Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa
File:                     3df446ef-8f84-35ef-9354-563bf5792560.roa (raw, json)
Hash identifier:          0c6rgbIyS9QCBZYP4wTwzgIvZXmrhO7G5s8lx474tBM=
Subject key identifier:   B1:65:E4:1C:AB:30:4A:D7:99:3C:72:F6:2D:02:3F:72:53:D3:FC:A6
Certificate issuer:       /CN=3b72c968-d673-4a7a-bfec-4071a7be5317
Certificate serial:       010D0C9F43285848E16BE3D69B09B829EFCDFA80
Authority key identifier: D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     42567
IP address blocks:        99.192.207.0/24 maxlen: 24
                          199.59.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:e3:d6:9b:09:b8:29:ef:cd:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b72c968-d673-4a7a-bfec-4071a7be5317
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=853104be-c552-481a-bd8e-66043a5217f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:d2:a2:11:68:fc:fd:31:98:08:f4:63:8a:
                    e5:26:25:64:2c:d4:19:52:99:c9:7b:8e:98:3b:90:
                    dc:b7:fb:c9:ff:67:8e:30:52:46:e4:d6:3c:62:08:
                    b9:06:7a:48:6c:b5:ac:f3:40:d6:5f:0b:56:88:ef:
                    aa:b5:e0:d0:cd:ab:b0:21:55:d8:cb:29:5f:1d:db:
                    c3:d2:ca:2f:b6:e3:67:70:5d:84:69:55:c3:f2:f3:
                    55:35:6b:87:c2:90:4f:a5:82:b6:00:83:1e:ed:2e:
                    8f:f5:2a:c6:05:e8:fc:17:07:65:c2:74:2c:64:e6:
                    13:98:39:7f:b7:b3:0e:45:15:70:55:4e:37:59:1d:
                    39:78:3d:e4:d2:3b:6e:ef:a1:1c:a7:ea:1a:14:1f:
                    5e:32:93:38:29:0e:24:fc:69:5c:a8:73:86:b5:a0:
                    f6:c0:84:54:2f:86:3f:ec:83:3e:f7:fd:fe:4d:81:
                    79:7d:8e:e8:6a:d8:35:6b:7c:07:fe:0a:45:2d:d5:
                    49:f5:bc:06:fe:5d:cc:ef:70:e1:2b:f4:85:fc:2d:
                    7a:dc:39:9d:c1:91:f6:80:72:a2:9a:27:3e:12:b7:
                    e5:c8:9e:0b:02:8c:07:3c:fd:c3:87:ba:8e:74:d9:
                    c1:55:f3:ec:1a:a1:99:b9:08:7d:37:9a:53:04:06:
                    3c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:65:E4:1C:AB:30:4A:D7:99:3C:72:F6:2D:02:3F:72:53:D3:FC:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3df446ef-8f84-35ef-9354-563bf5792560.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317/3b72c968-d673-4a7a-bfec-4071a7be5317.crl

            X509v3 Authority Key Identifier:
                keyid:D4:D0:6C:E1:8F:F9:73:1D:53:22:23:6D:36:3F:38:F6:81:03:B5:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3b72c968-d673-4a7a-bfec-4071a7be5317.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.192.207.0/24
                  199.59.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:88:c9:51:96:86:c2:ea:40:34:b8:b6:1d:60:10:cc:43:3b:
         d9:93:75:00:de:d2:a1:66:82:78:7f:bd:97:6b:a3:88:97:62:
         b4:8a:5b:58:14:b9:f9:71:03:14:c6:f5:ca:bf:bf:e4:4e:c4:
         d7:4f:82:5f:31:58:ea:a2:9d:c4:09:36:ff:6c:90:ae:a2:1b:
         04:95:f6:47:f6:5f:31:d1:20:48:c2:4b:fd:29:5c:3d:9c:89:
         73:09:70:5c:e1:26:31:56:27:ee:f6:7d:f7:50:46:49:d3:e6:
         ca:0a:ba:6c:cd:5a:3e:ce:47:20:17:b4:36:13:86:78:aa:16:
         6a:57:15:74:4e:49:a7:53:4a:14:84:96:8c:22:95:99:0f:64:
         bc:34:14:56:f6:5d:ce:f5:d5:33:9c:a4:08:b2:fd:77:c9:4a:
         63:fd:b6:77:11:73:40:c3:43:e3:9c:d2:e5:5a:aa:01:29:2d:
         d1:0f:94:6c:b9:35:04:1f:41:3e:4e:2a:5e:bd:8e:0b:63:39:
         2a:39:12:b4:78:bf:d9:fb:79:e8:de:7e:b5:16:03:c3:31:32:
         37:1e:ff:50:a4:ed:cb:7d:4b:bd:86:14:4a:73:53:e4:3d:c3:
         a9:94:73:cf:74:7e:ee:f2:cd:f3:72:fb:40:4e:cf:fc:01:c2:
         69:63:a6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:35:09 2025 by rpki-client