Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/031a59bf-ed41-39e0-879f-68b0070cd698.roa
File:                     031a59bf-ed41-39e0-879f-68b0070cd698.roa (raw, json)
Hash identifier:          GLeE6L7ca224zc7lDaIosbcW2BLDFZmtN07jNVogCXc=
Subject key identifier:   43:69:53:56:39:8F:F1:95:42:F5:03:09:FE:FB:0A:25:F3:21:C6:66
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584988CF23338DB916B31EDE4D00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/031a59bf-ed41-39e0-879f-68b0070cd698.roa
Signing time:             Tue 15 Apr 2025 13:00:59 +0000
ROA not before:           Tue 15 Apr 2025 13:00:59 +0000
ROA not after:            Mon 14 Jul 2025 13:00:59 +0000
asID:                     852
IP address blocks:        207.148.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:88:cf:23:33:8d:b9:16:b3:1e:de:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 15 13:00:59 2025 GMT
            Not After : Jul 14 13:00:59 2025 GMT
        Subject: CN=4816bec3-f412-44ab-8138-81f6f52fe094
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b7:7e:6c:36:c5:cf:cf:50:11:53:03:5d:76:
                    d8:73:40:8c:01:c4:cb:c1:ae:c2:f3:9c:a5:34:b2:
                    1a:27:4d:98:ca:11:42:db:d2:5b:25:a9:7c:ba:9e:
                    c6:91:1a:6b:41:20:a8:58:1b:49:77:73:41:80:12:
                    48:94:32:45:68:02:6a:98:07:75:d2:79:5d:8e:69:
                    69:1c:18:b0:79:ab:38:a8:2c:84:61:74:f6:e8:e1:
                    8f:65:d3:bd:01:c1:0e:3d:2b:ff:f4:d4:50:f3:62:
                    1e:e5:40:54:cc:4c:2c:88:83:18:d0:57:c6:8a:56:
                    03:d1:bc:2b:60:9d:14:57:f6:ba:69:85:a4:8d:76:
                    00:ac:03:af:53:16:d6:69:a8:07:97:67:c5:e9:51:
                    f7:9b:9e:f4:9a:0a:3e:68:75:34:d0:24:59:53:38:
                    cf:35:13:8f:cd:01:a6:c2:d5:10:e3:a3:2a:94:dc:
                    5d:f8:1f:1d:77:d6:90:26:5f:a7:c3:b8:89:ab:58:
                    9d:67:9b:d0:4f:ab:a8:71:74:ab:e4:1e:60:dd:d6:
                    99:8b:48:94:83:36:a1:49:56:75:3e:9f:81:8d:ce:
                    47:cd:4e:56:ef:29:b2:11:36:d8:b0:4e:13:91:42:
                    60:90:b7:99:a4:80:e4:af:1a:c5:18:d0:e5:03:4c:
                    15:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:69:53:56:39:8F:F1:95:42:F5:03:09:FE:FB:0A:25:F3:21:C6:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/031a59bf-ed41-39e0-879f-68b0070cd698.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.148.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:70:ee:83:ea:9a:35:a7:f5:c8:a1:fa:fa:7a:78:8b:0f:d7:
         d0:c7:5a:48:b1:9e:d3:50:fc:ff:75:ba:5e:c1:ec:c6:4f:a4:
         1b:51:6d:64:81:c7:01:bf:e3:14:9d:24:24:f5:40:9a:a2:7e:
         19:1e:5e:4f:09:d4:56:5f:6b:48:91:09:d0:1f:64:dc:f8:52:
         65:b2:6c:e1:b6:a4:91:20:e5:f0:f9:0a:19:95:47:de:8d:5b:
         b7:48:3b:34:8a:f6:bf:f0:b7:99:27:48:22:ba:fe:b9:c4:e3:
         c7:a0:c9:ae:f3:6f:15:d3:14:76:5c:d8:ff:0d:8d:2a:50:54:
         41:c1:35:7e:52:b7:fa:9d:c5:b3:10:71:8a:c2:7d:2b:c8:cf:
         60:43:5c:3c:b9:f7:af:0e:70:0c:79:bf:21:c7:88:a0:0b:4f:
         6a:d4:5a:9f:6c:3c:0e:2d:2c:08:d3:36:ba:fc:54:8f:b7:61:
         d3:17:2a:eb:84:9f:89:1d:ed:2e:87:62:db:bc:57:fd:e7:53:
         98:56:af:ca:c8:17:3d:ae:1b:23:6a:b8:4b:f0:1c:d4:6a:f9:
         3e:ca:b3:8a:26:d4:c4:d6:3b:2a:78:b9:76:68:bc:ac:66:d1:
         9f:b8:1a:39:4f:43:2c:55:2f:03:23:b1:89:b6:58:82:3a:dc:
         86:2c:bb:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 04:17:45 2025 by rpki-client