Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f059a905-6054-39d3-9bf9-1b9bc055f28c.roa
File:                     f059a905-6054-39d3-9bf9-1b9bc055f28c.roa (raw, json)
Hash identifier:          ZlZeRK6X0LduoOMf+vKVUCllMN/Ajyxk/B2kVQjVvt8=
Subject key identifier:   4D:1D:13:75:B0:91:5B:BF:E5:54:46:3B:FB:06:08:15:2E:4A:8C:26
Certificate issuer:       /CN=1d639366-c044-456e-b8c8-0de04a543a0c
Certificate serial:       010D0C9F43285848090FBA7B3050C6022449BB00
Authority key identifier: FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f059a905-6054-39d3-9bf9-1b9bc055f28c.roa
Signing time:             Fri 29 Nov 2024 02:00:39 +0000
ROA not before:           Fri 29 Nov 2024 02:00:39 +0000
ROA not after:            Thu 27 Feb 2025 02:00:39 +0000
asID:                     6181
IP address blocks:        216.68.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:09:0f:ba:7b:30:50:c6:02:24:49:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d639366-c044-456e-b8c8-0de04a543a0c
        Validity
            Not Before: Nov 29 02:00:39 2024 GMT
            Not After : Feb 27 02:00:39 2025 GMT
        Subject: CN=b3a2f60e-5757-48a3-85bb-cd0ff38ab3ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:33:74:54:64:7e:33:e7:52:db:5b:c7:80:95:
                    cb:e7:8f:d6:2d:96:57:c3:b0:27:d2:e9:23:84:75:
                    20:1d:8c:d8:a0:80:79:26:de:81:8a:44:1e:02:17:
                    fc:cd:ab:52:ec:3a:5a:c8:60:94:d3:a3:5d:02:16:
                    20:28:f7:29:d9:b4:11:2d:f7:09:aa:45:b1:52:77:
                    8f:e7:50:3b:31:91:76:3b:64:05:1d:cc:c2:91:82:
                    1a:84:b0:73:fd:eb:ad:d6:54:2e:e2:90:b2:20:28:
                    2d:a8:6b:55:4c:74:df:5f:6d:47:2c:83:0c:0c:ba:
                    c1:91:39:79:72:58:88:b8:cc:0f:98:a4:06:ad:9e:
                    8d:10:a1:7d:e0:d7:32:7e:0e:8d:70:0b:42:82:48:
                    8b:55:b7:3d:eb:28:54:47:4c:a6:45:7d:c6:81:5c:
                    55:1c:bf:68:03:99:6a:59:4a:71:83:07:7f:96:3c:
                    f8:a2:ee:7f:1a:57:14:0c:5f:8c:46:17:b5:65:27:
                    a1:60:40:34:48:67:9a:bb:a0:33:9c:7c:36:89:c9:
                    fa:c8:bc:14:03:cc:da:a9:fb:a7:98:6c:98:22:95:
                    32:14:dc:28:87:ab:8b:ce:46:7b:11:cc:ce:75:32:
                    c2:ca:38:0b:be:90:5b:13:4b:8b:bc:6f:d3:ac:1c:
                    7c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:1D:13:75:B0:91:5B:BF:E5:54:46:3B:FB:06:08:15:2E:4A:8C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/f059a905-6054-39d3-9bf9-1b9bc055f28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c/1d639366-c044-456e-b8c8-0de04a543a0c.crl

            X509v3 Authority Key Identifier:
                keyid:FC:35:57:C9:0E:3D:B5:19:05:85:A4:A7:E7:10:E9:65:6A:04:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1d639366-c044-456e-b8c8-0de04a543a0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.68.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:45:bc:4d:11:c9:20:f0:bc:34:52:39:fe:72:c2:91:a7:47:
         dc:f1:d6:2d:c2:56:d1:a1:23:a8:c5:42:74:33:6b:9a:f8:97:
         ff:04:0b:d1:97:e8:e0:2c:80:5c:c9:2c:ff:c2:23:9e:70:11:
         21:0c:d1:95:0d:da:ea:b7:db:0f:55:06:d4:09:41:d7:d0:9f:
         2c:7b:29:88:f3:82:72:83:00:31:fd:95:7d:3d:c8:bd:25:a2:
         c2:8e:5b:b3:c7:7a:4c:38:a7:c6:62:46:7c:4a:be:27:35:c9:
         10:f1:49:5a:de:ae:1a:d6:65:c0:03:53:87:54:53:5e:52:fc:
         ff:92:23:89:02:78:bf:fd:f0:60:21:21:bd:be:80:cc:21:31:
         4e:b4:68:65:59:7b:93:8d:7a:85:bb:2a:c1:4b:9b:bd:41:1d:
         c9:9a:b7:3c:49:55:ef:b3:73:55:0a:33:be:ee:36:09:84:77:
         9d:59:d2:49:ab:31:01:1b:da:8f:00:f7:b4:f4:55:a8:f9:ea:
         c2:e4:23:77:ee:76:a6:10:59:14:d1:96:29:d4:d7:c6:95:35:
         cd:29:5f:e2:36:b0:b2:3c:b9:0c:dc:31:66:4d:86:ec:64:6f:
         14:0f:da:27:11:5b:d0:79:91:b3:2a:c2:bc:57:a6:d1:e1:39:
         02:60:a4:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:05:04 2025 by rpki-client