Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/777cb691-575a-3ee8-bdac-17bb325d1bbf.roa
File:                     777cb691-575a-3ee8-bdac-17bb325d1bbf.roa (raw, json)
Hash identifier:          ZcG+ckshgMHt+EUfCp89WDLc4eoMiUaqSFG2mChMC+M=
Subject key identifier:   C9:81:43:CD:00:D8:01:93:74:9D:D2:C0:83:9E:DB:AD:1B:94:D0:0F
Certificate issuer:       /CN=cd789731-b7d6-499d-bd13-8fae75220140
Certificate serial:       010D0C9F432858493C092555E3E16CCC03E71FC0
Authority key identifier: 47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/777cb691-575a-3ee8-bdac-17bb325d1bbf.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     5078
IP address blocks:        164.58.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:25:55:e3:e1:6c:cc:03:e7:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cd789731-b7d6-499d-bd13-8fae75220140
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=56f49b06-4baa-4e1d-bcb0-0af796dcc239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:1b:ee:9f:92:be:8d:2f:f3:82:1f:89:f5:33:
                    16:2b:bb:59:d6:ff:50:d1:0b:85:58:05:53:88:3f:
                    a5:12:71:6f:ae:53:d8:04:47:53:d7:63:2f:46:6b:
                    8f:24:60:21:62:d7:12:39:b0:89:74:51:77:70:85:
                    55:7c:88:e4:98:23:af:2b:3f:37:20:a3:3d:96:80:
                    3d:a5:15:2c:78:e7:6a:c1:f6:38:69:d6:c4:8f:65:
                    b5:15:c4:13:cf:ac:fa:3c:73:12:f2:64:04:c7:07:
                    f1:7b:c2:ed:5b:8c:24:32:7c:ab:41:e4:1e:f6:e0:
                    50:8b:0a:d9:c6:79:9b:d9:6c:61:3a:48:d4:22:42:
                    05:04:cc:f2:79:b0:6a:29:f5:b9:01:b1:ec:b1:c7:
                    23:45:9c:bc:2c:80:a8:15:c0:3c:56:54:d1:3d:9b:
                    27:a1:b3:12:1f:45:df:7a:67:d0:9e:8e:8e:43:e2:
                    fc:fc:73:77:5d:c0:c0:1b:f8:be:55:7b:f1:cb:3e:
                    31:64:ae:a9:42:f1:ff:29:9e:29:0e:3f:d3:d8:b5:
                    0a:6e:db:6c:77:7e:a0:61:de:31:2d:40:6a:f3:f8:
                    67:1b:f3:b8:28:28:26:f7:41:f0:60:37:3b:21:23:
                    e0:b5:6d:4f:07:fb:73:5c:41:07:9a:74:ea:c8:80:
                    e9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:43:CD:00:D8:01:93:74:9D:D2:C0:83:9E:DB:AD:1B:94:D0:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/777cb691-575a-3ee8-bdac-17bb325d1bbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140/cd789731-b7d6-499d-bd13-8fae75220140.crl

            X509v3 Authority Key Identifier:
                keyid:47:7D:85:A3:D9:21:EC:00:74:C9:D4:CA:61:B7:96:16:4E:D4:A3:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cd789731-b7d6-499d-bd13-8fae75220140.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.58.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:8e:66:07:16:15:1e:4b:dc:9d:aa:77:67:60:70:84:5d:dc:
         42:51:4f:90:cb:a5:e1:4d:02:e3:5d:6a:db:e2:b8:60:74:ab:
         ac:c1:93:dd:02:87:85:ab:21:91:eb:76:3f:1e:09:a9:3c:b3:
         47:70:26:80:62:ce:d1:9c:13:67:03:e4:2d:35:92:4f:e0:26:
         0e:e1:b3:cb:58:0b:27:d0:51:88:74:56:07:af:a6:1f:13:5d:
         49:2b:d2:3a:7d:d4:2b:88:68:8d:df:2e:3b:a0:e8:ce:76:51:
         44:73:ef:a0:a6:be:5b:87:d7:e2:4e:c2:80:13:7e:13:7c:ff:
         2d:11:cc:e8:36:ea:12:38:aa:fc:87:43:c8:44:1e:cb:1c:cb:
         6d:26:c9:a2:fb:a8:90:99:18:d3:1e:c6:03:37:95:f0:0a:43:
         99:1f:a0:bd:3d:98:0b:54:a4:52:66:41:8f:7d:1a:25:93:2b:
         67:c0:2e:a7:cb:5b:46:62:ea:9c:10:42:28:70:03:7c:88:dc:
         6a:ea:0d:68:7e:56:aa:b1:d4:a2:bd:ee:12:16:ef:0b:03:27:
         c9:30:47:cb:57:38:f3:3b:5a:27:6e:e5:a5:25:79:10:22:76:
         0d:54:02:56:4d:87:95:d1:75:62:b9:2d:14:46:e3:ee:72:40:
         38:c5:e5:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:12:29 2025 by rpki-client