Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01c7e3dc-23f8-316e-949f-eb122b7447b1.roa
File:                     01c7e3dc-23f8-316e-949f-eb122b7447b1.roa (raw, json)
Hash identifier:          ACKsXuhC5a3IXQGpvEuRDNZv4nmwNCsUsqk6pksHdYo=
Subject key identifier:   04:C9:79:73:97:B6:FA:2F:E2:B4:FE:08:77:34:8A:D8:CD:5E:5E:EB
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA694126920627FB946BA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01c7e3dc-23f8-316e-949f-eb122b7447b1.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     13367
IP address blocks:        162.151.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:94:12:69:20:62:7f:b9:46:ba:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=77b17ce5-3b6b-4b04-82b8-5cca493e8981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:94:48:7f:19:95:d7:55:c1:5b:7a:fc:a8:b1:
                    44:3b:72:11:cd:ba:50:5b:27:bc:6f:6e:6b:4e:83:
                    23:f0:1e:92:32:45:fe:29:3e:26:c5:8e:47:3f:f2:
                    2c:e3:30:af:25:70:8c:b9:5c:4d:94:6f:db:33:b6:
                    d7:1e:68:7d:16:89:27:7b:23:1b:79:5e:9d:e5:b3:
                    04:c3:6a:73:93:dc:dd:14:0f:76:46:9a:43:f1:7f:
                    12:4f:33:ce:b9:e1:f3:70:d5:3c:42:d1:bf:75:07:
                    42:0f:36:1f:22:55:10:e7:84:ef:d1:68:fc:32:aa:
                    95:58:57:ae:fa:a2:0b:26:31:d6:96:63:f0:ad:7f:
                    e2:49:e3:d5:67:24:c6:21:d2:be:6e:ff:68:90:8d:
                    90:02:78:6b:19:7a:f3:9c:1e:fc:e7:fa:e3:a4:fa:
                    af:2e:98:57:4e:9e:55:c9:45:dd:cb:87:0c:f2:6d:
                    d0:54:b4:9f:2e:89:16:d2:d0:6e:a9:3e:99:12:4d:
                    12:c6:39:1c:71:00:a1:66:f3:ff:07:83:43:7a:b1:
                    05:15:6a:9f:89:ae:ee:72:ab:34:93:c6:eb:c5:4c:
                    6f:39:ed:9c:2c:99:a7:4e:e4:c3:cb:b4:a2:cb:4c:
                    e8:0d:60:f6:81:b8:d4:b7:9c:b0:8f:df:78:eb:7b:
                    a4:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:C9:79:73:97:B6:FA:2F:E2:B4:FE:08:77:34:8A:D8:CD:5E:5E:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/01c7e3dc-23f8-316e-949f-eb122b7447b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.151.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:ab:fe:f8:1a:fa:13:f6:71:3f:a9:3b:b1:95:30:b9:8b:b9:
         3a:0f:5d:76:13:4d:64:89:2c:fa:37:ab:39:86:ad:1a:5a:b0:
         ad:c0:9c:a5:43:30:b3:b0:76:de:12:62:40:b9:1a:28:00:49:
         9b:a9:fc:8e:67:45:53:51:25:0c:8e:3f:85:a1:85:28:18:c8:
         fc:2e:cd:10:e3:8f:cd:a4:fb:33:9b:72:5d:52:04:67:23:cd:
         dd:1a:21:c0:ca:18:2d:dc:1e:54:0e:6f:c7:9b:3b:cf:d7:18:
         a0:5b:ac:59:a7:5c:83:35:72:3a:90:2a:0f:f6:6f:20:f1:2e:
         04:59:10:57:50:3c:a9:60:01:9d:7c:d8:77:5e:72:37:fc:b3:
         c2:a3:42:c3:f0:26:16:32:4a:8a:bf:09:01:89:dc:f0:40:17:
         6a:6e:5f:55:20:3f:3b:b9:47:0c:27:c7:c8:f3:9c:39:82:e3:
         8a:b8:3f:a5:11:a0:e9:e6:6b:ae:c3:e6:84:15:ae:f3:ea:0f:
         1a:3b:3d:75:b7:95:ec:09:d4:fc:c5:27:b2:0b:0e:64:bb:0a:
         41:2a:5a:2b:c7:3f:6c:10:a2:f3:b7:c0:07:65:ad:ac:d7:7b:
         e5:17:6e:7b:2e:67:15:69:b5:af:3a:25:13:d8:8d:7d:0b:52:
         9e:28:68:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 16:09:13 2025 by rpki-client