Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa
File:                     9176efd8-78f9-3781-8516-78117c3c3326.roa (raw, json)
Hash identifier:          OsIqXW2x9S1/vyFUVEL+Q/Mq+MYjCz9xYNl/mpxSQpI=
Subject key identifier:   A4:13:D7:C0:8D:CF:C5:6D:5E:E2:5B:7C:94:C2:26:6A:AA:E4:CE:F0
Certificate issuer:       /CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
Certificate serial:       010D0C9F432858497AD9B0CC2D488A6EDBD7F880
Authority key identifier: 85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa
Signing time:             Thu 10 Apr 2025 13:00:59 +0000
ROA not before:           Thu 10 Apr 2025 13:00:59 +0000
ROA not after:            Wed 09 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        167.88.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7a:d9:b0:cc:2d:48:8a:6e:db:d7:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ce5ae55-06df-4120-8c12-2f433ba85d4e
        Validity
            Not Before: Apr 10 13:00:59 2025 GMT
            Not After : Jul  9 13:00:59 2025 GMT
        Subject: CN=0836a14c-13d5-4468-8899-59d129dda654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:87:9a:ca:a9:6d:42:f8:aa:c5:ed:f7:fd:8c:
                    b8:9e:64:b5:fd:55:25:cc:78:61:27:2c:f3:f7:a9:
                    18:81:08:5d:a4:d1:67:83:90:ff:4d:9a:95:5e:36:
                    b3:a8:d6:66:19:9a:e9:21:c7:ec:8f:37:91:e4:11:
                    85:f4:53:1a:35:8a:85:a3:a6:dc:23:6e:b7:25:4c:
                    ae:a8:16:33:d5:7a:a4:ac:ae:f6:14:f6:5c:39:73:
                    51:dc:c8:65:48:4e:7e:ee:2d:52:65:81:1f:94:60:
                    49:f8:e6:63:c8:68:d5:22:98:4f:ee:49:45:ff:47:
                    10:ff:73:8a:0c:a8:e8:12:8c:1c:0a:e3:9e:76:c1:
                    52:ef:4e:c2:04:a4:bb:e5:37:2a:38:0f:b5:47:25:
                    31:f2:fc:10:cc:a3:95:13:34:cf:d4:6d:9e:fc:cb:
                    b7:ee:f5:28:96:55:7e:2d:c0:6f:8e:05:82:c9:21:
                    ee:ac:77:d4:7c:3a:ea:04:ee:4f:37:f3:96:9d:b3:
                    11:90:84:a8:4b:f5:d3:89:d2:42:c9:ce:75:36:99:
                    8b:42:a5:01:ae:5b:b1:f5:88:e6:7f:7f:14:6a:28:
                    cb:af:6c:de:8d:84:b5:7e:04:6f:43:bf:36:ba:12:
                    a0:5a:17:28:7d:33:f5:51:5b:48:ad:d0:ae:5e:16:
                    cd:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:13:D7:C0:8D:CF:C5:6D:5E:E2:5B:7C:94:C2:26:6A:AA:E4:CE:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/9176efd8-78f9-3781-8516-78117c3c3326.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e/3ce5ae55-06df-4120-8c12-2f433ba85d4e.crl

            X509v3 Authority Key Identifier:
                keyid:85:74:1E:A9:02:9B:74:DC:DC:6B:9A:67:89:1A:E7:5A:F3:32:32:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3ce5ae55-06df-4120-8c12-2f433ba85d4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.88.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:ce:ce:cd:b7:fb:bd:7b:66:28:7f:6e:8c:fe:c9:af:2e:39:
         bb:56:1b:3b:66:7d:fc:e2:3b:56:3b:7f:7f:f9:57:26:ff:9a:
         c1:d3:03:c4:26:dd:39:0f:c8:70:8b:08:04:d4:f0:24:f1:16:
         e9:33:17:07:2e:f7:7c:53:f2:01:8c:76:8d:77:31:b6:fa:f6:
         f1:07:09:7b:1b:36:61:17:09:2c:1c:52:2a:ca:33:6a:00:51:
         fc:ca:08:01:6c:a6:4d:d7:88:b2:a9:47:89:13:4b:20:8d:61:
         81:13:34:e5:96:ec:82:db:6f:bf:61:b2:a0:eb:c9:78:b1:47:
         b7:6d:b8:43:ed:93:3d:46:9d:3d:b1:b8:f0:8a:41:6e:f1:7e:
         bd:41:9c:3a:23:35:10:90:9e:f8:31:bb:f4:19:b8:bc:f0:cd:
         ac:9c:ce:d6:c1:cc:62:45:3b:0b:5f:fa:88:4d:90:7c:c2:76:
         14:46:45:66:9b:82:9d:32:38:97:86:ea:6d:32:96:fd:10:e9:
         9c:29:30:77:ca:84:46:49:c0:24:87:04:f6:07:ad:55:b8:bb:
         68:1a:12:02:3b:27:bc:70:e3:73:bc:26:d1:40:61:1c:8f:96:
         78:d2:72:a7:98:c1:16:9a:23:fe:42:d5:e0:f1:18:09:ce:26:
         2d:ec:a6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:33:38 2025 by rpki-client