Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa
File:                     c9f55b10-d847-3053-8482-6552dbbdb29b.roa (raw, json)
Hash identifier:          qodp8BTTu7f+KBT7bJqW3kedKfBKjJkTt8Ss+PHW5KY=
Subject key identifier:   E4:D6:61:6B:8A:AB:CA:7B:DB:DC:7F:27:C4:1C:E6:0F:75:31:9D:FE
Certificate issuer:       /CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
Certificate serial:       010D0C9F4328584855D59F1F48A99F7A726B0580
Authority key identifier: 0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa
Signing time:             Thu 26 Dec 2024 14:00:52 +0000
ROA not before:           Thu 26 Dec 2024 14:00:52 +0000
ROA not after:            Wed 26 Mar 2025 13:00:52 +0000
asID:                     393474
IP address blocks:        64.90.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:55:d5:9f:1f:48:a9:9f:7a:72:6b:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a302dc9c-12e9-4b66-8c6d-e2994a21a1bd
        Validity
            Not Before: Dec 26 14:00:52 2024 GMT
            Not After : Mar 26 13:00:52 2025 GMT
        Subject: CN=d7d29468-0bd6-452a-8a9b-44e50d2190ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cd:8a:d9:5a:a8:4e:ba:dc:ef:3b:d1:fa:1d:
                    14:50:d0:72:87:d4:1e:34:76:70:fb:5e:ee:5a:48:
                    53:8b:a4:81:25:37:53:59:71:b3:dd:71:dd:08:ea:
                    d0:c1:1b:8d:db:bb:a4:e2:0b:96:ce:e4:da:a4:58:
                    ed:4a:71:db:d2:31:eb:5c:de:7d:11:ce:74:a1:66:
                    b3:d3:60:fc:39:bd:cf:6d:a1:1d:81:da:1e:72:b1:
                    e0:9d:0d:7a:bd:88:26:e5:3f:cf:d5:90:8d:17:31:
                    73:05:89:5f:44:ee:fa:0c:b8:92:76:c8:5c:49:47:
                    b0:d0:53:97:53:20:9b:4d:75:14:af:e5:f9:03:f7:
                    1d:68:cc:38:7a:9c:26:d3:f4:6b:bd:b2:bf:3c:81:
                    e4:a5:3b:b6:49:a1:99:95:f0:42:78:15:0e:0d:8a:
                    0e:94:ac:ec:d1:de:f7:3e:03:2c:14:30:84:e9:ae:
                    2c:fa:cc:06:1d:0a:c1:7f:11:bf:75:c1:3c:77:f0:
                    7f:9c:e4:f3:f4:05:53:bc:5d:65:a8:58:1a:ee:20:
                    74:a2:7a:e3:81:09:e6:cc:fb:c7:46:42:76:b3:0a:
                    00:d0:d3:04:6b:62:5b:7d:66:14:6f:31:1c:10:8e:
                    43:09:b6:b4:5b:65:3f:0e:4c:39:42:23:3e:0b:1f:
                    38:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D6:61:6B:8A:AB:CA:7B:DB:DC:7F:27:C4:1C:E6:0F:75:31:9D:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/c9f55b10-d847-3053-8482-6552dbbdb29b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DC:2F:6E:33:64:5F:E3:7B:D2:58:C7:5E:84:68:D9:5C:1D:22:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a302dc9c-12e9-4b66-8c6d-e2994a21a1bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.90.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:7b:5b:fc:6c:eb:e4:30:e8:af:85:6e:00:6b:1b:1d:0b:26:
         75:25:d0:f4:a6:58:55:67:ef:ad:ef:4b:85:37:0e:25:3d:36:
         00:f5:31:5b:3c:16:90:1f:92:66:c6:3f:0b:ec:a2:d3:f4:38:
         14:ed:9d:d4:64:b4:15:89:61:93:3e:a6:fd:2c:2b:0a:f6:f2:
         c2:26:1f:d9:f9:4c:90:96:20:fb:1e:68:37:dd:5b:1f:84:40:
         c4:bf:f7:78:ee:37:ae:cc:37:fb:53:70:97:41:9c:16:c0:42:
         68:f6:c6:94:e5:71:54:f2:a3:d8:ed:61:17:5e:4f:18:f2:e3:
         3b:8f:ad:38:fc:0e:50:e2:0d:db:57:9d:85:f0:3c:d7:50:56:
         26:bd:3e:cf:83:f7:a4:bd:07:60:31:c9:e4:67:88:60:42:f9:
         a6:05:61:cd:27:3d:ae:73:13:d2:23:c0:c5:05:bb:93:c9:c3:
         0d:ed:54:53:c8:86:d8:54:37:5b:49:b5:cb:66:2a:b6:d0:9d:
         ac:c6:35:1e:a8:b3:ec:15:6b:f8:f4:28:8c:81:5e:24:cf:c1:
         8d:d2:db:b6:7e:32:4b:62:6b:82:e8:ea:e7:01:dd:b0:7a:e3:
         a3:a6:77:38:d5:de:2e:ff:be:83:d0:26:9f:5d:b5:37:11:8c:
         90:f6:48:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:58 2025 by rpki-client