Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
File:                     4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa (raw, json)
Hash identifier:          WLUhAxBH1yM2QPzBB/r9j9SR8VKxRue/0XWMgxPiO1U=
Subject key identifier:   90:2A:00:7D:04:B5:65:58:D0:19:26:EF:76:B1:A5:C2:4C:72:ED:A1
Certificate issuer:       /CN=2627756a-b322-49e6-941e-ed30e9ab9eae
Certificate serial:       010D0C9F43285848E2D10FA38A61DF9C93D19480
Authority key identifier: 84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     46489
IP address blocks:        23.160.0.0/24 maxlen: 24
                          99.181.64.0/18 maxlen: 24
                          192.16.64.0/21 maxlen: 24
                          192.108.239.0/24 maxlen: 24
                          199.9.248.0/21 maxlen: 24
                          2620:f8::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:0f:a3:8a:61:df:9c:93:d1:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2627756a-b322-49e6-941e-ed30e9ab9eae
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=767a8100-eaff-418b-81d2-1d6eff408df1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:df:7d:32:be:03:b9:ac:8d:08:33:58:f0:01:
                    56:32:30:0a:22:f4:00:be:a3:de:fe:03:c2:ea:4f:
                    fa:8f:db:64:39:ce:4b:63:d5:4d:34:40:70:ef:4f:
                    99:6a:07:d0:20:f2:b6:1d:11:76:e9:6d:78:89:d9:
                    94:26:dc:3b:a9:7d:be:26:80:33:fc:b7:f1:e4:6c:
                    f6:7e:ff:76:24:e1:d7:f8:36:fa:e0:c5:1d:c3:70:
                    08:fd:58:09:44:26:31:87:b4:47:fd:88:0c:d1:1e:
                    a1:cd:7a:ed:5e:6e:9d:c0:8b:7a:3a:2b:1d:a5:ce:
                    ab:1a:b5:93:80:38:18:e9:37:26:c7:b6:2b:1b:74:
                    58:d3:f1:ae:85:30:08:3a:91:1e:e4:39:65:74:cd:
                    fc:32:5b:a4:fb:53:77:84:79:01:a6:cb:fc:22:65:
                    22:32:b5:27:d3:91:7b:8b:39:9d:7f:d6:8b:cf:94:
                    51:db:30:ec:aa:04:d4:e8:8a:b0:8a:35:56:da:fc:
                    81:16:cf:a5:1d:b9:67:49:d4:5d:54:a6:e9:2e:53:
                    e6:10:4b:7f:8c:18:2f:43:ea:99:bd:5e:68:f8:ff:
                    bd:b2:24:57:ee:b2:8e:91:30:24:c7:53:e4:b0:d1:
                    80:b5:b5:f3:99:9b:bf:d7:5e:1d:ad:cc:e0:2a:43:
                    b8:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:00:7D:04:B5:65:58:D0:19:26:EF:76:B1:A5:C2:4C:72:ED:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/4ad5abf6-6e01-3b5c-86a8-77c4b389fc78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae/2627756a-b322-49e6-941e-ed30e9ab9eae.crl

            X509v3 Authority Key Identifier:
                keyid:84:40:C9:06:5E:2A:AA:D3:1F:26:70:9B:94:49:14:CF:72:9A:9C:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2627756a-b322-49e6-941e-ed30e9ab9eae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.160.0.0/24
                  99.181.64.0/18
                  192.16.64.0/21
                  192.108.239.0/24
                  199.9.248.0/21
                IPv6:
                  2620:f8::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3d:56:6a:2e:8d:04:60:a9:80:d6:93:0d:33:04:34:80:48:
         32:34:8e:49:f6:06:85:ce:d8:18:82:c9:d0:de:35:34:93:a2:
         8b:4d:a2:5c:1c:9d:19:87:d0:36:93:b6:1c:0e:c0:d3:42:e5:
         8e:81:a2:46:d5:d8:19:20:54:53:d1:59:8e:17:d9:54:02:9c:
         3b:ca:74:36:69:fa:6b:e6:30:f6:90:7e:e1:9c:4a:4f:8c:69:
         0c:3b:f9:5e:37:6b:5f:aa:85:79:d3:84:09:42:71:3a:06:07:
         9a:c5:f7:e5:f6:40:de:26:d1:28:c5:8e:69:14:6d:6f:44:99:
         57:c4:f6:d7:4c:49:9e:4e:f3:12:83:b4:10:af:24:06:9f:bf:
         28:ae:bc:4f:6c:14:f7:ab:29:8b:99:10:92:70:c1:a7:3d:fd:
         ec:c3:50:2d:d6:84:f8:d2:ac:41:af:8b:a2:f5:24:10:7b:f8:
         20:51:0d:e3:fa:60:ed:09:7a:91:b1:83:4c:81:17:8f:b0:72:
         fd:21:05:b8:19:cb:8a:05:db:d3:60:74:72:4d:c9:36:c3:40:
         cd:04:c8:93:c9:40:b1:cb:ec:c9:3d:bf:0a:7e:56:d7:30:c8:
         66:24:a6:00:6d:3d:7d:3b:57:e3:1a:b9:48:6b:fd:f1:6a:3e:
         28:87:d9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:12 2025 by rpki-client