Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa
File:                     fea1dfeb-87ff-306f-83e1-4d93e345821c.roa (raw, json)
Hash identifier:          hn66i/q9LI6hEjVzzFkFhUGTzik3XnCuGYnyQK3yKkY=
Subject key identifier:   E0:95:02:95:03:3D:72:89:90:62:82:5D:C3:B2:B5:53:EF:C8:08:42
Certificate issuer:       /CN=4edd6357-2935-4b92-8130-68071d4eaf01
Certificate serial:       010D0C9F43285848EC96907688FE98D5EBC92600
Authority key identifier: 0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     15285
IP address blocks:        69.21.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:90:76:88:fe:98:d5:eb:c9:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4edd6357-2935-4b92-8130-68071d4eaf01
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=a4c12c03-090f-496a-bd5d-6ddb35c33b49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:40:c8:70:c6:ca:0d:17:db:cd:5d:3f:d4:65:
                    6c:13:fd:72:d4:3d:0e:f7:19:13:fb:b1:1d:56:02:
                    e4:6c:43:a0:14:fd:37:dd:b7:4e:9a:9c:e7:7c:ec:
                    69:8d:ed:86:09:2e:71:5f:3c:61:b7:f8:da:fc:1b:
                    d0:5f:89:c4:ac:fd:df:4b:dd:f4:92:0c:80:76:22:
                    11:b2:3f:7f:34:51:53:04:65:b7:a8:e8:1a:59:69:
                    ed:44:84:ca:ed:e6:f5:92:ed:7d:3c:71:22:c7:9c:
                    f3:e0:be:6e:28:b0:83:66:ec:3e:59:b2:7f:40:03:
                    99:c8:91:5c:c9:f8:7b:2a:a6:6c:b1:9c:b4:29:e1:
                    5a:08:14:25:17:be:5c:f3:83:55:f2:09:0c:d5:b2:
                    f9:cd:f2:dd:93:27:17:e2:93:6a:cb:4a:0e:df:e8:
                    7c:c9:08:05:a4:2f:4e:86:c8:41:fd:eb:d7:b8:f1:
                    ee:ec:d7:b7:ed:d1:ed:ea:bf:fe:2a:c1:ac:4e:75:
                    73:06:f9:8f:68:66:bf:9d:6f:75:93:a8:e5:a2:25:
                    5c:ff:f8:a3:cf:d0:a7:12:56:52:3a:ee:09:b4:3f:
                    fb:03:fd:e5:e3:da:0d:04:72:fc:59:9f:c8:8d:34:
                    41:7b:ec:11:de:72:aa:9b:db:09:8a:7a:ab:db:8f:
                    93:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:95:02:95:03:3D:72:89:90:62:82:5D:C3:B2:B5:53:EF:C8:08:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/fea1dfeb-87ff-306f-83e1-4d93e345821c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01/4edd6357-2935-4b92-8130-68071d4eaf01.crl

            X509v3 Authority Key Identifier:
                keyid:0C:50:4D:48:49:67:68:5C:71:1A:A1:6A:4F:32:0F:F5:18:64:07:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4edd6357-2935-4b92-8130-68071d4eaf01.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.21.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d9:d4:c4:25:38:a3:e7:ea:40:6c:42:ed:c1:a9:e7:0e:d1:8d:
         9c:ad:12:e0:01:97:e7:d5:95:42:31:22:cb:41:ec:00:12:5e:
         93:70:76:0d:a4:c0:c4:f3:78:c5:a6:c2:d9:4f:36:75:55:f7:
         f5:ad:1e:b5:69:e1:b9:59:39:66:a7:01:48:6d:2e:ef:fd:8c:
         d4:0a:37:47:eb:8e:50:d3:a5:22:65:6e:d4:36:7c:5a:24:bc:
         78:c6:88:c7:69:32:03:d9:2f:31:0e:f5:bd:5f:12:f2:53:4f:
         aa:6d:06:40:18:86:39:9d:5c:05:5f:de:c5:8e:b1:6d:43:89:
         04:8a:d0:c5:18:e0:50:23:b6:b8:e0:1d:b6:b9:ce:b9:f4:b2:
         9b:2b:ed:36:ac:dc:e6:62:fb:a7:a9:b9:ba:ab:64:58:fe:4c:
         99:ac:19:15:39:1f:5b:86:17:73:cc:0c:c6:7e:78:25:26:2c:
         e5:7b:5a:dc:4b:3a:e9:d9:c1:e2:df:f5:42:e2:0a:0d:79:78:
         ec:90:12:1d:5d:8a:80:5b:ce:c7:47:e8:dc:1d:13:50:6a:47:
         d0:15:73:37:1e:26:40:94:5f:ee:b6:22:15:c8:8f:5c:db:6d:
         aa:29:13:ed:35:f4:d0:31:36:df:fc:5b:bf:bb:42:8d:96:e3:
         20:66:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:52:33 2025 by rpki-client