Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
File:                     ab0417bd-e109-3009-93c0-f235c176e944.roa (raw, json)
Hash identifier:          VIP7TvI8CGZnT4nV8IkM/F8d6iPvOveSGKJE6V42Llc=
Subject key identifier:   E1:36:2F:BD:08:D0:19:A6:4C:E4:75:83:17:BD:5E:06:20:BE:E4:E6
Certificate issuer:       /CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
Certificate serial:       010D0C9F43285848DEA133BCAA8E70764143F300
Authority key identifier: E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     62830
IP address blocks:        198.62.201.0/24 maxlen: 24
                          2620:52:4000::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:33:bc:aa:8e:70:76:41:43:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f32837b4-0a36-4896-9fdf-ca41e3c848f3
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=87627fc8-911a-47a5-b01a-b87bb1488b36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7e:24:3e:fc:a4:13:46:b3:3f:6b:3d:dd:fd:
                    f8:a2:34:0e:03:8a:85:70:6f:64:65:36:a1:e4:c1:
                    94:04:6b:82:a9:69:bc:b5:13:88:10:83:a1:3f:bd:
                    a4:12:f6:70:b4:46:f0:c4:d0:48:a1:cc:7c:78:dd:
                    6c:82:9e:15:fb:b0:51:96:79:bf:7b:e2:fd:18:ca:
                    2f:d2:a2:f1:0d:89:08:9c:44:00:57:08:08:2b:f5:
                    17:99:bc:91:41:7a:73:09:57:e6:fe:28:67:b9:78:
                    cf:86:3c:d7:c8:fd:88:09:10:ae:4b:f9:e4:3f:e3:
                    35:92:05:bb:f9:69:cf:89:7b:92:00:7c:06:8e:9d:
                    70:25:5d:cd:70:d8:ad:e9:ff:40:79:2f:f3:cd:77:
                    1f:bd:28:9f:90:7d:63:26:e8:28:bb:dd:9f:49:6f:
                    b8:ba:b2:11:c8:eb:59:f0:0d:1b:3e:8e:5b:6f:14:
                    37:a5:02:1f:ee:4b:d8:3a:2a:7d:e6:30:98:51:8c:
                    15:21:c3:05:35:97:7c:d7:a4:cb:69:21:9c:aa:95:
                    9d:28:f0:ff:0e:a7:20:7f:88:d1:bb:e3:96:4e:dc:
                    f3:a6:f9:7c:33:3e:31:5b:c8:c7:05:51:80:52:0a:
                    4a:99:be:a7:4d:bb:d0:50:75:be:b5:2b:12:77:51:
                    e9:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:36:2F:BD:08:D0:19:A6:4C:E4:75:83:17:BD:5E:06:20:BE:E4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/ab0417bd-e109-3009-93c0-f235c176e944.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3/f32837b4-0a36-4896-9fdf-ca41e3c848f3.crl

            X509v3 Authority Key Identifier:
                keyid:E4:F5:44:25:EA:88:0B:38:3A:D5:70:34:7C:DE:C8:81:3F:4D:40:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f32837b4-0a36-4896-9fdf-ca41e3c848f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.62.201.0/24
                IPv6:
                  2620:52:4000::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:0e:35:74:59:07:a3:f4:77:75:2a:55:7c:ed:a1:06:d7:3b:
         09:44:b2:40:2c:82:6c:e4:40:95:3d:f9:b2:96:33:ae:21:18:
         2d:29:e5:cf:d5:51:fb:28:7b:c5:eb:7b:50:e6:18:60:4b:4d:
         aa:86:20:f7:c9:a6:f5:c1:7e:c1:81:ef:c8:c7:c5:86:ce:5a:
         c2:55:83:c9:b8:22:aa:f0:bb:31:5e:f5:ee:02:52:8a:ce:ef:
         cb:5c:c4:29:77:ee:06:16:12:da:58:62:71:b1:ae:7a:0f:71:
         b4:08:6d:d5:b0:05:27:6f:9a:f2:e1:73:41:46:f8:9b:a5:2f:
         9c:8c:5b:fc:28:a0:b4:71:75:e7:8e:97:10:0a:57:ac:f2:a7:
         42:77:78:d5:3b:2d:34:54:31:57:cd:d3:b4:b2:52:01:24:09:
         d9:3d:72:d1:79:ae:87:8e:47:29:12:e3:21:e3:3c:51:5c:76:
         63:fa:c7:07:44:63:bb:ae:6a:1a:5b:3c:4b:8c:ad:31:11:1f:
         fa:fe:3d:0b:a1:19:56:14:bc:c8:4c:b9:b3:02:56:98:3e:b4:
         20:31:3d:a5:2c:89:48:ad:9d:b5:fc:ec:0c:04:33:94:63:76:
         ef:20:3d:73:11:2d:0d:a9:2d:85:03:86:91:90:04:fc:92:33:
         72:41:4a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:18:48 2025 by rpki-client