Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa
File:                     36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa (raw, json)
Hash identifier:          1U2yUhY0LT3MZQH8QN0nHAXiuAqBZcWrzHhdgUrorfY=
Subject key identifier:   BD:A1:70:B7:7E:D9:88:A1:C5:09:7A:6F:72:A6:A2:34:EA:DA:A5:7E
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F4328584878BB02157CE285A894E7FE40
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa
Signing time:             Wed 08 Jan 2025 02:00:39 +0000
ROA not before:           Wed 08 Jan 2025 02:00:39 +0000
ROA not after:            Tue 08 Apr 2025 01:00:39 +0000
asID:                     137409
IP address blocks:        64.64.98.0/24 maxlen: 24
                          64.64.99.0/24 maxlen: 24
                          98.159.41.0/24 maxlen: 24
                          173.239.205.0/24 maxlen: 24
                          173.239.220.0/24 maxlen: 24
                          173.239.221.0/24 maxlen: 24
                          173.239.248.0/24 maxlen: 24
                          173.239.249.0/24 maxlen: 24
                          173.244.32.0/24 maxlen: 24
                          173.244.33.0/24 maxlen: 24
                          173.244.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:78:bb:02:15:7c:e2:85:a8:94:e7:fe:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Jan  8 02:00:39 2025 GMT
            Not After : Apr  8 01:00:39 2025 GMT
        Subject: CN=c9f8a313-9004-4886-880d-1822cb4ac4b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:91:8f:c8:5e:01:2b:9c:26:db:7c:8b:bf:
                    8c:b9:c7:09:61:a8:94:ac:9f:40:bd:f6:84:38:00:
                    5f:8c:e0:67:28:aa:23:f3:66:bd:64:1c:74:1b:d7:
                    d7:c4:86:08:ec:d7:df:a1:d0:74:99:e2:67:ee:34:
                    85:a3:02:6f:34:d2:4c:57:3d:7b:7b:2c:75:97:87:
                    a2:b9:95:99:a3:83:ee:d6:b6:05:77:ef:50:f2:ec:
                    8a:04:cf:39:50:31:d1:e5:4b:cb:85:80:49:ae:e6:
                    a8:a9:cc:2b:8e:2c:13:cc:d3:19:58:14:5d:24:d5:
                    bb:2e:a5:a3:57:93:23:00:fb:ee:76:cf:63:5f:a4:
                    f3:1e:ba:81:2e:c6:1a:41:b2:2a:6e:38:43:e6:87:
                    6e:cb:f0:c6:db:47:5f:e3:04:b1:0c:0d:96:e9:09:
                    57:d1:ae:7e:aa:c0:db:49:9a:e1:06:e9:76:66:ae:
                    00:d1:5d:99:ea:a6:44:b5:4c:b4:fa:ea:2e:ae:cb:
                    25:c9:83:27:ee:44:38:6d:9f:3d:cf:b5:0a:b9:c8:
                    7f:0c:b6:03:17:bd:2d:e5:99:83:72:09:08:cc:9a:
                    6e:a1:c4:e4:91:cf:96:5d:f2:c1:01:4e:ff:9f:a3:
                    c6:e1:e9:ce:f3:22:66:f8:82:03:3f:ca:32:13:5c:
                    9c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:A1:70:B7:7E:D9:88:A1:C5:09:7A:6F:72:A6:A2:34:EA:DA:A5:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/36db5bb9-b87a-373f-8dd9-84bfee585cc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.64.98.0/23
                  98.159.41.0/24
                  173.239.205.0/24
                  173.239.220.0/23
                  173.239.248.0/23
                  173.244.32.0/23
                  173.244.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:eb:8f:99:62:84:98:d6:cb:64:74:8c:a3:01:30:ea:16:80:
         ab:7b:62:a1:f6:5a:5d:63:71:e9:8a:5b:6e:7b:38:1b:09:83:
         99:cb:65:64:70:3c:5b:dc:2e:ce:c2:85:c7:20:a4:a7:f2:c9:
         4f:21:f7:c1:75:25:cc:3f:b2:f0:81:7d:4c:de:9f:89:7e:22:
         5e:ba:97:19:93:4b:09:be:2f:43:6f:32:a8:62:eb:10:8a:44:
         6a:b6:64:bd:38:f3:bd:dc:cf:fc:d1:a8:2a:15:aa:fa:35:87:
         2f:25:f6:31:8e:f3:6d:2d:db:68:7d:cf:82:b3:1f:27:f9:85:
         96:65:9b:75:77:2c:d5:1c:00:91:9b:74:d2:da:8f:e2:f2:83:
         80:ff:63:b9:51:f9:66:90:ed:12:fd:15:be:58:a6:42:74:c8:
         1e:88:b4:05:3a:2b:6d:db:88:b1:f7:ae:d6:2b:e1:14:da:e3:
         57:7e:09:96:16:37:72:09:20:e6:b2:f6:bf:28:dd:30:18:b4:
         b9:e0:46:12:5b:46:75:96:b6:af:6c:9d:9c:b1:ea:32:43:0a:
         f2:95:8d:f2:75:1c:63:96:0f:4e:8a:e2:bf:9c:58:fe:71:99:
         1d:69:8e:51:41:38:f8:6b:fe:35:fd:77:c9:48:4f:0c:2a:fa:
         c5:a4:a0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:41 2025 by rpki-client