Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa
File:                     3244e627-103d-3ceb-9e4e-605b4c86ee79.roa (raw, json)
Hash identifier:          w35QqqyfFHo1rxRz9IrWPyITXzic/nk7VTgkl5XryW4=
Subject key identifier:   BD:FB:97:23:51:A6:C7:5A:37:62:7F:54:A7:2B:9C:84:EC:7F:95:1B
Certificate issuer:       /CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
Certificate serial:       010D0C9F432858495ABECB7F09B345085C6E7F00
Authority key identifier: 16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        147.124.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:cb:7f:09:b3:45:08:5c:6e:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1aaff5d7-cce3-4d86-8c1a-6f886bf6df06
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=c2f5ba0f-48df-4a9e-9061-41c6a011c231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:aa:68:99:47:d4:f4:33:3d:f1:d9:13:6e:97:
                    26:ee:9d:a9:5a:3c:b8:e8:3e:36:42:69:4c:e0:a8:
                    63:c0:ad:28:73:37:11:5f:1a:f6:65:ce:9b:eb:1b:
                    ea:9c:ed:3a:c4:e3:02:fb:cc:c5:4f:06:c6:d7:29:
                    b2:b1:34:fa:4d:32:bc:d9:ae:95:36:2f:e7:d0:0d:
                    79:b6:cc:dd:da:c2:3e:bc:92:5e:e0:ff:73:7f:21:
                    63:e6:36:86:5c:df:84:77:42:3c:50:63:89:fd:3b:
                    67:da:a7:21:7d:7c:e3:a2:4d:2f:51:31:1a:05:c0:
                    33:a0:0e:24:50:4f:45:f2:6f:d4:9a:5b:ad:07:e4:
                    7f:25:75:d3:78:37:57:fe:eb:df:45:c7:38:3f:4e:
                    e8:e1:04:23:2f:9e:19:a9:17:dc:24:ff:95:f3:46:
                    3b:fa:b0:3f:14:eb:2d:1e:8e:4a:37:de:4a:de:ed:
                    22:bb:f3:cb:12:ec:b1:d6:cf:93:6d:ad:95:96:88:
                    08:d7:c5:52:ff:14:c8:fb:bd:0f:ae:aa:ad:1a:66:
                    66:69:f9:e8:f7:1c:8e:bf:bd:b8:3d:fd:30:b2:51:
                    53:47:4f:3f:d1:7a:54:19:90:f9:c1:8a:49:5a:23:
                    4e:99:de:7f:c7:2b:09:07:0f:8f:3b:3f:b4:21:c4:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FB:97:23:51:A6:C7:5A:37:62:7F:54:A7:2B:9C:84:EC:7F:95:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/3244e627-103d-3ceb-9e4e-605b4c86ee79.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.crl

            X509v3 Authority Key Identifier:
                keyid:16:A3:01:3B:B5:5F:07:EA:48:F6:97:F2:46:F9:6C:C5:35:2A:6B:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1aaff5d7-cce3-4d86-8c1a-6f886bf6df06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d1:e0:7b:56:70:a2:5e:bf:ba:97:6a:b0:58:17:36:f1:93:
         98:f0:8b:0d:9c:ed:02:1c:d4:f5:46:df:20:6e:91:fd:bd:94:
         39:f3:29:43:56:f0:3d:c6:06:9d:eb:a1:7d:f9:7c:c2:33:b0:
         7f:b4:24:b3:d1:b2:ab:bd:e8:d2:00:99:d1:7d:3e:5b:90:32:
         b3:93:6d:d1:86:8d:1b:93:ea:68:1c:7e:25:53:1a:26:85:56:
         91:56:9f:d5:53:4f:72:cd:e4:82:ab:8b:89:6f:c1:b0:cf:c3:
         ce:10:34:34:42:36:2a:10:76:e8:c0:84:db:68:25:e4:d9:ca:
         fc:40:e1:06:95:ca:80:40:d5:9b:fb:fe:54:b6:42:9b:7e:a0:
         6b:a1:39:5c:a2:da:81:7d:62:3a:d5:53:c2:77:4c:4e:7c:74:
         4f:75:d2:a4:21:c9:7c:a7:17:f8:d0:4f:c5:0a:d5:80:a3:7b:
         e9:0d:0c:87:bf:83:68:2d:a1:73:eb:19:42:26:1a:a8:16:9c:
         2f:f7:af:57:04:0a:ef:6b:f9:37:8a:d4:d9:2b:b4:5e:8e:1a:
         59:3e:4c:9c:92:d6:69:5f:22:56:6f:28:02:49:0e:1f:ce:15:
         ea:f9:5e:de:22:23:1e:33:1a:8c:30:4c:f7:b1:87:fb:11:54:
         f2:37:cb:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:50:19 2025 by rpki-client