Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa
File:                     ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa (raw, json)
Hash identifier:          yYotFDynJn+uWHsGpxkHO0iuNh5gE9cme7yFK/uDZqA=
Subject key identifier:   34:86:C5:41:A8:3A:EE:EE:26:AB:B0:D0:AE:8C:CD:53:9F:FE:56:B3
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F432858499F24CF07BCF7FDAB61DF01C0
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     15169
IP address blocks:        108.177.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:cf:07:bc:f7:fd:ab:61:df:01:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=d84fbf41-51af-4a1b-86ca-396e7c617bcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:05:b3:cd:05:7f:7c:fb:14:43:3a:cb:27:ea:
                    fd:8f:55:a4:30:dd:54:42:97:71:d6:3e:95:df:61:
                    85:75:bb:34:b1:ba:52:4d:3c:f4:20:f6:33:32:84:
                    92:cc:46:3f:78:49:f3:52:f7:82:d9:02:29:87:3f:
                    9c:65:7d:55:82:56:96:15:e0:f3:ea:0c:67:91:ec:
                    cc:bc:08:c0:ec:3a:c1:20:74:32:ac:ef:83:f8:8f:
                    5f:bd:39:4f:a7:f2:b2:f9:7d:bc:07:cd:4f:3b:e2:
                    bd:fb:a2:32:4e:44:ae:dc:d2:13:9c:f4:8c:5f:9b:
                    03:b9:9e:00:52:0b:31:be:8a:33:b7:0c:6f:cc:b9:
                    2d:7c:87:d4:0f:29:74:d9:47:4c:69:70:66:29:37:
                    18:5d:ab:53:2a:12:26:02:1c:a5:d9:c6:9e:43:00:
                    df:ae:21:60:44:75:0a:05:21:f3:14:0c:c5:78:ef:
                    e3:2d:de:99:0a:10:9b:4c:ad:bd:72:c8:59:51:37:
                    fd:a0:0f:47:63:2d:ad:ce:87:ca:0d:b9:07:b6:c6:
                    72:ab:53:25:56:90:f3:6f:a8:a9:e6:c9:bf:0d:65:
                    d3:eb:38:ef:c4:e6:db:9f:f3:e1:6e:54:4f:ff:ef:
                    7e:7b:a1:86:29:50:18:67:70:b7:71:ea:fe:16:07:
                    49:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:86:C5:41:A8:3A:EE:EE:26:AB:B0:D0:AE:8C:CD:53:9F:FE:56:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/ab24d62c-2fff-3baf-b92a-0d28aaaca333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.177.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:b3:a4:b2:83:e2:6d:a1:76:8c:c0:b3:44:52:ac:93:a7:1f:
         63:08:6d:d0:53:45:4f:1b:c4:4b:4e:74:5f:97:82:4d:a1:4f:
         b6:9d:e2:d5:eb:eb:62:cd:62:c0:85:48:60:5b:c0:b8:2a:ca:
         bd:3d:d4:4f:6c:78:4c:13:a2:44:69:c1:50:ec:d0:2d:a8:a6:
         1f:87:b5:8e:d4:97:c8:94:ab:b5:0b:ac:e9:97:37:ff:ac:29:
         45:a7:5c:5b:53:72:a9:bb:2d:56:91:9c:a4:c6:0b:e6:2d:31:
         98:2c:0f:06:fb:4a:d1:42:91:1c:83:25:5e:0e:0b:53:a2:47:
         98:f9:db:68:52:a2:e8:8c:d8:aa:09:a0:d4:ab:b0:db:ff:a4:
         e5:49:85:8c:c9:af:f3:c6:37:46:33:34:b5:03:8a:6d:4e:a9:
         24:d5:92:47:19:08:a3:96:24:7a:3b:15:1c:29:49:68:71:c5:
         76:8a:29:3d:be:c2:1a:f9:93:94:2d:28:7a:93:f7:0f:a4:2b:
         ba:1d:66:18:e5:ab:02:f5:fa:2e:bf:ab:6d:f2:03:14:1f:0f:
         fd:4e:c0:40:27:5b:87:07:63:12:bd:32:98:40:2e:60:ec:90:
         a2:4e:1c:ab:9b:ca:0f:d9:22:63:40:d7:d3:ee:7b:98:30:85:
         5f:8a:95:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:52:49 2025 by rpki-client