Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa
File:                     0ab95e96-8746-3429-afda-e3610724329f.roa (raw, json)
Hash identifier:          +U2v0AsIPKcsF+Hz+qqbQn6S4b4yf3J5E4uEXd0xB9M=
Subject key identifier:   7D:E1:F5:66:4F:6E:F4:AB:F2:B0:04:F0:81:4A:42:0C:69:BD:BF:4B
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BACA77F6E0B25A9593E100
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        173.194.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ca:77:f6:e0:b2:5a:95:93:e1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=8580211c-71a1-4269-bcdb-ab67abefb469
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a2:1a:fd:52:cf:c4:f7:67:fc:85:76:f4:ca:
                    62:57:01:4e:8f:14:58:dc:b9:90:db:bc:c8:77:b0:
                    68:92:cd:4a:3f:ab:ed:03:3f:1e:f6:f2:b9:cb:c5:
                    b7:f6:2c:7e:b2:29:be:10:0c:cf:6d:c7:d7:0b:94:
                    b4:e6:f0:c9:d2:0c:1b:27:30:07:16:f8:5e:fc:e4:
                    6e:27:46:1f:8b:a2:f2:73:cf:5b:1b:4d:8b:50:76:
                    22:79:c1:38:d3:21:56:06:dd:49:42:f5:4c:ba:2c:
                    a5:aa:bb:60:d0:34:80:8a:96:bd:7c:cc:eb:78:ef:
                    c0:49:4b:93:75:70:7c:0f:db:5b:11:13:f0:2d:0c:
                    a8:12:23:73:70:32:27:a3:96:e0:85:c3:10:e4:04:
                    fa:98:23:b6:0a:5c:fd:6c:07:31:c1:cf:3b:52:ab:
                    7d:22:99:ce:db:5f:7a:65:d4:af:69:54:78:7a:b0:
                    9a:7d:9f:7b:f7:28:59:5b:40:6e:3c:9c:fe:4a:39:
                    7b:68:66:c4:16:5b:b1:58:94:9c:fe:ad:a3:40:dd:
                    1e:69:33:47:ea:8b:07:f5:50:89:ec:77:f5:b2:8a:
                    5d:eb:40:fb:1f:8d:23:6d:44:ba:78:b6:56:d4:cf:
                    76:1e:fe:5b:d2:f3:d9:62:7c:8e:01:db:b1:af:81:
                    46:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:E1:F5:66:4F:6E:F4:AB:F2:B0:04:F0:81:4A:42:0C:69:BD:BF:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/0ab95e96-8746-3429-afda-e3610724329f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:98:34:9e:28:44:9d:58:17:1e:4b:7c:88:64:27:3e:42:96:
         30:49:79:0a:1b:75:84:d7:ce:92:72:67:8d:1c:63:3e:31:76:
         dd:f6:15:1f:09:d0:3f:8b:a7:a5:d5:ac:46:1d:dc:a5:36:0f:
         be:3d:18:04:68:e9:43:22:d0:67:fc:6c:b7:95:1b:4b:56:61:
         1e:8e:25:a3:dc:37:0e:07:96:b3:fb:0e:48:63:8d:cf:53:a4:
         60:ae:d6:bc:a5:06:8b:a0:a6:56:0b:ab:ed:98:e7:c9:cb:b7:
         65:06:e6:91:cd:ca:34:ba:e8:61:65:60:f1:84:59:0a:bc:f2:
         0a:93:00:ba:27:2f:0c:90:6b:76:ef:1a:b1:ad:0e:30:92:2f:
         0d:4c:ee:d5:29:db:70:bd:7f:33:2e:3a:1b:17:14:a6:39:2e:
         69:0c:54:09:2c:99:97:da:e7:4c:f5:d7:3d:34:8d:4d:16:18:
         19:43:b8:f4:40:a6:db:b6:d9:1f:2f:d1:eb:80:c0:d4:ac:eb:
         aa:d0:2d:9f:d1:18:a0:77:11:38:62:bc:42:97:08:2f:bb:79:
         b5:e0:c6:5f:a1:af:ee:a7:f4:f1:b8:62:91:69:8e:e9:65:79:
         86:6b:18:69:56:43:48:26:bb:dd:f5:e7:f8:31:33:a9:b1:ec:
         06:b3:16:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 02:17:28 2025 by rpki-client