Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa
File:                     69858a09-a524-32a2-bde5-9129a8949dfd.roa (raw, json)
Hash identifier:          bW7TGu+zBevmYZ9FGHwzcA+RmITMKcBEk4JwK8e10oE=
Subject key identifier:   EB:DD:99:D7:39:D7:3C:BE:4F:45:50:3A:39:C2:42:FE:5E:65:10:38
Certificate issuer:       /CN=37d983de-280d-4374-a056-b21eb13451dd
Certificate serial:       010D0C9F4328584921840223A0B75C73609C3500
Authority key identifier: A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     12107
IP address blocks:        65.183.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:02:23:a0:b7:5c:73:60:9c:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d983de-280d-4374-a056-b21eb13451dd
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=a70a16d1-9b86-43de-8a65-f43b278bfee3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:67:49:12:ac:de:d4:82:1a:98:44:db:f7:c0:
                    38:d5:75:f2:de:b5:94:68:83:19:3e:17:73:2a:eb:
                    b7:2e:b3:18:13:7b:ba:dc:b8:7f:07:eb:3b:cf:f3:
                    69:af:d6:7d:c6:5c:34:0c:e1:30:b4:74:51:9c:19:
                    55:1b:79:fb:55:99:09:d9:14:15:56:08:80:c1:d4:
                    78:43:05:ca:00:68:fc:10:35:92:95:0b:f2:99:b2:
                    71:2e:b4:97:72:0f:13:d2:95:6c:78:30:0e:cc:80:
                    97:7f:93:75:54:b5:79:e9:44:26:d1:8e:33:50:69:
                    cd:60:78:75:ae:f0:bd:2b:73:af:7f:8b:5c:e4:fa:
                    91:53:7d:f9:c1:ba:22:ea:6d:d7:26:68:29:56:fb:
                    c0:b6:d2:49:9e:39:1d:89:1b:32:a3:31:45:80:43:
                    05:ae:c0:f9:82:1e:2a:10:b0:7f:0a:be:fc:10:ef:
                    b7:08:2e:8a:b0:4b:b8:20:9f:58:8c:7b:9d:2f:d5:
                    bd:44:9b:d5:f2:d5:c3:ae:fd:56:f1:58:e0:12:14:
                    c3:2a:fb:0f:ea:fc:04:1c:4d:5d:b4:42:f6:87:69:
                    23:98:16:5d:4e:3f:9d:73:7f:8f:2e:ee:6a:fd:f4:
                    10:75:a3:8d:39:d8:ed:dc:fe:aa:a4:6c:7d:ab:bf:
                    ce:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:DD:99:D7:39:D7:3C:BE:4F:45:50:3A:39:C2:42:FE:5E:65:10:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/69858a09-a524-32a2-bde5-9129a8949dfd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd/37d983de-280d-4374-a056-b21eb13451dd.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EE:A9:C5:BB:76:2C:20:7E:C3:A2:EF:36:C8:B9:26:D2:B5:07:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/37d983de-280d-4374-a056-b21eb13451dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.183.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:e0:ae:89:80:0b:c4:cd:e2:80:34:a7:f9:41:fb:ea:06:3e:
         99:b2:98:b8:91:f4:5c:81:9e:49:91:0a:b4:e0:6c:c3:5c:5b:
         06:77:34:f9:3e:31:a6:af:df:ed:ed:62:a7:37:3c:a7:11:b5:
         64:78:d5:d0:57:9b:17:88:04:46:c3:16:0e:6f:f3:c2:7f:6c:
         02:ea:96:f6:1e:41:96:4d:8f:13:24:f0:81:a8:b5:3a:fb:57:
         f0:9e:09:1e:98:5e:a0:0e:16:d0:e0:fe:1c:3e:a2:82:ac:1a:
         4b:c8:56:c4:3a:8b:fe:21:80:aa:1c:ad:c1:85:2d:2d:e1:63:
         ff:ca:88:32:76:64:9d:ea:25:46:0e:23:33:c1:5f:27:7d:07:
         ad:c8:67:ae:75:c8:d6:4f:c2:95:69:a8:36:1f:25:96:06:1b:
         ac:d1:e2:fd:70:fd:bd:27:e1:70:5d:8b:74:1e:89:57:1a:ef:
         11:22:47:7f:34:7f:2a:0f:2e:49:2c:73:18:dd:49:76:d1:08:
         69:a3:05:a8:59:48:0d:c8:8c:f1:f1:2c:a0:f7:bc:73:6f:cc:
         11:fe:1f:f9:29:39:58:51:37:17:69:d3:5e:fe:20:4a:bb:6f:
         dd:0a:fb:a5:2f:f7:2d:50:19:5b:30:d5:4e:90:c1:2c:eb:91:
         80:2d:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:31 2025 by rpki-client