Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5c24982f-ed2d-3d4c-a4f5-a84313ed7e34.roa
File:                     5c24982f-ed2d-3d4c-a4f5-a84313ed7e34.roa (raw, json)
Hash identifier:          lhHTQYPiHZhN2egDcnV9cpx38NsBUI3fk3g1YLTBIJY=
Subject key identifier:   12:EB:FA:06:57:27:E0:A0:2C:9F:34:47:C2:CE:54:EB:7C:D2:A3:F2
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849F06D295FAF639400DD61B240
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5c24982f-ed2d-3d4c-a4f5-a84313ed7e34.roa
Signing time:             Thu 22 May 2025 15:47:47 +0000
ROA not before:           Thu 22 May 2025 15:47:47 +0000
ROA not after:            Wed 20 Aug 2025 15:47:47 +0000
asID:                     271
IP address blocks:        142.231.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:6d:29:5f:af:63:94:00:dd:61:b2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 22 15:47:47 2025 GMT
            Not After : Aug 20 15:47:47 2025 GMT
        Subject: CN=72bf4312-50e0-4541-906e-29dfde78e265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:b5:ed:9c:13:51:9d:8c:8c:cc:bb:5b:ed:
                    df:08:08:d2:a7:96:f0:74:de:8b:f0:79:3f:2e:cd:
                    69:09:c2:0a:ad:69:1a:97:4a:1c:a1:f6:1c:d2:41:
                    9a:f3:91:25:e4:50:c6:8a:5a:05:cf:27:57:07:82:
                    03:3b:b9:a7:7c:7d:72:73:d1:8f:bf:77:91:e6:3f:
                    cb:5f:a1:02:25:50:b0:cf:90:25:26:ae:73:d2:ea:
                    68:4f:8c:4a:e3:f3:40:b2:08:5f:f3:e3:2e:af:de:
                    dd:6e:97:1a:23:46:a5:a5:de:ee:44:00:29:6e:b1:
                    66:34:dc:59:c9:32:60:0e:e2:b3:eb:c1:f1:06:83:
                    62:52:f8:74:02:ba:81:b5:ea:c1:d9:ee:c1:1a:b3:
                    34:b0:b4:c5:6f:77:46:44:3c:9b:a9:a3:29:3e:80:
                    64:ef:80:64:ee:2a:3b:f2:25:5c:41:3d:cd:3e:fc:
                    b8:d6:eb:85:3c:0b:6a:a8:fa:57:1d:4d:75:b0:66:
                    ee:a7:78:3a:ac:ff:05:92:80:b7:5d:e6:d9:2b:f9:
                    03:9a:b1:9f:6a:7c:0b:31:73:69:29:bb:08:69:c4:
                    21:34:89:30:35:95:45:87:66:21:96:2e:a8:27:a8:
                    c9:3f:80:9e:ec:2b:d3:93:ef:dd:ac:a2:3a:fa:30:
                    ea:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:EB:FA:06:57:27:E0:A0:2C:9F:34:47:C2:CE:54:EB:7C:D2:A3:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/5c24982f-ed2d-3d4c-a4f5-a84313ed7e34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.231.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:49:04:b7:ea:94:ca:77:a1:89:84:28:a5:a6:08:9c:c7:90:
         cc:f7:72:54:ef:cc:69:6d:02:56:37:34:f8:f8:d8:32:9b:a0:
         5f:23:d1:35:3c:c4:e8:02:ae:18:b2:d1:e5:89:42:58:b5:51:
         73:1b:30:c0:63:c3:e5:47:28:57:df:52:9a:2a:b9:4d:3a:24:
         80:a8:03:7f:bf:07:10:85:ee:7a:5f:fa:1d:6d:a8:66:dd:94:
         8a:ad:e5:2d:11:cd:a2:80:8a:4f:7b:4d:c0:81:3e:20:13:b8:
         ae:81:33:dd:8c:d9:34:77:74:1c:c7:36:76:a3:02:bd:cc:3d:
         bb:97:93:dd:8a:35:1f:e2:87:51:3c:0d:3d:ce:a4:ad:b6:fd:
         71:4c:42:98:9f:88:b8:fc:00:81:ff:ca:6b:98:aa:91:38:89:
         b0:1b:83:74:a1:89:9b:47:78:bf:bb:25:52:f2:df:9b:7d:ee:
         66:b0:97:2b:7a:e1:47:95:8f:40:11:94:31:e1:bb:25:e4:08:
         40:b4:13:76:79:77:d7:87:b0:ba:84:84:ef:78:cb:5b:d5:79:
         43:35:4f:4e:77:46:f3:a3:8e:88:b4:95:b3:c8:e9:cd:b9:38:
         c0:84:42:09:7f:a2:ef:3b:3a:2c:62:ab:25:a5:29:94:01:d1:
         f9:02:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:53 2025 by rpki-client