Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/a12bd8b5-d05f-3784-b579-5b0cd95df2b9.roa
File:                     a12bd8b5-d05f-3784-b579-5b0cd95df2b9.roa (raw, json)
Hash identifier:          gwvQF/K7GzJWjRYPHUjLfzeH4hLqNHENZzLR5Q0FNDs=
Subject key identifier:   59:E2:17:A9:95:8C:46:89:90:5B:06:71:22:3B:C0:77:A9:7C:B7:1A
Certificate issuer:       /CN=e8b1c892-1844-46b1-8572-70740f2673f5
Certificate serial:       010D0C9F43285848F4F694AAC309A67E91E1D480
Authority key identifier: 68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/a12bd8b5-d05f-3784-b579-5b0cd95df2b9.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     55243
IP address blocks:        198.148.6.0/24 maxlen: 24
                          198.148.7.0/24 maxlen: 24
                          199.119.164.0/24 maxlen: 24
                          199.119.165.0/24 maxlen: 24
                          199.119.166.0/24 maxlen: 24
                          199.119.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:94:aa:c3:09:a6:7e:91:e1:d4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8b1c892-1844-46b1-8572-70740f2673f5
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=b41b6291-1391-46c8-b74c-9069aed4ca02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ae:4a:7a:84:5d:bd:ab:4e:fc:e2:b6:fe:c0:
                    1c:38:fe:38:5d:13:70:4b:6a:62:29:47:c1:64:f8:
                    f3:15:f5:f9:21:e1:99:b7:bf:b2:a5:02:4b:04:09:
                    e2:01:fa:66:56:d0:47:20:9f:11:ad:a0:29:99:47:
                    20:56:47:93:c3:58:1e:e2:07:48:ee:f7:de:00:4b:
                    fb:e5:44:81:41:d1:1b:bd:74:32:0f:fc:06:60:f4:
                    f6:4a:65:99:85:c4:76:a6:50:be:6d:13:f7:5e:e0:
                    92:6b:db:25:67:e4:36:5b:50:32:4b:0f:4e:8e:8e:
                    67:f6:f4:1c:61:e9:8a:d7:d5:43:ed:b2:30:ac:31:
                    12:c2:60:be:87:89:11:73:f9:c1:82:af:fd:cb:4c:
                    b8:f9:6a:f5:29:22:39:c4:6d:a4:7d:61:6f:fd:a6:
                    1b:c5:9f:cf:62:e6:d6:c0:2b:00:64:3f:c0:84:4e:
                    05:f8:be:47:2d:b9:d4:c8:40:4c:44:bb:51:a8:19:
                    46:56:74:f9:d0:77:34:2c:d8:27:3e:d4:30:d0:f6:
                    7f:a0:91:6c:0b:9b:53:e7:05:40:c3:bd:3d:30:ee:
                    9a:25:7b:72:63:3c:9a:30:b6:70:c2:20:b9:c7:bc:
                    14:5b:3c:66:96:68:2c:b5:24:9a:24:be:27:8b:3d:
                    ba:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E2:17:A9:95:8C:46:89:90:5B:06:71:22:3B:C0:77:A9:7C:B7:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/a12bd8b5-d05f-3784-b579-5b0cd95df2b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5/e8b1c892-1844-46b1-8572-70740f2673f5.crl

            X509v3 Authority Key Identifier:
                keyid:68:2B:51:72:49:55:98:F9:87:14:C6:9C:BF:90:3A:DB:D5:40:A5:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e8b1c892-1844-46b1-8572-70740f2673f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.148.6.0/23
                  199.119.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:26:6c:d4:2d:a5:34:3a:65:80:c3:16:df:9a:9d:e4:15:39:
         e6:cd:67:aa:da:32:bd:e0:9c:6f:00:44:9c:75:2e:45:af:41:
         09:48:24:5f:3d:c0:5c:6d:1f:9e:9f:94:cc:b0:7e:c0:87:17:
         7e:6d:d3:93:b5:d9:2a:ba:83:74:55:93:8c:90:44:d8:dc:73:
         a9:b5:64:07:37:24:f5:a4:2d:97:e1:56:0f:c2:48:49:79:b4:
         a3:6f:37:2c:10:78:85:db:cb:ec:f5:88:3c:71:fe:9b:a7:4d:
         83:d7:20:74:7c:8e:54:c0:88:8d:f3:6c:f0:62:93:21:29:86:
         71:3d:de:68:b8:b9:fa:ae:a5:57:12:0c:43:18:a3:07:98:a3:
         dc:08:de:48:de:6e:69:ee:06:d7:55:8a:18:85:98:c2:91:92:
         47:19:93:ad:6e:14:09:d3:a4:c7:db:8c:37:7a:7e:bf:a6:77:
         71:ff:5e:f6:17:d3:9c:b4:08:9d:f0:d2:e9:43:43:b7:28:7d:
         2a:71:13:86:7b:4a:69:f8:a4:bc:cd:2b:42:3b:97:05:c1:a2:
         86:ad:39:a5:4b:50:7a:f3:1c:9d:b8:13:79:7f:07:a8:7e:e3:
         3e:59:56:49:80:95:a9:4a:2f:df:29:45:5b:f8:ab:63:a2:34:
         ce:5f:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:52:05 2025 by rpki-client