Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa
File:                     c08f2550-d467-3bdd-99e1-447b55007004.roa (raw, json)
Hash identifier:          V2gMKhU+k3CzSL3t3TgtYp20TPfODTWZQsYP1pSotRI=
Subject key identifier:   33:83:3A:FF:64:E1:E9:B4:9A:8B:BE:17:CD:6A:4A:E1:64:A0:B0:7D
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BAC6B526A64F5FE2E25FA8
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        173.194.144.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:c6:b5:26:a6:4f:5f:e2:e2:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=bbb414ac-9deb-4446-8fcf-83b50af7b01f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e8:10:b1:1d:d7:84:26:2d:0b:66:68:33:6c:
                    57:cd:e4:3e:ce:84:15:5c:03:8f:a1:07:de:1e:2a:
                    35:5c:58:37:f6:24:18:57:72:0e:7a:30:93:ed:3a:
                    cf:56:f9:a3:65:e7:3e:ea:49:3d:9a:fc:c8:14:69:
                    83:ab:31:66:16:c3:4d:89:ce:dd:74:e9:b3:5a:20:
                    8d:5c:bd:c6:91:2a:e6:f7:6d:6e:cf:b0:d8:00:15:
                    53:c3:9e:2e:c5:7b:50:f9:a3:7d:3c:84:e6:19:bc:
                    d0:08:84:89:93:0f:38:9e:d8:18:6c:29:c7:4f:b6:
                    46:34:0d:f4:1a:44:8e:c6:73:55:71:54:60:71:fc:
                    68:c0:f5:37:f2:71:22:b6:a0:cd:4b:d3:9c:16:3d:
                    b4:f0:43:c0:b1:f1:29:5a:ba:57:d2:51:b9:5a:0e:
                    2b:9f:d6:6d:2a:80:43:eb:c4:67:3e:33:fc:84:11:
                    67:23:cd:8a:8f:55:9e:ea:dd:23:98:3e:4d:8f:4d:
                    80:da:ea:7a:6f:8e:e6:83:22:fa:67:57:69:b1:ca:
                    bc:28:6d:90:a3:6b:e6:79:c7:db:23:b8:bf:00:f5:
                    bf:b6:17:4e:05:96:13:78:af:70:97:95:2d:78:4f:
                    82:b4:c0:63:95:49:42:00:f8:4c:84:6d:10:9b:e3:
                    1b:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:83:3A:FF:64:E1:E9:B4:9A:8B:BE:17:CD:6A:4A:E1:64:A0:B0:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/c08f2550-d467-3bdd-99e1-447b55007004.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:da:f6:57:9e:17:eb:8a:f2:c4:87:ca:2f:87:2a:b0:e7:58:
         0c:b9:98:61:3e:51:1e:34:fe:39:04:5f:f2:d2:e2:7c:56:1d:
         60:39:6a:37:6d:91:74:71:98:dc:b3:d8:49:2e:f5:f5:27:da:
         42:36:84:3c:20:91:ab:c9:69:dd:8b:02:41:65:eb:c3:db:d7:
         5e:66:c5:2d:2c:eb:37:45:3a:cc:69:98:b3:f1:78:0f:ea:53:
         7f:1e:3b:01:3b:0e:b5:ec:b2:ca:d0:a2:52:04:eb:6e:d8:5a:
         af:bf:57:06:a5:53:f5:ff:69:67:8b:c4:fd:ab:6a:c5:73:1d:
         82:03:c4:50:0b:64:69:f0:be:1c:d7:a5:1d:a6:0a:6f:02:1f:
         cc:79:98:c3:af:79:92:4e:4b:90:1f:7b:36:e9:89:b3:58:c5:
         72:fb:92:a6:7d:7c:e5:cf:b5:45:93:56:63:51:3c:15:0d:e3:
         e5:ab:a9:27:04:09:59:f1:8f:8a:08:47:67:c5:bf:37:ef:84:
         f2:52:3e:fc:a3:67:f1:96:e4:be:80:fe:0a:9b:f6:db:91:2b:
         ab:0f:b0:d6:25:0f:04:2b:1f:e9:49:11:f7:4c:f8:56:0c:52:
         a5:74:6b:b1:21:2f:43:8e:6b:8e:bd:cc:01:fd:ec:40:06:7b:
         e9:4b:8e:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 17:25:48 2025 by rpki-client