Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
File:                     9ecd13d5-3d61-344c-b909-f184cf77b07f.roa (raw, json)
Hash identifier:          Hj+mOLBUgBWMqsBOhYKLPz/DchxPuwRBk8wmOezmNLY=
Subject key identifier:   17:20:13:40:FF:71:F1:A2:D7:9F:9E:E7:6F:C8:13:B1:40:6C:DE:59
Certificate issuer:       /CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
Certificate serial:       010D0C9F43285848CC7B917B61EA99CA5CD0B000
Authority key identifier: 57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16729
IP address blocks:        159.55.213.0/24 maxlen: 24
                          159.55.214.0/23 maxlen: 24
                          159.55.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:91:7b:61:ea:99:ca:5c:d0:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399fbcba-412a-4e4c-8856-d893d23bdd7b
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=77635a4d-3feb-4df5-b4de-0fdc89e3a423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:0a:dc:27:60:06:d3:83:46:48:fe:a7:ec:cd:
                    c4:4f:68:ec:ce:28:b0:9a:6a:24:16:ed:19:0e:e1:
                    af:c1:8f:8e:ec:ac:d1:17:8d:f6:14:8e:6a:cb:a6:
                    5d:25:81:1e:c5:64:af:7e:41:ca:6b:16:1d:cd:c0:
                    89:ed:bd:7b:0a:f5:6e:15:61:e5:43:ab:74:ce:c5:
                    4f:05:e9:65:2f:4c:f6:a7:59:97:bd:82:64:39:0a:
                    85:e9:c4:88:12:e2:40:ee:27:33:b1:ef:4d:df:87:
                    01:da:1f:52:95:34:ec:1a:af:c6:dd:d7:f4:1e:c4:
                    d2:de:77:5c:4d:06:61:48:40:a8:8d:46:72:8c:d1:
                    99:4a:c5:a9:72:bb:06:45:22:50:2f:b1:2a:d2:36:
                    1f:e6:2e:84:43:1c:4d:4a:2b:93:c8:37:c5:48:98:
                    87:3f:da:56:13:7a:a2:f6:98:7f:75:46:83:6f:20:
                    d4:25:a1:3b:75:2e:3a:25:fe:ad:e7:b4:20:70:c5:
                    bf:f4:b6:04:db:de:57:97:9c:e6:f1:91:6b:ef:a5:
                    b3:16:22:95:1b:25:31:bc:5f:aa:b6:9f:ea:6d:06:
                    37:55:e2:50:68:73:b2:1e:c7:2a:38:44:4f:f6:66:
                    6f:50:ee:b2:11:b3:42:ae:70:8d:bb:5d:13:f3:e2:
                    b1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:20:13:40:FF:71:F1:A2:D7:9F:9E:E7:6F:C8:13:B1:40:6C:DE:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/9ecd13d5-3d61-344c-b909-f184cf77b07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b/399fbcba-412a-4e4c-8856-d893d23bdd7b.crl

            X509v3 Authority Key Identifier:
                keyid:57:3E:0A:60:D6:16:F9:89:C9:A5:E8:93:58:1A:F9:02:3D:20:E6:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/399fbcba-412a-4e4c-8856-d893d23bdd7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.55.213.0-159.55.223.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:a4:37:ce:95:73:ae:ff:ed:16:8b:19:9f:f6:2a:2f:4b:25:
         e0:51:61:f7:01:5e:a0:04:56:db:2e:cf:ad:b4:42:ea:ba:6f:
         18:b7:09:1f:81:f9:13:09:88:e4:34:9a:6c:d2:af:75:62:0d:
         a9:d7:c3:33:00:fe:7b:63:8e:87:cf:22:87:1a:d5:03:18:96:
         aa:d3:a3:a2:95:aa:50:dc:13:84:e8:25:57:d0:39:ab:c3:c6:
         1d:22:e5:95:8f:9e:94:35:1a:a8:31:f4:57:5f:d8:fd:4c:6e:
         3a:05:8d:31:44:87:73:f6:c8:3d:c8:1d:b7:70:c1:ef:fc:c9:
         bb:c4:6b:d0:36:93:d4:03:0b:cd:e4:13:55:61:e3:95:26:52:
         11:3c:94:ce:b7:38:42:25:96:bb:b4:73:e2:8a:db:3b:59:f5:
         20:5b:77:e6:ff:e0:44:aa:d0:e4:e4:12:30:57:cf:14:bc:ff:
         89:37:d8:65:09:a0:25:27:4e:54:cf:bd:73:70:75:a3:f7:6d:
         9f:54:e5:5c:67:7c:d4:b3:64:fa:2c:eb:f5:0e:4e:7f:07:f3:
         d3:57:61:e5:56:2a:e3:32:7b:05:a0:2b:ca:11:bf:88:37:b4:
         84:ed:e9:ee:9c:08:b6:5a:e0:65:db:31:01:1e:90:77:73:63:
         40:e1:b4:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:54:29 2025 by rpki-client