Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/00177cdd-fd61-301a-9c96-8f476bc62fb5.roa
File:                     00177cdd-fd61-301a-9c96-8f476bc62fb5.roa (raw, json)
Hash identifier:          7AHhr+p7o28O60vwqCOskASwRhNJ4J7PcWghWCF88/I=
Subject key identifier:   61:27:19:6B:B3:92:6E:4C:ED:FC:49:7A:38:B2:EC:80:C9:92:97:29
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848090FBDDF1442602C66AC0680
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/00177cdd-fd61-301a-9c96-8f476bc62fb5.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     14428
IP address blocks:        216.68.84.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:bd:df:14:42:60:2c:66:ac:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=3e58c852-6d3c-410d-8f08-69a318fc5595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e7:b1:1f:31:86:bd:62:ec:34:c1:18:4a:de:
                    70:ec:38:dc:62:ec:50:00:68:cf:2a:f0:6c:9f:53:
                    6f:dc:1d:17:f8:08:0f:8b:11:22:8b:9c:98:99:e9:
                    1f:37:8a:02:5d:82:82:fa:af:01:e4:f9:89:6e:81:
                    5b:e6:8a:3d:da:0d:6d:dd:06:b4:f2:21:f5:e4:43:
                    db:78:ff:62:03:73:77:f4:4f:c4:08:cd:63:20:71:
                    74:2c:ec:dc:cb:ab:7e:bf:33:99:b7:72:80:73:4c:
                    04:f6:ee:33:0c:4f:7a:b9:5e:1b:d6:13:2c:64:63:
                    29:c8:02:7b:fb:71:1d:3b:d7:8c:c0:8c:f3:83:98:
                    77:1d:8c:22:e3:8b:27:67:8a:63:e9:82:76:79:6b:
                    ef:e3:7b:44:97:8b:6a:96:2b:0a:15:20:be:f2:61:
                    da:a8:13:33:6e:e5:f6:c0:5f:c4:d8:8d:1e:b6:4b:
                    e6:45:18:7d:81:04:9a:d0:51:cc:3a:04:9d:03:fc:
                    e5:6c:07:dd:93:2a:ab:45:36:50:61:be:68:90:4d:
                    f0:6f:b8:29:02:05:42:0f:e7:70:ab:15:cb:77:b9:
                    6f:25:88:ab:c7:38:00:df:28:32:32:47:50:1b:78:
                    a1:45:77:6a:0c:82:24:98:c0:76:ca:cc:68:4b:d4:
                    cb:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:27:19:6B:B3:92:6E:4C:ED:FC:49:7A:38:B2:EC:80:C9:92:97:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/00177cdd-fd61-301a-9c96-8f476bc62fb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.84.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:52:9d:73:3d:f0:12:50:cf:a7:9a:ad:27:5b:1e:92:3e:66:
         3c:d9:d1:c5:7f:ff:79:69:20:9c:1a:e1:59:b6:e1:d8:d4:30:
         c7:9b:cb:89:a2:dd:a2:96:05:fa:00:61:86:f7:2d:fb:f1:82:
         e1:ed:e4:48:cb:a1:b3:9d:d1:c2:d9:bf:1d:4b:5e:a7:26:5b:
         ba:ff:dd:1e:4b:89:2e:95:60:de:af:90:a2:6f:43:4c:7b:6e:
         82:df:8a:d1:ba:4b:75:14:7d:35:9a:db:a7:52:78:da:5a:5e:
         06:df:a8:e1:59:03:04:4f:1b:42:71:5e:84:f3:fa:27:88:cc:
         e6:1d:a2:99:d8:19:0f:56:6e:21:b1:54:57:71:70:96:c5:09:
         97:83:f0:36:a1:83:22:e6:50:78:5f:fa:1f:f4:bc:50:25:0f:
         ff:df:c3:dc:d1:1e:e2:06:70:5e:6e:29:b5:68:e9:77:ca:a9:
         12:33:bf:cc:5a:f5:28:7a:48:b5:26:be:54:c5:02:d3:56:35:
         11:70:de:d6:fb:b3:1c:2a:05:34:66:37:49:56:f8:83:1d:d2:
         51:a9:81:b2:40:46:8e:db:c8:76:21:5c:29:fa:51:b0:8f:da:
         d7:95:6a:3d:cc:66:07:bb:1a:29:83:23:a4:7e:b2:4e:ce:c0:
         30:fc:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:37 2025 by rpki-client