Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa
File:                     44707c37-1c7b-361f-a65a-135816af0615.roa (raw, json)
Hash identifier:          UfV5d8nVvK2mIPTomdfXDW7ghMWWDnrx+SIRDaxFlfk=
Subject key identifier:   8C:74:E7:08:DE:AD:BA:7C:6F:15:F8:DD:C3:7B:8F:F9:22:E8:A4:2B
Certificate issuer:       /CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
Certificate serial:       010D0C9F432858498C4A51D931FEF29340BA67C0
Authority key identifier: BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa
Signing time:             Wed 16 Apr 2025 18:56:44 +0000
ROA not before:           Wed 16 Apr 2025 18:56:44 +0000
ROA not after:            Tue 15 Jul 2025 18:56:44 +0000
asID:                     203724
IP address blocks:        131.229.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:4a:51:d9:31:fe:f2:93:40:ba:67:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a9916d5-1144-4fea-8ee5-509e8d897b74
        Validity
            Not Before: Apr 16 18:56:44 2025 GMT
            Not After : Jul 15 18:56:44 2025 GMT
        Subject: CN=b477c92b-b4ce-4f81-b13e-218197a55b0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:f3:56:93:83:c7:74:de:70:af:8d:c6:8e:
                    00:62:16:b5:c6:b8:6c:e0:27:93:55:4c:e3:d9:a0:
                    9a:04:9c:bf:5b:73:32:bb:fc:07:60:1e:30:a2:a2:
                    a6:7c:61:eb:6b:22:70:08:a9:74:fd:21:38:ec:5f:
                    df:cc:97:8a:93:c5:50:ff:e6:62:45:61:7b:a3:26:
                    d2:93:1b:29:be:9a:94:20:d5:a4:1b:3c:e2:d4:25:
                    36:80:1e:7f:75:7c:b0:ca:14:3b:41:bd:77:29:0f:
                    f2:82:2e:94:ab:e6:53:cc:c5:2f:74:94:c4:bb:5f:
                    54:a5:a8:1c:43:67:95:63:2c:1f:a2:7f:3b:16:5d:
                    9b:dd:94:cd:25:25:de:9e:05:23:b5:47:94:d3:99:
                    02:ba:b1:a6:25:9e:e9:b6:70:c5:fa:19:e0:a2:bc:
                    27:76:52:e4:38:0e:ea:f7:bd:0d:40:ed:b3:6a:22:
                    30:8c:c8:5a:f4:f7:9c:a6:5f:77:d9:78:41:aa:4d:
                    fe:56:6d:12:07:34:55:46:ed:4e:65:e3:9f:c1:1e:
                    5c:9a:ac:47:8a:60:60:e0:99:08:47:19:5e:24:20:
                    79:70:92:55:20:3f:b5:79:63:98:29:b1:7b:c4:90:
                    74:8a:ed:96:75:6f:83:6b:a2:f0:66:b8:70:11:36:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:74:E7:08:DE:AD:BA:7C:6F:15:F8:DD:C3:7B:8F:F9:22:E8:A4:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/44707c37-1c7b-361f-a65a-135816af0615.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74/9a9916d5-1144-4fea-8ee5-509e8d897b74.crl

            X509v3 Authority Key Identifier:
                keyid:BC:D6:1E:7D:E5:0B:B8:DE:C4:2C:06:0B:32:CC:7C:80:7B:29:82:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9a9916d5-1144-4fea-8ee5-509e8d897b74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.229.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:89:5d:36:52:db:06:5d:86:4e:3d:c1:81:0a:a5:52:9d:2c:
         e0:a6:4f:e3:d6:75:2f:c9:c6:4b:a5:85:c2:25:f0:45:dd:ca:
         56:5e:8a:64:54:fc:e5:8d:3c:0f:61:13:3a:66:1f:a0:80:01:
         df:48:94:93:46:14:04:10:4e:84:c4:2e:fe:69:ea:71:d2:5a:
         9c:a5:03:e3:af:64:5f:50:25:df:db:00:74:47:12:df:68:24:
         52:15:d2:14:42:a7:d1:ed:07:ce:b1:f5:f5:bd:9d:9f:c6:60:
         8d:40:c6:69:50:84:1e:2e:73:e1:10:30:21:b3:95:4d:68:b6:
         e6:4a:91:d1:89:36:3b:39:48:03:7d:84:c5:3b:ba:7d:a6:8f:
         8e:5f:f9:a5:24:f8:72:5e:d5:7d:16:8b:47:f5:c6:a5:54:19:
         00:c7:8b:bd:b0:eb:a3:c8:c4:58:e4:c2:be:28:80:41:70:6d:
         fa:bd:19:6a:5d:a1:3f:3d:37:11:3d:aa:df:b4:f9:2d:6f:ba:
         f2:16:67:c8:84:7c:fc:9a:3e:41:25:1b:d7:8c:f2:13:2b:de:
         7f:f4:5a:2d:fe:2a:f0:23:54:e2:3c:86:bc:8f:db:c7:1c:61:
         37:08:4c:c5:e2:22:d4:5c:72:52:a7:ce:89:c6:34:be:d0:21:
         bd:52:5d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 06:45:53 2025 by rpki-client