
         d4:d5:a5:00:eb:30:8a:93:e5:38:32:d4:d8:f5:63:17:b9:66:
         e4:ba:2a:1f:5a:a2:3f:25:38:9b:e0:10:da:e5:96:75:1c:27:
         62:4c:ae:8d:43:8a:c3:ea:51:1b:26:55:88:59:ec:07:d8:94:
         c2:d8:76:7a:5c:c1:81:f7:90:54:02:5b:da:cc:6d:96:17:0f:
         4d:70:0b:37:01:7e:7c:fc:25:ea:79:38:56:66:0f:97:c2:b0:
         df:fa:1c:b4:86:96:69:ad:aa:25:45:f9:c8:08:52:1b:95:58:
         55:26:2f:c1:35:4d:77:0d:a3:df:f5:98:6a:08:7b:7f:19:24:
         28:e4:d8:78:5f:46:94:22:db:e8:81:f1:5e:ae:34:85:4f:40:
         71:a0:c6:a4:4c:3f:5e:ae:69:fd:7b:71:1f:d2:29:20:e3:9a:
         d5:63:1f:dc:4b:ed:88:0e:4d:b9:ce:0c:2e:fa:58:3f:03:90:
         24:03:4c:b3:4e:6f:e3:31:e2:97:2b:58:8c:62:51:6f:1c:42:
         2c:fc:aa:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:51:21 2025 by rpki-client