Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
File:                     4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa (raw, json)
Hash identifier:          8Yu0P5RP0bCGHTt1J9hnDppG8rci0JNw8oGeTxeihBs=
Subject key identifier:   FA:14:02:02:26:25:DE:7C:AC:16:43:24:23:89:68:A2:3A:71:29:1A
Certificate issuer:       /CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
Certificate serial:       010D0C9F43285848345568F8A907830158D7F280
Authority key identifier: 0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa
Signing time:             Sat 14 Dec 2024 14:00:52 +0000
ROA not before:           Sat 14 Dec 2024 14:00:52 +0000
ROA not after:            Fri 14 Mar 2025 13:00:52 +0000
asID:                     3356
IP address blocks:        216.158.207.0/24 maxlen: 24
                          216.158.211.0/24 maxlen: 24
                          216.158.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:34:55:68:f8:a9:07:83:01:58:d7:f2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4696412f-57d7-49ba-b514-6b1c6ab433a4
        Validity
            Not Before: Dec 14 14:00:52 2024 GMT
            Not After : Mar 14 13:00:52 2025 GMT
        Subject: CN=aa9f10d8-46aa-40ec-9fee-84d636a84722
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:50:01:02:3c:25:3b:88:95:a0:2c:4b:58:cc:
                    01:1c:10:a3:09:77:03:1c:63:cd:81:22:f3:d2:ee:
                    c3:11:dd:ba:da:23:d8:56:92:1d:45:9c:52:b4:c8:
                    5f:1a:d3:d5:a0:25:f1:75:99:77:71:e1:5f:ea:64:
                    75:69:91:d3:a5:73:5b:16:9b:ca:26:b4:a8:76:9d:
                    af:88:47:5b:61:da:cc:f0:0a:3b:7c:c1:a9:97:7d:
                    3e:04:59:b7:c5:4a:a3:ac:16:7a:1e:25:48:58:e4:
                    47:9e:07:a7:77:a3:00:3f:df:67:6d:3e:8d:8e:85:
                    05:3c:d3:b5:33:0d:66:1e:03:12:c0:cd:7c:aa:a0:
                    0d:a4:f9:0c:cf:ac:79:c0:99:35:02:d0:04:b0:ab:
                    9e:ce:97:49:5b:fc:2a:71:77:48:7c:09:a2:8a:a5:
                    a8:44:4b:0a:4b:0b:c3:9a:7d:61:a8:03:9e:7e:20:
                    85:9d:3a:ee:6c:66:31:12:ba:dd:9c:52:f0:a9:75:
                    81:8e:15:f1:40:e4:b7:6c:61:e9:91:6f:87:e6:14:
                    4d:08:0f:c0:5a:a4:42:e3:14:66:bf:a4:e5:bb:c4:
                    6d:d7:af:6c:9d:70:89:3f:76:f5:48:e9:67:e1:6e:
                    91:ab:0a:99:af:36:99:0d:08:30:e6:f1:19:a9:f9:
                    c2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:14:02:02:26:25:DE:7C:AC:16:43:24:23:89:68:A2:3A:71:29:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4780f2b1-b3c0-3f5f-8bc8-c16b9cebce59.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4/4696412f-57d7-49ba-b514-6b1c6ab433a4.crl

            X509v3 Authority Key Identifier:
                keyid:0C:4A:94:89:9D:66:CF:0F:19:12:8F:1F:F6:59:A4:81:47:58:35:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4696412f-57d7-49ba-b514-6b1c6ab433a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.158.207.0/24
                  216.158.211.0/24
                  216.158.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:27:53:5b:c8:79:2d:a0:fc:71:45:2c:7d:4a:ff:3f:05:c5:
         93:69:42:c6:07:8e:7c:a7:c6:9c:04:dc:51:38:a6:bd:4a:11:
         77:ae:58:24:35:ee:45:9a:c9:db:9c:67:37:d2:93:83:5a:f9:
         77:d2:9d:c3:fa:cb:c8:2c:48:b4:ed:7b:e3:9f:5a:90:89:3d:
         b3:19:b9:1a:01:ce:48:e8:c0:6f:b9:b7:3b:80:1e:17:e4:f6:
         c9:26:a3:11:c8:ca:ba:b0:f6:4e:0c:62:5f:e1:c1:3e:9e:bf:
         d9:38:13:32:f8:77:f7:a7:c6:e5:65:e9:c5:56:01:47:a6:9e:
         05:f1:f6:69:87:9a:d3:71:05:f2:ae:dd:43:dd:63:03:2a:92:
         5e:65:f9:94:82:42:66:f5:05:51:43:77:32:73:35:2f:a0:90:
         a8:0f:ca:75:bd:83:88:59:70:00:00:b2:c7:7a:6d:24:6a:5d:
         0e:4e:52:5b:ef:13:5e:63:d2:54:72:38:8d:b8:8e:c8:5e:a5:
         42:9b:f4:64:11:bc:80:dd:39:34:66:46:7d:70:3a:b9:ac:0b:
         c5:29:ee:b2:85:ec:5a:20:e8:dc:ab:31:a1:47:27:8b:c9:27:
         18:ce:fb:0e:0d:33:81:25:58:39:b6:7e:20:3b:5a:4f:fe:25:
         d0:84:61:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:24 2025 by rpki-client