Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa
File:                     a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa (raw, json)
Hash identifier:          6ET/zGjiB8ZvzvU9lxaZzC7c1hzC5RfxjDniWKnYJGs=
Subject key identifier:   A9:B8:53:6A:1E:16:FD:77:D6:D1:60:59:66:7C:CB:11:E0:E9:7C:0C
Certificate issuer:       /CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
Certificate serial:       010D0C9F43285849ABB497D595446E43AF2DD580
Authority key identifier: 99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     401478
IP address blocks:        140.235.148.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:97:d5:95:44:6e:43:af:2d:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c8f0fea-4d37-4154-9909-d7fb16d78856
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=6470fb70-8793-43f5-a2e0-b6a708bc26c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8b:f6:22:ff:8d:d0:88:6f:0a:11:58:0d:2c:
                    a5:6f:36:4c:b3:12:3a:1f:ce:bd:ef:89:cf:54:5d:
                    e7:28:c9:44:62:52:41:14:c2:5b:94:4c:bc:84:a6:
                    ae:86:7c:20:fb:59:05:c8:67:54:9c:af:6a:4b:3c:
                    2a:1f:d5:a1:53:e2:0f:de:02:f2:08:25:fe:0d:bb:
                    68:d8:ba:fa:7f:d9:78:d3:f7:cc:c3:54:22:4f:97:
                    41:9a:06:34:33:c1:5a:1a:83:5d:c1:dd:86:5b:cc:
                    3b:ab:1e:f7:ea:4a:6d:39:06:9f:cb:5d:d9:00:b5:
                    bf:4b:b7:ce:7d:80:9a:35:cb:40:28:98:0e:d5:c2:
                    a2:93:a1:a4:ee:7a:14:70:c3:ad:40:8e:59:58:e9:
                    b6:42:71:39:5a:2e:85:cb:b9:04:55:57:95:95:9d:
                    91:53:c2:2f:dd:9c:86:9e:ad:f1:f5:69:a6:48:be:
                    e8:8b:14:64:02:97:a5:49:f1:1c:b3:ad:b9:6f:57:
                    c9:6a:91:16:a8:ec:8e:a9:09:e8:12:70:12:cc:12:
                    d7:2c:eb:b9:d9:1f:e1:5f:9f:5b:f5:10:64:8d:98:
                    2c:3b:94:d3:ee:1c:3d:c3:b9:25:0f:06:92:ad:8d:
                    35:7a:3b:a6:86:1c:3f:27:d8:3d:5c:e8:f3:7d:81:
                    5c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B8:53:6A:1E:16:FD:77:D6:D1:60:59:66:7C:CB:11:E0:E9:7C:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/a2efaf57-bd34-3494-b3ff-d22f52c0707c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856/1c8f0fea-4d37-4154-9909-d7fb16d78856.crl

            X509v3 Authority Key Identifier:
                keyid:99:B1:CD:3C:2D:D5:5E:70:0B:11:31:AA:D3:5E:E0:62:07:6A:14:58

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c8f0fea-4d37-4154-9909-d7fb16d78856.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.148.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:2e:7d:ea:f3:eb:39:97:e0:9f:22:f1:64:ca:68:f8:e9:82:
         31:ab:e2:9a:a3:57:e1:0d:b7:ae:58:e5:72:e6:dc:a7:cd:01:
         26:8b:5c:e1:29:8f:24:d6:6b:e1:f5:3f:63:49:35:d9:40:a6:
         70:c8:d9:1a:a1:92:d7:fa:b2:d1:4d:4a:cb:a2:27:bc:3e:7b:
         90:6e:6b:6d:e3:7f:47:6e:69:ba:bf:de:83:63:26:64:96:c6:
         ef:a8:22:ec:b8:15:1a:36:ca:91:04:af:09:84:0f:ca:42:06:
         03:85:d4:73:b3:ad:d3:8a:ae:ba:ae:3f:f0:83:85:19:73:04:
         1f:ce:1f:90:09:ea:5a:9c:e8:c1:0a:16:67:42:f1:76:7b:ae:
         39:63:b5:c1:1b:43:aa:7a:82:08:ce:5d:11:1b:72:ce:38:02:
         55:d2:e6:e3:ac:31:80:76:ee:1c:71:13:24:bc:6e:55:35:62:
         dc:9a:bb:9e:32:24:b2:84:0b:fc:14:3e:1b:21:0d:30:80:c0:
         4f:84:d3:0d:f9:c2:62:78:59:61:cf:e5:5a:7c:ce:02:c3:32:
         fa:9a:69:19:20:40:62:0f:6c:d3:f8:69:aa:44:d8:65:05:eb:
         64:59:52:57:32:57:cc:eb:4f:02:47:92:c7:97:4e:c9:e1:9a:
         35:e6:81:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 09:36:22 2025 by rpki-client