Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
File:                     07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa (raw, json)
Hash identifier:          KYiy97gce/m893BcIyFruLRVUp/AZimWG+20f4KV2dE=
Subject key identifier:   F3:AE:FE:94:F6:3F:2A:91:88:68:B6:FC:1A:97:14:FA:BC:A0:A3:B4
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858494CC94FF0B58E977D27471660
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     20473
IP address blocks:        65.20.64.0/18 maxlen: 32
                          66.135.0.0/19 maxlen: 32
                          67.219.96.0/20 maxlen: 32
                          137.220.32.0/19 maxlen: 32
                          139.84.128.0/17 maxlen: 32
                          208.83.232.0/21 maxlen: 32
                          208.85.16.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:4f:f0:b5:8e:97:7d:27:47:16:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=a1343df9-cc41-4392-a901-e75a7b7d72a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:17:03:40:00:f2:68:3d:19:b1:62:31:05:76:
                    3f:f7:af:36:82:4c:97:9c:60:fd:80:6e:27:91:21:
                    17:93:8e:dd:bd:73:88:3b:51:b2:21:6b:9c:ae:58:
                    1c:32:5d:d9:5c:97:cd:1b:7d:52:99:a5:96:bb:6f:
                    ab:17:75:dc:00:cf:30:ed:80:f7:3f:1e:bf:9b:8a:
                    db:6c:f7:b4:fa:9f:25:e5:24:4c:d7:f1:2e:26:ac:
                    ca:c6:c0:3f:52:f5:f6:4f:a4:91:70:42:f9:02:b8:
                    1c:79:df:8e:1a:54:2a:99:e3:99:31:97:1f:ba:65:
                    35:67:bd:4d:e4:fc:06:53:f8:19:64:ae:e8:42:66:
                    8f:1d:aa:7c:fc:6f:bd:4f:23:da:2b:c4:e3:e4:98:
                    db:78:cb:a1:e1:c9:c3:76:e2:5e:66:51:22:1c:d1:
                    a7:18:b1:33:77:c3:ce:ac:01:d1:2a:5b:c6:af:36:
                    c0:e3:05:2a:a5:aa:5e:2d:77:b6:b9:36:74:85:b5:
                    f9:3b:9b:ed:e8:97:8b:ed:6f:ff:29:50:bc:56:f3:
                    fc:41:65:50:fd:cf:66:02:09:a8:b3:d5:72:e3:aa:
                    e2:f4:15:aa:18:69:2e:4d:02:08:09:5a:9f:83:a7:
                    6f:d4:a6:62:94:09:5a:b1:40:cc:bf:68:ab:f1:67:
                    b8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:AE:FE:94:F6:3F:2A:91:88:68:B6:FC:1A:97:14:FA:BC:A0:A3:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/07f2eaa3-89ff-32a2-919a-8647e1b1eceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.20.64.0/18
                  66.135.0.0/19
                  67.219.96.0/20
                  137.220.32.0/19
                  139.84.128.0/17
                  208.83.232.0/21
                  208.85.16.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:a7:a6:b5:52:eb:8e:1f:e3:54:fe:46:3d:05:34:4d:18:0a:
         85:5f:1e:67:31:68:06:f5:c3:92:59:fb:83:fb:fc:3d:0e:b9:
         c2:c7:ad:02:f6:c9:e0:bb:91:bc:ba:c0:16:70:0f:c9:c1:ff:
         00:8d:3d:57:c7:32:33:88:49:d1:f9:56:f4:68:d1:04:08:16:
         46:a2:fa:8e:9b:be:d8:d6:fc:e8:5e:8c:70:2b:24:ba:21:c6:
         36:8f:a8:48:63:42:aa:01:85:40:f3:f9:b3:bb:ac:a7:0f:85:
         fc:db:3c:88:33:ca:6a:81:d8:0a:17:db:f0:96:23:12:6e:91:
         9d:cf:52:79:6d:ec:c8:e9:4e:4e:b1:d4:19:43:10:03:38:b3:
         75:47:9e:c9:80:a3:d1:82:4e:35:a8:5d:72:e7:14:ee:06:8d:
         4a:66:aa:85:df:25:60:7b:f7:76:0b:d2:65:71:47:1d:a3:65:
         1e:e3:6c:af:2a:58:87:b1:f3:85:bb:08:b2:df:f2:36:4c:ec:
         1e:87:77:36:4c:46:a7:04:d8:fc:b1:be:a5:c8:88:f6:d0:f3:
         c6:88:a3:9b:fb:27:05:cb:0c:4c:29:c3:f9:2a:e0:1c:a6:46:
         b8:34:95:3c:7f:db:66:da:e0:f4:db:50:55:9b:ac:27:80:b6:
         45:0c:b2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:08:45 2025 by rpki-client