Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
File:                     d3887374-8545-34aa-837d-dd4cb2f0f338.roa (raw, json)
Hash identifier:          niJvEwynYEj+zO+WkAl/i62QdiOCVX7WfX0JI9/upOo=
Subject key identifier:   8C:8D:A8:A3:F6:79:9B:F1:B1:B8:DB:83:4B:00:61:A7:72:42:08:DB
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F43285848C6E628FCA7B946F0BA10F380
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        50.116.72.0/22 maxlen: 22
                          50.116.76.0/22 maxlen: 22
                          50.116.104.0/21 maxlen: 22
                          50.116.116.0/22 maxlen: 22
                          108.167.139.0/24 maxlen: 24
                          108.167.174.0/23 maxlen: 23
                          108.167.176.0/22 maxlen: 22
                          108.167.184.0/22 maxlen: 22
                          108.179.206.0/23 maxlen: 23
                          108.179.224.0/22 maxlen: 22
                          108.179.236.0/22 maxlen: 22
                          108.179.248.0/22 maxlen: 22
                          108.179.254.0/24 maxlen: 24
                          192.185.206.0/23 maxlen: 24
                          216.172.164.0/22 maxlen: 22
                          216.172.176.0/22 maxlen: 22
                          216.172.180.0/22 maxlen: 22
                          216.172.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:28:fc:a7:b9:46:f0:ba:10:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=f3c28569-534d-4dc7-b100-2cf22d2ebf80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:20:40:a3:d2:cb:95:42:51:f0:39:cc:2a:db:
                    3d:76:d3:ed:2b:0b:f2:33:aa:8f:28:d0:e3:39:d0:
                    83:59:24:e2:64:1c:46:5c:03:59:10:de:54:f6:9f:
                    52:bc:0a:e7:83:e9:26:93:73:6b:83:2e:c7:d7:e7:
                    c5:8b:3f:ae:4e:8a:3e:67:aa:3a:65:df:d3:0d:2d:
                    4f:f6:6e:f8:09:44:ed:5c:8f:78:83:96:24:3c:fc:
                    c2:97:fa:3d:57:01:82:40:55:9a:2c:7d:d2:4c:dd:
                    6b:e8:c1:4e:31:d7:6a:a3:f4:19:aa:d4:34:0b:1e:
                    8b:45:da:81:4d:cc:92:db:e6:a6:05:99:c3:41:be:
                    45:b2:4a:29:2b:d6:9f:07:dc:23:b3:8c:ed:69:76:
                    88:1b:98:ef:c4:5c:e1:79:b1:98:f1:a5:80:5a:46:
                    01:3d:03:ee:f0:26:fe:b0:de:57:ad:cf:f4:63:20:
                    4d:f8:db:4d:55:d2:91:44:cd:b1:f8:a5:80:43:7a:
                    c4:3b:bc:c0:8e:54:f6:c0:25:e1:17:f0:b3:88:2d:
                    64:1b:d1:d4:6e:69:d1:7a:ad:c5:cc:f5:ca:83:68:
                    40:41:2b:7b:d8:41:cc:fa:06:5b:29:f3:74:84:aa:
                    6c:bb:ff:56:10:12:f4:7d:9c:58:7b:e7:66:ee:b7:
                    c3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8D:A8:A3:F6:79:9B:F1:B1:B8:DB:83:4B:00:61:A7:72:42:08:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/d3887374-8545-34aa-837d-dd4cb2f0f338.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.72.0/21
                  50.116.104.0/21
                  50.116.116.0/22
                  108.167.139.0/24
                  108.167.174.0-108.167.179.255
                  108.167.184.0/22
                  108.179.206.0/23
                  108.179.224.0/22
                  108.179.236.0/22
                  108.179.248.0/22
                  108.179.254.0/24
                  192.185.206.0/23
                  216.172.164.0/22
                  216.172.176.0/21
                  216.172.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:86:b3:1b:91:f8:53:65:c6:e8:08:9a:c5:8a:82:3d:39:c4:
         df:ed:2c:24:f0:ec:f7:a3:78:09:de:6a:bc:9f:49:1d:e9:47:
         0c:1a:2a:96:38:d4:45:5b:d1:5f:13:b0:07:31:91:06:50:c6:
         04:81:c4:77:0e:f7:2e:25:45:95:6c:a2:3a:56:eb:82:27:b2:
         be:21:4c:02:c4:97:d7:dd:c0:3b:fa:49:02:8e:7f:77:70:44:
         30:c8:e8:18:4a:90:05:95:10:f6:7d:8c:99:bf:cf:8a:48:be:
         52:79:e9:3e:fa:ab:8e:54:84:86:0d:ec:07:81:d8:ac:a7:0a:
         c3:2c:8f:e3:06:ae:b2:e0:86:4d:ac:97:4f:0a:fe:49:52:0b:
         6f:49:e7:15:90:e4:12:0c:20:df:19:bc:4a:7f:8f:56:58:26:
         50:13:46:04:97:4f:6c:f2:f8:8e:a8:a1:99:73:fd:aa:fe:26:
         3a:84:36:29:f8:33:a7:5f:f7:9a:01:02:da:22:e3:e1:ea:39:
         91:4c:f6:13:69:08:f1:45:7f:4a:ad:1c:12:2d:b9:f2:fc:e6:
         fc:26:50:a0:ea:77:db:e1:1e:fa:92:ed:be:e6:cd:a3:69:04:
         79:c6:03:be:3c:4e:d8:d6:a4:de:d2:59:70:bb:dd:94:a8:ab:
         78:83:d6:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:49 2025 by rpki-client