Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31f87e0f-4b45-3bb6-aa38-9320de1ce6ef.roa
File:                     31f87e0f-4b45-3bb6-aa38-9320de1ce6ef.roa (raw, json)
Hash identifier:          jjpeEjfs2vYfu+WFBzR8hI4rZb+7hVJ3IlaxsmVoptc=
Subject key identifier:   EA:59:AD:95:8C:9E:38:34:49:4F:61:9F:98:F3:EA:34:D0:18:FB:4C
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858498CFF244E919B18F288C06980
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31f87e0f-4b45-3bb6-aa38-9320de1ce6ef.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     14793
IP address blocks:        76.164.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:24:4e:91:9b:18:f2:88:c0:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=690a4480-94d5-4d9c-83c8-53de7e646c99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e4:86:bf:8f:55:a8:52:2f:eb:43:33:6b:08:
                    05:f2:91:ee:11:fa:83:98:74:c7:b6:dc:8e:38:01:
                    27:32:a1:ad:6c:52:77:78:c4:e9:6f:a9:b0:be:87:
                    2b:e2:e1:8d:9b:5b:fc:32:fb:bf:de:5b:9c:d7:37:
                    b4:24:a4:f6:af:f2:98:44:e8:6a:10:e3:cf:c7:5f:
                    04:fb:dd:1e:c7:55:a5:76:b5:c3:2d:e1:0a:44:3b:
                    61:d6:bb:4b:3a:39:ef:bc:99:25:59:2d:e3:ba:a7:
                    72:95:9d:7b:68:88:ee:27:e0:8a:43:4d:24:1d:32:
                    d7:2f:94:2e:b5:3e:84:d0:6c:f5:80:ab:0f:0a:95:
                    77:72:20:37:4d:14:88:f4:82:d0:5d:80:2a:14:46:
                    f5:97:c6:85:60:09:ac:2d:c8:80:d7:c4:1a:5d:e0:
                    8f:47:f3:66:71:78:1f:c7:c3:20:77:4e:c9:c8:36:
                    00:02:9e:56:25:52:57:79:0e:95:45:87:c4:78:25:
                    f7:fd:c9:c2:c6:d7:d9:fd:bc:f8:98:50:6c:23:53:
                    5d:27:9d:65:9d:13:f6:04:67:bc:13:62:04:97:ae:
                    93:bf:ad:67:b2:d1:fb:dc:bc:71:28:70:21:f2:db:
                    b7:86:70:7e:ac:7b:13:98:42:9a:af:9e:2d:52:fd:
                    e9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:59:AD:95:8C:9E:38:34:49:4F:61:9F:98:F3:EA:34:D0:18:FB:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/31f87e0f-4b45-3bb6-aa38-9320de1ce6ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:d0:8d:82:3f:bd:6d:01:05:5c:63:35:18:11:e0:46:ad:3e:
         56:18:8b:93:7e:a8:d0:04:76:d1:8e:9d:fc:13:5e:81:5b:93:
         a7:2c:5d:33:8c:e4:23:dd:f9:fc:2f:d4:1a:ad:56:7c:db:d5:
         a8:1a:e8:49:53:b5:38:da:12:57:ec:7f:60:f7:84:64:04:3a:
         3d:5d:88:93:31:e5:2d:67:bd:fe:55:06:2c:e0:42:16:b8:4b:
         d1:ce:97:a1:da:c2:71:b8:9b:56:78:5a:d1:56:5e:9c:70:34:
         d8:32:ff:94:c6:c5:5f:aa:fb:2f:1f:59:54:e8:38:d5:74:bd:
         2d:90:f3:08:d7:e3:0f:39:98:2e:29:46:50:72:ec:4b:22:16:
         db:8b:c3:75:85:1c:3c:d2:0e:78:f7:04:94:8b:82:03:11:25:
         7b:41:71:16:31:d6:96:86:06:5c:18:8f:86:af:e6:5a:dc:13:
         7a:cf:cc:6d:d1:ff:34:1e:49:8a:2b:14:67:b5:c5:f7:e7:e9:
         48:48:3a:64:e4:26:da:05:2c:10:08:bf:b7:6b:cb:df:f1:73:
         c8:f6:5c:ba:f6:0d:47:12:f7:d9:c1:72:6f:2a:5d:83:c5:ce:
         b7:48:9d:06:c8:85:5b:2f:c7:fd:2b:18:aa:7d:0d:29:c8:11:
         1c:98:6b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:10:28 2025 by rpki-client