Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa
File:                     38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa (raw, json)
Hash identifier:          Mb6cQb6bNQUFdUTimM6nkLVCtmJ4Cb0XpumGesQ0RK8=
Subject key identifier:   61:D7:FE:24:11:69:D8:87:04:D3:C4:E9:61:DC:55:5F:67:C5:4E:E9
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285848ADC61E545BCA4E5B9593E400
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa
Signing time:             Mon 27 Jan 2025 02:00:39 +0000
ROA not before:           Mon 27 Jan 2025 02:00:39 +0000
ROA not after:            Sun 27 Apr 2025 01:00:39 +0000
asID:                     14793
IP address blocks:        76.164.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ad:c6:1e:54:5b:ca:4e:5b:95:93:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jan 27 02:00:39 2025 GMT
            Not After : Apr 27 01:00:39 2025 GMT
        Subject: CN=d090b98d-4893-4451-bcb7-87f3c3fe97d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:53:6c:06:e7:fb:cc:55:6d:95:48:59:21:
                    b8:9d:2a:56:f9:50:38:6c:a8:38:70:d6:45:4d:74:
                    da:6a:d0:05:16:f4:48:2d:09:24:15:ab:a2:36:26:
                    19:30:23:b9:1a:3b:2f:ed:ef:e3:d5:45:47:0e:85:
                    fb:33:36:be:97:fe:97:88:11:64:15:0c:cd:14:d6:
                    db:3f:7f:00:a7:8d:9f:58:a7:ca:50:93:cc:59:25:
                    21:45:66:66:74:af:00:d8:db:1b:2f:c1:5c:16:c3:
                    d2:cd:fe:4b:04:a7:18:97:bc:7d:a2:7f:54:20:74:
                    1d:f9:6a:a1:bb:2e:3e:42:2c:8e:5f:43:98:03:08:
                    32:37:11:44:91:dd:9a:4a:f8:7d:9f:3e:23:bb:82:
                    d3:96:63:6a:80:ff:62:58:4d:f1:45:a3:aa:09:16:
                    1f:64:6d:69:5f:dc:73:c6:dc:08:a3:ce:19:2a:2c:
                    3d:51:df:4c:a7:57:da:ca:42:7e:69:fd:1d:37:8f:
                    1c:0b:ac:19:b5:a9:37:b4:d4:be:29:26:86:17:ef:
                    57:8d:49:67:bc:8f:3e:c7:da:fd:a8:9c:13:c2:af:
                    46:0f:0e:42:e7:e7:2c:c2:a9:05:c8:fd:fb:7b:a8:
                    41:59:a8:be:de:cb:db:0c:48:f3:b5:00:80:7a:e4:
                    a4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:D7:FE:24:11:69:D8:87:04:D3:C4:E9:61:DC:55:5F:67:C5:4E:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/38630d3b-d521-32b3-bf75-7d1f8014e5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:63:b9:b7:15:e5:3b:58:d2:89:87:31:3d:17:fd:5f:3e:ac:
         70:0d:f9:a8:db:e6:e7:bb:1f:09:fa:ea:97:09:7c:27:1f:95:
         c2:3b:23:95:00:b4:e9:e2:eb:65:a3:98:7a:08:d4:88:3d:96:
         07:ad:df:1e:45:37:07:90:18:c6:1a:17:fd:ec:5a:28:d5:0e:
         29:c6:54:fd:9b:48:89:c7:79:5f:25:41:6e:b2:7b:64:85:bf:
         a1:6b:b0:27:89:b4:a7:9d:22:17:88:68:b4:1f:71:bf:cb:21:
         da:00:1a:bc:51:8d:0f:c5:10:d6:7c:41:d8:aa:78:30:d5:97:
         00:5c:b9:e3:c5:2f:52:c8:54:a2:dd:5f:23:a6:dd:2a:70:4d:
         02:dd:ce:30:74:bd:48:09:12:dd:02:35:7f:9d:31:81:7e:83:
         2d:bf:e2:69:f5:6d:06:21:cd:03:7a:02:b9:1e:42:4e:9b:df:
         93:86:9c:bd:15:c6:14:c1:f6:23:b8:b6:3f:54:7e:8b:e4:cd:
         a3:c4:c1:d9:14:38:b5:de:89:b2:e3:ae:2e:67:e0:66:e4:1c:
         b3:68:36:f5:ff:fc:90:64:1b:c9:7c:8a:aa:83:d2:d1:e6:1d:
         c5:c5:27:bd:97:d0:90:df:54:e5:7b:ed:01:0b:19:9d:de:09:
         9f:d4:85:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:55 2025 by rpki-client