Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
File:                     75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa (raw, json)
Hash identifier:          jChOQ6Dolp7tsjLvUXqbguc6nGnQ/ZI3yICNAn0EKK0=
Subject key identifier:   B0:0D:D5:F1:A4:B2:55:4F:B9:92:94:21:3D:57:ED:FA:04:BA:8E:D8
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F43285848748B1FE85FC504430878FA40
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     11290
IP address blocks:        170.249.80.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:1f:e8:5f:c5:04:43:08:78:fa:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=2199e0f1-6356-44ae-8be0-b54f03307cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:37:23:8e:94:1b:8a:fe:51:ba:6d:c2:9e:f7:
                    cb:3d:b7:21:42:6e:62:56:14:54:9d:bb:eb:70:93:
                    fd:24:52:40:a9:ec:f6:e7:b3:70:05:78:d6:df:e8:
                    ff:2e:ff:eb:72:5a:85:c4:4e:bc:ee:5a:ba:92:5a:
                    5d:cf:fa:6e:3b:36:cd:7c:40:d4:95:8b:48:42:7f:
                    09:ba:e7:18:56:26:a3:67:ca:87:19:01:ca:68:de:
                    3f:55:7d:d2:67:83:3b:e4:84:21:e1:c2:dd:ef:37:
                    3e:7c:c3:81:e2:51:29:b0:c4:59:d4:93:29:75:77:
                    bb:45:2f:e7:e2:62:ab:e0:6d:dc:fd:22:e3:ef:3d:
                    00:4b:87:f6:af:67:14:47:9f:a2:95:0d:5d:96:ef:
                    a5:87:1b:9e:1a:a9:67:df:53:b8:e9:d5:1b:66:8f:
                    de:94:71:a7:df:06:13:9e:30:25:72:7e:d0:b4:83:
                    2f:a8:8b:47:fa:dd:44:d6:c4:62:3d:5c:f6:3b:c0:
                    1b:d8:c4:b3:a2:95:da:3e:c3:18:57:f1:9e:a8:16:
                    d6:b3:67:8d:65:65:f0:84:4f:37:64:aa:20:f3:81:
                    8e:a6:69:be:b3:a2:fa:12:71:a6:02:1c:e4:82:bb:
                    ff:3f:f4:1a:06:d6:99:29:5b:fa:f8:1c:5f:70:3d:
                    34:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:0D:D5:F1:A4:B2:55:4F:B9:92:94:21:3D:57:ED:FA:04:BA:8E:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/75d64262-ef1a-3b8b-9d4d-2b36e7b1ccb4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.249.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:4e:d1:26:47:fe:ca:3b:02:d9:fd:c9:8d:f2:68:86:0b:a0:
         1e:fc:b5:ea:2c:73:3c:e5:3d:a0:59:3d:9c:de:07:07:99:c7:
         05:8c:dc:a3:2f:26:51:de:67:30:b2:9e:b4:3d:bb:d1:33:91:
         73:2f:b6:4a:0d:43:78:2d:b5:73:4d:8d:46:83:8f:aa:68:24:
         03:82:a1:28:82:08:88:20:28:6e:9a:aa:2c:7b:90:ff:6a:92:
         2c:ff:d5:da:70:9b:80:f6:79:42:67:18:9c:96:22:6d:27:bc:
         44:ef:67:91:79:9d:d7:f8:22:90:14:3f:8d:4d:f5:69:b1:85:
         17:e0:f9:19:a8:02:3e:30:0a:9b:76:e3:ca:ae:b4:54:e1:7c:
         88:b7:aa:e9:a3:9f:13:ff:58:d8:76:92:4b:9f:88:19:c4:a5:
         0f:cc:f3:db:7b:b2:e9:04:75:80:ce:83:23:7a:d7:13:1a:46:
         1b:c5:fd:a5:75:0d:b0:9c:b7:77:b3:66:18:e9:87:a0:14:66:
         08:d4:8e:ec:da:61:49:06:9e:ff:7b:75:2f:97:ba:b4:aa:94:
         89:b9:7a:40:00:b8:df:ea:96:b5:11:10:1d:7b:c0:ad:11:4f:
         74:3a:2b:68:28:1d:82:f4:fb:b6:a1:94:44:38:24:42:4f:30:
         18:86:e3:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:00 2025 by rpki-client