Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa
File:                     e7deed66-6dc9-31bb-a963-2abeb2d52569.roa (raw, json)
Hash identifier:          MGTIy8oGOgwL8tyEkRb1arC0ThOnU1hLB/C0jk89CFE=
Subject key identifier:   E2:37:A1:11:53:4C:5A:1D:50:2F:06:D0:EA:FA:E5:88:24:FD:43:9D
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858488BE5311D82DB3300633AE880
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa
Signing time:             Tue 14 Jan 2025 22:46:02 +0000
ROA not before:           Tue 14 Jan 2025 22:46:02 +0000
ROA not after:            Mon 14 Apr 2025 21:46:02 +0000
asID:                     14618
IP address blocks:        216.157.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8b:e5:31:1d:82:db:33:00:63:3a:e8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jan 14 22:46:02 2025 GMT
            Not After : Apr 14 21:46:02 2025 GMT
        Subject: CN=9b80cde0-19b2-4015-9eba-36b1424e1b3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:eb:75:06:1f:c5:58:76:fc:82:86:7d:f7:24:
                    83:ba:bf:75:1d:27:4b:a9:6c:dc:d0:5f:7b:5e:ed:
                    74:1b:23:b7:8f:4d:74:51:ef:fd:59:3c:51:fd:c5:
                    08:69:d9:ec:c8:16:e4:fc:6d:6d:9c:e6:ac:dc:b2:
                    db:eb:4e:74:0b:05:31:f0:2d:71:61:32:52:51:7e:
                    52:e2:83:74:33:63:cf:aa:be:05:93:44:f3:a1:5a:
                    0f:33:bc:43:04:d2:a8:8c:57:21:40:90:7a:06:f0:
                    10:f8:80:7d:0a:2d:26:33:cf:76:a0:15:c5:ca:d2:
                    1a:cf:b3:8a:2c:d6:d9:89:60:4d:30:24:e6:b4:1c:
                    56:e1:b2:da:42:f3:79:97:e9:ad:98:68:bd:f0:8b:
                    8c:f0:d8:dd:78:59:ee:c6:b4:d2:04:41:c7:71:17:
                    6c:8c:d8:11:1e:c0:09:1f:63:00:ee:de:bd:90:1f:
                    22:d9:84:0f:fc:5d:c8:f5:15:ad:d1:99:af:31:3b:
                    aa:6a:29:b5:74:bd:fd:f3:42:0e:6c:dd:7c:03:f3:
                    c4:1e:e0:e7:01:da:a2:90:7e:6e:91:7a:d9:f2:f7:
                    2f:f6:a6:df:1c:c7:09:3c:69:fd:b5:7c:df:6a:c9:
                    6d:61:76:71:08:76:8b:98:bc:49:ba:5a:35:8b:5c:
                    da:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:37:A1:11:53:4C:5A:1D:50:2F:06:D0:EA:FA:E5:88:24:FD:43:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:6f:a4:67:96:68:3d:67:45:b7:09:5c:4c:b6:c4:5d:2d:73:
         78:08:5f:a4:38:9a:08:34:29:57:43:e4:91:af:b7:df:79:dd:
         ae:de:03:32:30:98:a3:bd:9d:4f:46:c2:ba:9e:65:e7:5b:26:
         d8:e6:48:10:0b:51:d2:fd:b7:fd:41:87:1d:09:77:01:e3:48:
         3f:a0:31:6a:3e:c3:fd:71:d0:e7:9d:a5:01:09:0a:c8:44:e4:
         04:98:8d:40:eb:82:cc:ea:6c:3a:51:f2:d4:55:22:4b:92:69:
         8d:f4:b5:a3:fe:cf:7c:7f:4f:9f:94:17:2a:28:b2:49:90:7e:
         6a:2c:7e:87:b7:39:86:f9:1e:6e:c6:4f:67:fc:d5:49:6b:55:
         67:16:f2:a4:17:e5:08:6d:25:e0:58:fb:c4:da:62:ed:f0:f9:
         02:d3:c3:f8:8b:0e:f2:37:ff:c4:d8:b7:77:d9:5b:6e:74:99:
         a2:fc:7b:db:44:ab:4e:42:40:64:d6:27:46:77:6f:e3:7b:2b:
         e5:c8:66:54:81:7e:b0:82:97:bd:94:3b:c3:0e:f1:4c:52:f9:
         4d:65:9c:70:dc:72:b2:17:9f:2e:07:22:4a:08:6d:9e:1d:20:
         63:60:2d:d8:80:3f:ab:63:91:7d:fd:dc:b1:3c:19:a4:4b:7c:
         53:74:82:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:49:25 2025 by rpki-client