Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa
File:                     03221bad-8ea7-3755-b09a-370c153f1b1d.roa (raw, json)
Hash identifier:          5c44JVnPXli9ebIKCyI7oBLml+Hh6uoR4R7fSN/DLI4=
Subject key identifier:   43:2C:17:5A:63:86:66:A2:B6:C4:DC:D7:38:C3:7D:9E:AA:06:9E:3F
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C55EBDE21FBB3C666444A90
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa
Signing time:             Wed 16 Apr 2025 19:20:07 +0000
ROA not before:           Wed 16 Apr 2025 19:20:07 +0000
ROA not after:            Tue 15 Jul 2025 19:20:07 +0000
asID:                     203724
IP address blocks:        131.229.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:55:eb:de:21:fb:b3:c6:66:44:4a:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 19:20:07 2025 GMT
            Not After : Jul 15 19:20:07 2025 GMT
        Subject: CN=391660c5-fb36-4703-b7c1-96097d144eaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:8e:bd:a5:b0:6d:ee:74:d6:b5:3f:ba:ad:e2:
                    c3:af:3f:2f:9c:9c:46:ec:95:32:d3:d5:2c:33:a2:
                    81:a9:01:01:eb:27:04:5b:24:a0:6e:b1:7a:7c:25:
                    ae:e9:7f:0d:18:7a:77:df:46:57:c3:e0:3e:97:5a:
                    f5:79:ee:47:11:1f:da:87:f0:45:55:90:00:8c:0a:
                    86:2b:34:b5:e2:b9:68:c1:ee:e2:9d:86:7f:44:e1:
                    a8:5d:f2:07:84:0f:ee:35:12:5f:45:dd:f0:29:87:
                    2d:52:9a:53:04:b1:76:85:3e:6c:b6:42:8a:b2:9d:
                    a2:5e:9a:0a:90:03:1a:98:87:a6:63:03:dc:15:ad:
                    c0:ab:61:dd:3a:7f:3c:38:7e:a7:db:e0:6f:77:14:
                    0b:0c:38:69:5a:f0:8e:3c:43:ea:39:21:83:31:06:
                    3c:8f:26:45:82:e0:49:24:41:d2:f4:84:0c:2d:c9:
                    0c:2b:8b:fb:b2:0f:97:c8:82:ca:fd:09:33:ca:d2:
                    e0:37:82:d1:bf:96:ed:a0:dd:a5:83:96:2d:5c:b0:
                    5b:cf:14:19:75:3d:8a:3c:1a:6e:9e:6f:9f:29:c6:
                    ad:a1:65:03:94:77:3b:6d:70:d3:cf:4d:99:96:c5:
                    ec:48:1c:28:3a:75:88:53:26:41:32:7a:39:a2:ee:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:2C:17:5A:63:86:66:A2:B6:C4:DC:D7:38:C3:7D:9E:AA:06:9E:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/03221bad-8ea7-3755-b09a-370c153f1b1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:ce:05:b6:25:3a:d6:f0:1c:54:c4:59:32:bb:35:e9:f4:46:
         e0:d8:7f:4d:0c:2b:7e:2a:1f:32:b8:29:7f:78:dd:9f:3e:ba:
         a4:a9:88:52:c6:85:c3:08:fa:06:46:e2:71:8f:bc:52:0b:de:
         5c:ea:9c:b1:96:9f:d1:2d:5d:5e:9a:60:85:a4:b7:a5:86:61:
         74:e8:4f:f9:31:53:f7:bb:1f:d5:4a:c5:fe:44:7f:f3:8a:cb:
         9d:c4:5b:9b:72:83:aa:ce:84:d3:ea:49:83:02:51:5c:c3:87:
         73:77:2f:be:34:61:6a:2d:8f:2d:0c:01:96:e6:aa:0f:2f:3e:
         49:0c:5a:52:ef:ea:7f:3b:84:2d:34:9f:a7:2a:6f:91:52:09:
         cb:f5:e4:ed:b9:74:01:be:75:cc:d2:9b:76:d4:7a:d4:95:2e:
         ff:4c:8c:7b:7e:1e:ae:91:ad:01:98:bd:da:17:05:dc:7e:23:
         fa:ae:58:68:a4:e1:b9:9d:78:f6:52:ba:93:23:38:1d:81:91:
         7d:73:64:59:d7:e4:7d:f7:8d:db:5c:04:2e:5d:4e:a2:49:f2:
         4d:33:06:bd:84:ca:79:98:b2:38:ce:d7:b1:8a:71:23:da:71:
         cd:3f:da:78:0e:d7:a6:e5:41:46:67:ab:f4:14:8d:9a:54:bc:
         25:08:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 05:44:34 2025 by rpki-client