Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/a391f805-4de8-3a23-a48d-f4d254319d7f.roa
File:                     a391f805-4de8-3a23-a48d-f4d254319d7f.roa (raw, json)
Hash identifier:          lpYi7K4J51wWRktnUHjqa6Ov3s/D8hObgNJgh9LdPCg=
Subject key identifier:   F4:1D:8A:16:C9:3C:BB:7A:F6:AF:69:9E:D6:FA:75:FC:25:D6:C4:61
Certificate issuer:       /CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b
Certificate serial:       010D0C9F43285848139B7F7EC7E346A5F5E21640
Authority key identifier: 7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/a391f805-4de8-3a23-a48d-f4d254319d7f.roa
Signing time:             Mon 02 Dec 2024 20:40:33 +0000
ROA not before:           Mon 02 Dec 2024 20:40:33 +0000
ROA not after:            Sun 02 Mar 2025 20:40:33 +0000
asID:                     15081
IP address blocks:        96.43.192.0/19 maxlen: 24
                          167.224.16.0/20 maxlen: 24
                          168.75.176.0/20 maxlen: 24
                          198.101.48.0/20 maxlen: 24
                          2605:1480::/32 maxlen: 48
                          2606:c040::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:13:9b:7f:7e:c7:e3:46:a5:f5:e2:16:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b
        Validity
            Not Before: Dec  2 20:40:33 2024 GMT
            Not After : Mar  2 20:40:33 2025 GMT
        Subject: CN=d69056d5-cf58-4776-8542-424cbbfe425f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:3c:9c:6b:e6:63:a7:61:15:a1:ea:b7:f5:f4:
                    07:8a:1a:33:53:3b:06:94:e5:af:54:fa:cf:56:31:
                    36:71:b4:d2:2b:4b:19:b2:31:df:22:ac:29:8f:91:
                    97:f9:2a:63:85:22:49:c2:bd:ca:7d:70:4f:64:4a:
                    1f:70:25:e1:0a:49:3b:7d:79:e0:98:ad:eb:e0:48:
                    82:1c:b2:c1:bd:47:99:24:64:ca:58:85:79:25:25:
                    1c:6a:5c:19:fb:b4:39:4a:d2:e1:f5:41:da:5f:f3:
                    2b:0e:09:26:3a:8e:f4:d5:33:fd:9e:62:09:8c:ed:
                    88:e6:92:bb:42:e4:13:3b:67:2a:ab:39:8e:3f:23:
                    e8:a9:86:38:35:69:ab:f5:93:94:19:7f:4c:f5:1a:
                    0f:f7:15:23:ff:01:1b:11:8a:0c:8b:a2:3f:5e:e3:
                    49:e8:eb:f1:2f:5b:2b:46:e3:7f:55:8c:bc:88:24:
                    0c:0c:96:92:10:5e:c3:e6:25:33:50:76:15:02:6b:
                    a2:d6:b3:c5:40:8d:75:a9:d7:ad:79:c4:c0:b2:d5:
                    49:4e:3a:67:5a:ff:f5:7b:32:cf:00:34:d0:4d:8c:
                    21:17:ae:08:84:6e:f2:f9:73:35:33:3b:b7:4f:50:
                    c1:cf:c6:af:e4:5f:6f:2d:72:33:2e:b0:46:6f:7a:
                    15:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:1D:8A:16:C9:3C:BB:7A:F6:AF:69:9E:D6:FA:75:FC:25:D6:C4:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/a391f805-4de8-3a23-a48d-f4d254319d7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.crl

            X509v3 Authority Key Identifier:
                keyid:7D:56:C4:5C:48:3C:C8:54:D0:77:55:A7:1A:AA:53:50:F7:D1:38:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6ecf90ec-7cb5-4765-bcc3-a439b0cbb72b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.43.192.0/19
                  167.224.16.0/20
                  168.75.176.0/20
                  198.101.48.0/20
                IPv6:
                  2605:1480::/32
                  2606:c040::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:10:d8:b6:14:37:14:ca:4a:14:8e:0e:df:76:21:cb:90:af:
         97:08:4e:fb:18:51:1d:43:5d:c8:9b:a8:1b:40:01:74:8e:a9:
         c6:e4:d8:b7:9c:cb:d8:a6:a6:40:83:45:b6:cb:c1:26:d7:8b:
         ab:d5:8f:a2:eb:7f:af:3d:79:da:ba:81:91:82:46:3f:e8:78:
         ec:b0:68:8b:52:91:6f:21:6b:26:47:a0:19:18:3e:1f:4c:42:
         88:3c:b3:1b:06:3e:71:f8:44:25:f8:53:27:72:68:64:3f:7d:
         5b:52:68:26:c0:e3:92:01:ac:95:00:92:ab:25:1c:ba:6b:f2:
         0b:ea:23:3b:6d:17:2b:af:5d:e5:d3:0a:9f:a8:5a:40:1f:1b:
         d8:49:f2:85:67:2d:0d:53:ad:1b:4c:ca:02:5d:01:d8:fb:9d:
         f1:ef:15:f3:1c:58:e3:e7:f6:19:03:95:77:a8:88:e7:ee:5e:
         83:40:5a:db:14:e1:e0:3b:fd:ed:c2:cd:b6:e0:8f:55:7f:8d:
         dd:2e:77:ce:d7:51:91:89:a9:8c:a8:1a:f1:c0:44:a1:6f:1a:
         5f:72:3f:3c:49:a0:3c:9b:c0:c5:12:6c:e2:f6:a2:37:a1:4c:
         38:0e:06:84:1c:b9:cb:a4:6e:01:ec:3f:da:d4:83:f3:27:1a:
         19:a6:5a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:09 2025 by rpki-client