Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
File:                     b163f5cb-3463-37e5-a115-19f140bcec69.roa (raw, json)
Hash identifier:          dhODZY535s6/6joOML1d572STTuEZzsy+2r3VDt7c48=
Subject key identifier:   20:AB:B8:8E:5E:16:FD:42:C2:79:8B:F9:3D:0B:0D:40:B9:C7:88:85
Certificate issuer:       /CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
Certificate serial:       010D0C9F43285848B6261D11F41FA1B343739A80
Authority key identifier: C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     63353
IP address blocks:        104.243.160.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1d:11:f4:1f:a1:b3:43:73:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=0383bd85-df76-42d3-b182-3f85a5cd5fec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:35:83:93:06:a3:ad:89:58:6e:e2:d3:4f:7e:
                    ad:77:f6:fb:a7:4a:89:63:07:ce:cf:64:e5:ab:cb:
                    8a:8e:1e:5b:0d:4a:0d:54:c8:7b:6d:88:d4:ff:55:
                    7b:78:31:39:b7:c1:54:0b:f8:7e:ba:55:bc:04:4e:
                    a7:48:4b:48:4a:07:02:d6:18:27:bf:d1:c4:0f:72:
                    e6:83:3e:7b:49:90:08:9f:e7:8c:4c:83:88:4d:87:
                    8e:5d:27:19:60:df:b0:41:22:4d:1b:f7:ce:8f:7e:
                    ed:c0:21:a1:ae:50:f3:f5:ab:00:dc:21:00:70:de:
                    ba:a4:3a:d9:96:8e:07:c7:47:49:97:83:1a:5c:28:
                    37:25:62:4b:e8:a5:a9:ed:90:86:c9:e8:1b:7b:96:
                    0c:ab:11:c1:d1:e6:9d:de:03:d1:9c:2b:b7:89:c8:
                    df:2a:52:a8:60:8a:21:77:64:d4:d9:57:ab:f8:86:
                    ef:cd:70:5c:28:c3:94:b6:8e:64:84:fa:15:71:11:
                    d0:48:b6:70:d0:54:37:b9:5a:5a:17:08:07:19:e6:
                    3d:b5:ed:59:32:78:15:6b:39:df:54:01:a1:a7:c6:
                    f2:e0:49:a2:f3:5d:56:93:61:b9:04:cd:79:d1:0f:
                    55:5a:a7:29:92:9c:7a:47:6c:88:6e:b3:ff:45:61:
                    71:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:AB:B8:8E:5E:16:FD:42:C2:79:8B:F9:3D:0B:0D:40:B9:C7:88:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/b163f5cb-3463-37e5-a115-19f140bcec69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.crl

            X509v3 Authority Key Identifier:
                keyid:C6:50:32:23:BD:70:43:DD:F2:32:F3:32:03:E7:20:2D:44:95:C3:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/52ecbc9a-03f7-4801-b8d6-1d0cae0efdf6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.243.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:30:d5:99:70:e0:9d:99:58:17:38:90:ea:f9:31:ae:8b:e5:
         03:c4:95:1e:aa:e4:f2:be:c2:c7:d3:9e:c7:f7:9b:12:be:f1:
         b9:e9:d7:6b:34:45:6c:2e:ae:62:f5:df:86:04:3f:93:91:3d:
         e7:4b:1d:a9:95:8d:09:5d:bb:c3:11:cc:76:47:e9:38:88:a2:
         81:66:26:e7:f7:e9:0b:93:5b:6d:b1:cd:6c:5b:a6:59:3f:51:
         9f:13:18:70:9e:1f:f7:a7:6b:ec:62:7d:f1:04:30:53:3d:cc:
         8e:19:b9:14:7f:ad:33:2d:98:d4:fe:ed:d5:54:03:15:2f:5f:
         b1:20:00:c3:96:b8:5a:94:52:a3:e7:43:08:5b:2e:e2:94:da:
         2b:09:90:5f:94:eb:93:63:4b:e7:1f:8f:27:2a:cc:29:e3:00:
         29:87:69:4c:51:f2:70:d0:32:c1:0f:a1:c1:63:0f:db:df:db:
         7f:32:32:ba:6a:91:b4:ce:bd:d2:95:9e:b5:df:a9:da:e3:56:
         70:2e:b2:17:87:8e:d7:17:00:a1:4b:25:61:95:0a:3a:d3:99:
         f8:c8:3e:7f:15:2c:7a:22:7b:9b:88:4c:f3:f2:1e:f8:10:e1:
         c5:94:b0:65:18:09:bf:c9:ce:f1:41:24:b5:61:14:73:9b:3b:
         a2:53:cc:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:27:47 2025 by rpki-client