Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa
File:                     346ff034-1c54-37d5-9980-289efa2829b6.roa (raw, json)
Hash identifier:          l1V43vG1ucmjk2n/bJYfXx4yMEyVVDjyLhtaFkEc3Cw=
Subject key identifier:   54:94:66:FE:A3:AA:3E:8B:67:B0:08:18:75:4D:5C:34:B0:49:30:B6
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849DC8FA9EFA8637699C22CE480
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        142.147.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:a9:ef:a8:63:76:99:c2:2c:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=f335a674-8314-449d-ab71-86d173821ecc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3d:97:d7:b5:f1:56:7e:ab:cd:b0:33:0d:b3:
                    65:de:a3:bf:40:5c:e9:0a:23:a8:7d:1b:9f:8e:2d:
                    9c:13:f1:a1:37:6b:73:07:70:8f:c3:87:70:ed:97:
                    d9:8f:d6:ad:b9:b6:ff:8a:92:6c:10:c5:a7:05:51:
                    bd:f4:aa:eb:f2:d6:f7:66:4b:19:96:77:14:43:fd:
                    0c:27:10:1a:6c:88:9c:e6:86:5a:28:79:27:e5:6a:
                    47:99:33:35:6e:48:db:c9:fe:83:02:5a:16:1d:e4:
                    d6:3b:27:d8:2f:94:f4:3a:68:73:bf:b8:48:55:81:
                    71:40:24:fa:c1:4c:94:bc:69:81:a9:84:ac:76:d2:
                    91:8f:bc:88:9b:29:65:cf:10:99:29:e1:c6:fc:2f:
                    82:8f:71:64:a1:75:a8:5b:82:64:8e:bd:0f:f0:73:
                    85:cd:54:61:99:90:0e:c0:a8:9d:21:0d:ce:c0:27:
                    2e:ef:2a:71:e4:de:7e:05:48:96:6a:2c:f8:5e:cd:
                    ad:67:af:96:c1:8d:a1:f7:b4:df:4b:22:2b:76:5e:
                    4d:ad:f1:d3:21:7e:e4:08:71:c1:83:dd:70:50:d5:
                    40:df:d6:ef:37:45:c1:68:c7:ca:cb:31:a6:5b:7e:
                    18:92:ca:a4:94:0d:fc:e7:6a:50:29:2f:a4:f4:c0:
                    c5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:94:66:FE:A3:AA:3E:8B:67:B0:08:18:75:4D:5C:34:B0:49:30:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/346ff034-1c54-37d5-9980-289efa2829b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.10.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:97:ba:38:dc:85:07:2f:b6:58:b6:10:f5:68:62:16:52:41:
         1f:ba:0f:29:a7:2a:13:27:92:a4:20:6e:0c:6f:8e:88:d0:7d:
         5e:a8:f1:af:1c:e6:db:80:52:f5:e0:7f:40:73:6c:31:a6:05:
         2a:09:72:a9:ed:36:da:59:68:34:e8:cc:fc:05:9c:88:e9:74:
         d7:a9:53:69:84:91:fc:ad:a9:fc:82:77:fb:bd:0f:74:a6:86:
         1d:a1:9a:c8:67:e7:16:17:d7:2f:e7:78:5e:68:f7:c9:57:1d:
         29:e0:2d:db:77:62:cc:1d:bd:82:91:80:4c:a6:ba:08:87:af:
         29:26:d0:1c:ae:b7:1f:bb:de:a5:80:2e:21:5f:59:8b:d8:48:
         f9:3e:f7:ea:29:55:df:83:f4:53:db:28:f3:a9:20:b3:41:ed:
         b1:8a:0e:44:66:b5:58:10:93:9b:d1:a9:44:88:f2:15:7e:ba:
         3e:f0:be:02:66:25:e1:a1:7d:6a:ea:d0:81:99:5a:2a:5e:47:
         53:84:9f:1d:bb:73:32:be:a9:24:35:49:1d:03:dd:43:f5:b4:
         c4:62:7a:d7:0c:3d:36:82:77:d3:70:16:5f:10:36:70:de:c2:
         92:32:10:fe:d3:4d:99:9c:bf:0b:0d:c4:28:ec:5f:e7:dc:fb:
         7e:59:c8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:51:49 2025 by rpki-client