Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
File:                     fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa (raw, json)
Hash identifier:          l/puhG9HiLDLDJAbGhRThcMT/9lKcQUMBj2u6SxKizY=
Subject key identifier:   AD:0F:42:16:AA:84:90:ED:EC:BA:6E:F9:3D:E9:F0:05:5C:5C:C5:DF
Certificate issuer:       /CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
Certificate serial:       010D0C9F432858489A3B489DDFBF6F0C719D9480
Authority key identifier: 2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa
Signing time:             Mon 20 Jan 2025 02:00:40 +0000
ROA not before:           Mon 20 Jan 2025 02:00:40 +0000
ROA not after:            Sun 20 Apr 2025 01:00:40 +0000
asID:                     64227
IP address blocks:        64.237.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9a:3b:48:9d:df:bf:6f:0c:71:9d:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=370b86f5-0ae7-4e6c-a32e-08310156df3f
        Validity
            Not Before: Jan 20 02:00:40 2025 GMT
            Not After : Apr 20 01:00:40 2025 GMT
        Subject: CN=1b4571ee-118b-45a7-887f-80665508efeb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:36:e0:21:3d:21:30:9e:fd:3c:a1:f6:33:44:
                    ba:10:f6:35:33:af:75:2e:41:15:dc:87:e3:ef:8d:
                    bd:a6:19:e3:f1:93:53:7b:d3:2e:2a:ca:77:ac:34:
                    6a:8a:68:80:cb:ff:5b:d1:76:b0:85:46:63:2b:06:
                    1e:86:8a:b2:3d:3a:a8:e8:c6:24:ec:56:b2:6b:7f:
                    23:9b:9d:7c:ae:01:82:76:a2:ce:17:b6:ad:d7:0a:
                    eb:0e:42:a4:cb:36:4b:40:75:22:41:46:6d:b0:1a:
                    93:9a:78:fb:c6:5d:ed:c3:a5:63:60:3b:b6:e7:ac:
                    78:a0:cf:21:78:66:b3:30:b3:58:0c:e9:08:41:04:
                    2a:11:55:ca:08:c2:97:cf:52:14:9d:a9:3e:2d:71:
                    fd:b6:5b:79:2b:0f:57:41:42:ad:c7:22:e1:98:27:
                    2d:d9:db:22:0d:04:a6:ba:82:3e:54:e6:ca:41:88:
                    c5:61:4b:b5:aa:36:6e:48:f2:73:99:94:9f:e9:23:
                    41:45:74:aa:41:c8:ea:b5:e1:41:ea:37:78:75:74:
                    46:eb:f3:53:e6:7d:72:9a:c0:eb:16:27:93:e2:10:
                    75:00:42:5b:6a:ed:dd:6a:70:2b:5f:be:4e:92:ab:
                    13:fb:bb:74:e5:35:d2:bc:12:d8:ad:e0:43:1e:bf:
                    2c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:0F:42:16:AA:84:90:ED:EC:BA:6E:F9:3D:E9:F0:05:5C:5C:C5:DF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/fc601bda-6dd0-3c66-bc64-682c9c0dffde.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f/370b86f5-0ae7-4e6c-a32e-08310156df3f.crl

            X509v3 Authority Key Identifier:
                keyid:2A:70:6E:55:84:63:E3:EE:72:60:90:EA:4D:26:CE:F2:9C:2E:98:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/370b86f5-0ae7-4e6c-a32e-08310156df3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.237.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:e8:90:39:82:ff:73:bd:01:7c:78:74:3b:6e:bd:c5:76:
         63:bc:c3:27:0a:56:b5:5d:5a:7e:77:09:71:5a:12:70:fe:87:
         ac:f9:0f:d4:0b:b9:5a:c3:91:25:15:2e:5e:30:8f:4b:c4:f6:
         ef:aa:10:e0:e4:c1:eb:96:c8:08:3d:9b:52:1b:a9:8b:e7:09:
         cb:9a:4b:b6:e3:4c:c4:3e:ce:41:08:2b:98:a5:28:45:75:02:
         bb:f4:78:c2:ba:8a:5f:0a:13:9c:af:73:a0:11:61:4e:eb:c1:
         bc:a0:70:e8:74:bf:57:25:e8:25:3b:e9:a0:c5:a9:83:6d:38:
         8d:04:3f:5e:64:9a:97:0d:0d:25:f7:b1:f1:3f:36:bb:cf:49:
         18:30:0c:f6:eb:21:53:c2:94:db:a3:51:41:37:ec:27:e8:44:
         14:f3:24:37:ee:16:a5:9b:a0:ff:2c:8a:46:5d:c1:60:1a:a9:
         8e:4b:64:92:c3:b1:d0:bd:ff:f0:3c:f5:b7:be:ca:e5:c2:8b:
         0e:b7:1d:9a:fd:04:f5:8a:d8:d4:45:15:34:ff:24:92:6a:d5:
         6b:89:b0:33:63:3f:51:fc:5c:fe:c8:4a:1f:04:38:aa:94:dd:
         4a:5b:fb:39:8b:35:8d:e5:df:0d:57:ea:60:15:f7:40:e1:35:
         c1:03:73:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:03:25 2025 by rpki-client