Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/29ad8cd7-8790-3237-b6f5-d67d2d081bbe.roa
File:                     29ad8cd7-8790-3237-b6f5-d67d2d081bbe.roa (raw, json)
Hash identifier:          Kt48SXWjLfZwE7h6f6gPgBURJpJJXsryUT4ud61kJLY=
Subject key identifier:   1C:E3:16:ED:D4:63:E9:C0:94:9F:45:25:05:83:69:3B:00:53:DC:1D
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498A34692A25C8180B7209CC00
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/29ad8cd7-8790-3237-b6f5-d67d2d081bbe.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     3356
IP address blocks:        199.228.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:69:2a:25:c8:18:0b:72:09:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=406121bf-dac5-4501-9801-9fade16efd35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:81:55:a8:fb:85:3e:2e:e9:f3:dc:3d:ac:8b:
                    9c:de:87:2e:68:e7:01:5f:22:03:06:34:c3:36:e1:
                    ef:00:f0:7e:d1:e4:5e:af:69:51:8a:62:c2:c0:b1:
                    a3:c0:61:8c:fa:ce:83:a1:2e:78:c1:c2:8e:af:9e:
                    73:54:ca:87:b8:66:ad:e9:6a:f6:67:f6:5b:b2:cc:
                    ce:1d:0f:93:ea:30:50:da:b5:91:1c:f8:ee:c4:31:
                    bd:6c:3c:fc:8e:24:58:8b:fd:ac:09:1a:61:a9:80:
                    6e:5c:12:92:be:c5:ac:df:ba:8b:2a:bb:f9:6d:b5:
                    50:f1:70:e4:22:0f:ca:fe:2c:16:e0:58:1e:be:cf:
                    a8:d5:4e:ce:49:64:80:fe:f3:a1:42:45:49:d5:2d:
                    d8:ec:16:63:f7:7a:2a:5d:45:30:52:14:42:5b:3a:
                    8b:92:95:9c:9f:16:5f:f5:46:d9:e8:1b:c3:ed:3e:
                    ba:07:e3:a2:b3:75:fb:14:96:5c:e9:16:14:53:3a:
                    04:ca:34:d8:74:47:0c:4c:9a:9f:d9:aa:91:eb:5b:
                    f6:bc:2e:fc:91:d3:b6:2e:9a:36:95:96:31:9f:6a:
                    e0:01:91:26:83:07:b1:ac:85:ff:15:04:b0:fe:b8:
                    92:e6:68:eb:8c:12:21:52:55:25:81:92:52:55:aa:
                    90:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E3:16:ED:D4:63:E9:C0:94:9F:45:25:05:83:69:3B:00:53:DC:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/29ad8cd7-8790-3237-b6f5-d67d2d081bbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.228.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:0d:d0:2f:96:ec:be:45:fb:b2:cb:4e:65:02:b7:00:eb:d7:
         4d:4a:4b:57:f2:3e:49:41:34:51:9e:79:19:fe:40:f7:e4:37:
         df:f3:bf:bb:79:3c:fa:67:5d:eb:66:d0:32:02:1c:16:46:1f:
         e4:82:2a:56:f6:db:42:b3:f9:55:75:f8:42:86:c4:3e:3b:5f:
         fe:2f:37:4a:26:0e:4a:52:90:52:4a:d1:5c:40:6d:fb:17:44:
         d0:87:66:b6:70:23:29:08:7b:b4:13:b9:ec:46:fb:eb:14:47:
         d0:68:1b:c2:54:08:23:25:60:dc:f0:1a:4c:0c:3e:7d:bb:93:
         c4:b0:ae:ee:41:6d:f4:f6:67:e0:fc:a6:3a:3e:3c:ce:08:fa:
         19:1c:3d:c0:9c:00:d2:89:06:39:c2:47:91:b6:ab:ff:16:2b:
         18:c7:55:95:b5:f9:b8:98:65:ed:d6:6b:4c:4f:2e:8d:d0:0d:
         f3:59:ad:d6:b0:65:05:53:c0:07:46:bc:8e:8f:b8:c3:4f:39:
         d1:f1:6f:d9:ea:d7:5a:82:40:29:91:be:38:29:1d:8a:00:b9:
         42:9b:82:dd:1e:90:3b:96:3b:99:65:34:6f:6c:34:52:b8:ea:
         0d:7e:eb:5e:4c:b8:fc:5b:c4:a2:80:c1:70:33:4b:8f:54:35:
         47:ef:b4:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:23:08 2025 by rpki-client