Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09345710-e8ba-3b3a-a17f-70c38a5ec35e.roa
File:                     09345710-e8ba-3b3a-a17f-70c38a5ec35e.roa (raw, json)
Hash identifier:          GDHY3lIFlKkQljCqLsAbFuCbavhWPPwK85/kebmBdMk=
Subject key identifier:   69:5F:2D:D6:2E:DD:0D:E4:B0:95:BA:57:5F:A0:8D:76:7B:2A:40:6B
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858499DBF2A34A15EABB1145B5BC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09345710-e8ba-3b3a-a17f-70c38a5ec35e.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     19437
IP address blocks:        139.177.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:2a:34:a1:5e:ab:b1:14:5b:5b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=170e0ec1-bd43-4114-80cd-c7ce102e5db3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:67:57:c7:fd:a9:43:40:53:54:48:86:01:
                    2c:2c:e0:3a:64:83:73:a2:c4:cf:7d:8b:d0:5b:8b:
                    a9:bb:a5:a5:39:ef:1b:26:bc:02:44:59:5a:f5:83:
                    c2:c5:5b:36:0d:5f:84:1d:f2:d4:49:dc:59:78:6b:
                    3c:0c:4c:9b:e1:e2:15:f7:e9:a0:18:19:a3:b3:df:
                    ae:c5:00:df:c3:36:0f:28:5c:f2:4d:32:4d:99:01:
                    79:ed:0c:36:ae:88:36:cf:f0:23:9e:60:90:d9:39:
                    d5:2a:ba:e9:fd:82:4a:76:db:f8:aa:61:c9:b1:38:
                    9f:4c:74:8a:1e:a0:4b:fe:93:f9:0d:bb:a8:05:3c:
                    5d:b9:38:6e:a3:c8:3f:61:b8:16:dd:47:64:93:74:
                    89:2e:f7:41:8b:fd:dd:a3:dc:d9:98:94:4a:3c:66:
                    68:16:47:89:d3:01:a4:1d:e9:4b:af:c6:4d:10:ca:
                    55:27:a5:e5:33:8b:b1:29:97:82:eb:98:7b:d2:26:
                    32:58:80:b2:fd:fd:1f:d4:b1:85:54:10:59:99:24:
                    5e:b4:3b:5d:d8:2c:18:f9:97:74:4c:07:f9:5a:8f:
                    7d:9c:da:1c:f8:14:df:b4:ab:67:b1:04:21:75:04:
                    cd:ae:fe:d4:ce:0f:7b:11:79:dd:6a:3f:50:37:47:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:5F:2D:D6:2E:DD:0D:E4:B0:95:BA:57:5F:A0:8D:76:7B:2A:40:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/09345710-e8ba-3b3a-a17f-70c38a5ec35e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:f7:3b:35:66:84:4b:f5:44:99:a1:08:fb:f7:da:fd:86:c0:
         5d:8f:d9:fe:b1:83:63:ee:b8:8f:18:03:82:d5:96:62:ae:7c:
         65:e0:d7:5f:c1:04:9b:2e:63:a7:89:a9:10:27:29:8d:f1:d4:
         cc:38:bb:6b:ef:01:b1:e1:29:60:31:d5:13:8a:63:d2:ad:2a:
         8c:cc:28:3d:3b:cb:c9:72:07:5b:26:2b:ea:fb:23:79:d0:2d:
         07:07:3b:43:5c:f7:1d:81:da:dd:41:be:2e:8f:4c:f2:20:8e:
         b0:5a:08:b2:2e:09:77:9e:e0:8b:a3:ab:ec:69:7d:06:37:bb:
         a0:23:3c:de:1b:9f:af:76:32:24:a8:fd:a7:0a:7c:18:ec:3d:
         5f:5b:4e:f6:0c:7c:fe:b8:d1:0a:03:32:26:cc:2f:45:b5:7e:
         04:1d:e7:bf:bd:2b:52:59:73:c2:af:23:71:52:01:02:df:7d:
         1d:e3:ac:85:77:4c:bf:91:80:79:58:fd:5b:09:04:ba:84:bc:
         46:f3:8f:93:d3:05:14:31:68:88:32:95:dc:f6:5d:c2:fc:2f:
         42:cd:71:a9:1c:d0:02:ee:92:95:66:ac:df:d3:b3:72:61:fd:
         27:85:25:cb:e2:7f:fc:f2:ae:65:63:2e:1f:cb:3b:71:ef:9b:
         53:61:0b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 23:28:41 2025 by rpki-client