Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/2c61e4db-a989-3035-b927-511b55999c4a.roa
File:                     2c61e4db-a989-3035-b927-511b55999c4a.roa (raw, json)
Hash identifier:          a9ba6uomFJjV+z3XwwnD1knrClXcp1HRPiJm/L41TYU=
Subject key identifier:   04:DF:96:05:34:C2:79:D5:33:30:97:4F:D8:69:8C:26:F0:A5:B3:C2
Certificate issuer:       /CN=62612914-d3c8-454d-861f-ea1fa94cf858
Certificate serial:       010D0C9F432858491ED6D9A4D443954A76C59280
Authority key identifier: D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/2c61e4db-a989-3035-b927-511b55999c4a.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     398542
IP address blocks:        23.129.82.0/24 maxlen: 24
                          134.195.108.0/22 maxlen: 24
                          158.51.128.0/22 maxlen: 24
                          2605:e140::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:d9:a4:d4:43:95:4a:76:c5:92:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62612914-d3c8-454d-861f-ea1fa94cf858
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=66cf412b-4a35-4ed6-9432-5a5aab2aabad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0d:ee:17:d3:51:2b:bb:e7:2d:2d:33:c9:3f:
                    59:5a:a0:26:47:7c:3c:4b:3b:35:de:ba:b3:89:e1:
                    e7:4f:16:75:41:4e:a4:f2:0c:12:c9:b8:68:4f:b2:
                    5f:70:25:aa:f0:2f:92:78:bb:cd:0c:d5:79:04:8d:
                    50:ad:36:b0:57:c4:1f:d5:d6:b6:e5:8f:bd:08:92:
                    f9:0b:84:03:84:d1:af:0d:54:4d:dc:af:c1:d3:9f:
                    19:d8:51:4e:15:bd:93:4c:44:ca:63:d0:35:02:a9:
                    cb:70:87:36:4e:9e:89:0d:68:e4:f5:81:cc:59:4f:
                    09:c6:96:1e:d9:0a:1c:0c:c8:b8:bc:aa:92:0d:1b:
                    28:e2:8f:6f:bb:d0:a4:f3:08:21:b5:01:68:46:c2:
                    09:55:08:42:57:f2:2b:cd:49:91:9d:76:89:ee:e0:
                    b4:74:e1:1b:f1:cf:c8:fc:54:1d:25:de:8f:5f:10:
                    03:2b:00:f5:ba:44:2f:51:09:ba:92:ba:c5:e4:70:
                    6b:05:86:94:d8:c4:d1:f8:71:3c:bb:c2:60:96:bc:
                    5e:93:e8:7c:b6:41:6d:a6:c6:09:c9:82:2a:cb:fe:
                    0d:51:76:43:1e:5e:bf:83:27:82:2a:b7:07:be:c3:
                    88:c1:a2:5b:db:cd:5e:fc:d7:8a:db:44:cd:87:3d:
                    e1:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DF:96:05:34:C2:79:D5:33:30:97:4F:D8:69:8C:26:F0:A5:B3:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/2c61e4db-a989-3035-b927-511b55999c4a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858/62612914-d3c8-454d-861f-ea1fa94cf858.crl

            X509v3 Authority Key Identifier:
                keyid:D3:CD:75:B2:6D:75:6B:14:9F:0B:38:3A:11:63:50:B2:90:3B:0C:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/62612914-d3c8-454d-861f-ea1fa94cf858.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.129.82.0/24
                  134.195.108.0/22
                  158.51.128.0/22
                IPv6:
                  2605:e140::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:84:e2:e9:44:9b:06:34:b5:bd:77:b8:85:c8:65:12:24:eb:
         7a:73:f1:1c:91:b4:2c:96:ba:ab:d9:65:91:79:fc:29:1c:b6:
         ee:a9:d0:ab:f6:80:0d:3e:e5:92:c7:93:81:47:4c:78:f9:4e:
         c6:fd:61:dd:6c:8b:a9:0b:35:f0:b8:c9:11:c2:ae:a1:e1:b9:
         4e:38:2c:9f:f6:0d:f4:82:e1:e0:55:89:30:51:2b:56:25:12:
         42:cb:20:93:dc:d6:73:4d:c6:06:ec:c9:51:9c:77:9d:18:7b:
         8c:c2:ec:b3:7d:7d:4e:0c:aa:50:a1:c0:3f:bf:51:a4:ff:df:
         5b:9d:11:80:cd:ef:76:e4:80:d2:89:b5:29:01:5b:6b:38:fe:
         7d:ac:22:dc:ad:22:b1:17:10:cc:d5:96:e8:3b:ff:a1:f9:78:
         4c:f0:9b:bb:08:ad:68:2a:2a:e4:ee:9f:ea:b7:38:61:14:3e:
         ca:3e:e7:97:3b:0c:f3:f3:1d:ed:2b:f4:6d:d7:2e:14:73:0b:
         45:9f:9c:d1:28:aa:d1:d4:01:80:1e:73:d5:8c:d6:ed:86:6f:
         c8:31:7e:a7:91:5b:02:68:df:2a:85:00:2f:97:4b:11:1c:69:
         39:0a:ef:ae:f6:b7:51:12:06:7a:55:44:5f:a2:88:d8:63:e3:
         40:bf:f9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:37 2025 by rpki-client