Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa
File:                     f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa (raw, json)
Hash identifier:          NtxrNzNyB22sxwZALX0V0UomD1M2htqfYH27fW4YxTY=
Subject key identifier:   6D:EF:82:72:4C:EC:CA:91:75:C8:A4:43:75:4D:02:67:0F:99:2B:31
Certificate issuer:       /CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
Certificate serial:       010D0C9F432858484C101B7C68D6FFC50346F900
Authority key identifier: 0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa
Signing time:             Mon 23 Dec 2024 02:00:40 +0000
ROA not before:           Mon 23 Dec 2024 02:00:40 +0000
ROA not after:            Sun 23 Mar 2025 01:00:40 +0000
asID:                     62240
IP address blocks:        173.239.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4c:10:1b:7c:68:d6:ff:c5:03:46:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5b71e83d-2828-4f34-ba3e-648d01ef173a
        Validity
            Not Before: Dec 23 02:00:40 2024 GMT
            Not After : Mar 23 01:00:40 2025 GMT
        Subject: CN=1cc12902-eb92-44cf-8b06-397ea32d2fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3d:c3:ad:2a:55:17:b1:a1:d8:1d:bd:a1:0e:
                    26:8c:b5:69:7a:02:bd:d1:7d:52:85:94:1e:9e:ff:
                    4f:9d:e3:6a:68:37:34:11:fb:81:5c:14:88:43:74:
                    9e:04:67:d1:1a:09:2f:7d:36:e1:0f:86:a3:30:a4:
                    19:1b:ca:35:8b:9d:18:3c:07:57:6a:c1:fd:d9:50:
                    20:8a:1d:89:71:33:a8:48:b7:72:43:be:00:fe:d6:
                    bc:2c:34:8b:4d:31:a5:e4:2e:4b:2b:bd:3c:60:07:
                    da:ea:ae:34:e5:d8:27:08:ce:07:7d:ee:df:ce:4d:
                    f8:bb:36:45:8b:d8:c9:b0:7a:b3:03:93:80:03:0b:
                    4e:93:b3:21:28:92:c5:1e:ec:ff:7c:30:77:50:db:
                    76:6e:99:65:32:e6:af:8b:30:b2:3a:a6:3c:56:4a:
                    87:74:9a:b7:a5:e0:dc:3a:9d:f4:ee:1d:27:9f:02:
                    c6:4b:af:88:5f:3f:c6:91:89:1a:33:db:f7:af:a2:
                    d3:e9:24:fd:46:47:5e:ce:79:52:45:9d:25:a5:b5:
                    19:54:7e:77:94:46:bf:4f:62:b8:07:4f:59:98:44:
                    ae:d3:ba:5f:0b:87:e2:c1:e8:b1:11:4b:36:ec:6a:
                    da:eb:63:33:b8:4a:f8:08:c2:8d:39:be:7b:13:8d:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:EF:82:72:4C:EC:CA:91:75:C8:A4:43:75:4D:02:67:0F:99:2B:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/f8e9dd0c-6dc3-353c-b986-3dade5a7d2eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a/5b71e83d-2828-4f34-ba3e-648d01ef173a.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B2:B2:C1:81:24:D9:53:89:B1:0C:7A:4C:20:C6:28:78:53:BF:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5b71e83d-2828-4f34-ba3e-648d01ef173a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.239.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:dc:b2:3c:08:64:ff:96:eb:52:38:c1:6f:36:a6:0d:0a:3a:
         23:b1:93:e1:3b:b9:62:db:80:09:f7:7f:dd:da:de:41:c6:69:
         ae:d3:62:b7:d3:2b:2b:7b:a6:30:30:6b:1e:f7:da:5f:2c:e7:
         64:4a:61:64:19:56:ba:aa:de:51:16:66:3c:ee:c9:cb:f8:50:
         b2:1a:ca:c2:1b:94:c0:da:d3:53:6a:21:f4:90:ae:e8:12:3c:
         71:a0:e2:b2:b6:b0:b4:8c:84:c6:5b:fb:05:c8:0f:f6:57:e3:
         8d:fa:b6:87:41:b9:c0:28:e8:a8:6d:38:ec:33:73:36:57:c7:
         33:7a:85:12:fa:d1:8f:c2:db:97:d4:f7:2f:a6:70:8b:a5:2e:
         3d:29:85:5b:10:72:11:cb:51:1d:16:50:d2:a2:26:ab:83:1a:
         7e:1c:df:33:05:3f:e8:1b:cb:dc:76:a2:98:3b:a9:16:c7:59:
         bd:c9:f7:4f:a7:cd:20:df:bc:29:96:d7:3e:23:ff:07:33:20:
         40:a3:a0:13:39:35:c5:e1:75:cf:bc:00:61:8b:96:be:aa:12:
         b4:38:95:c4:eb:32:b0:74:d8:96:8f:ce:80:0d:e0:71:00:5f:
         af:74:9a:97:44:be:41:eb:d5:04:75:5b:09:6e:c5:bb:9a:ac:
         20:a1:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:07 2025 by rpki-client