Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
File:                     3220d0a5-cdd5-3f87-b685-9a7a62711425.roa (raw, json)
Hash identifier:          ut/OcDwultob9xQnJ0J+FGa/0YUg/lxIDbU3Gq3K8kc=
Subject key identifier:   7F:E7:09:9F:46:1C:19:48:D5:99:FE:58:65:DB:15:09:CE:FC:1B:83
Certificate issuer:       /CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
Certificate serial:       010D0C9F4328584913AC385E8C143DEBF5683C00
Authority key identifier: 1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa
Signing time:             Tue 04 Mar 2025 14:00:52 +0000
ROA not before:           Tue 04 Mar 2025 14:00:52 +0000
ROA not after:            Mon 02 Jun 2025 13:00:52 +0000
asID:                     400302
IP address blocks:        170.205.60.0/22 maxlen: 22
                          170.205.60.0/23 maxlen: 23
                          170.205.60.0/24 maxlen: 24
                          170.205.61.0/24 maxlen: 24
                          170.205.62.0/23 maxlen: 23
                          170.205.62.0/24 maxlen: 24
                          170.205.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:ac:38:5e:8c:14:3d:eb:f5:68:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=727f5fcf-eede-43ba-8c8d-c9fe87bf2802
        Validity
            Not Before: Mar  4 14:00:52 2025 GMT
            Not After : Jun  2 13:00:52 2025 GMT
        Subject: CN=dd660d41-2dc0-411e-93b5-3d3aada45a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cb:96:6e:91:42:24:f0:02:63:68:67:dd:c0:
                    84:42:d4:36:d4:ac:9b:22:4d:ce:5f:c0:04:77:06:
                    e4:69:d5:2a:5e:e8:1f:0f:54:8e:1c:2e:12:a3:54:
                    59:00:39:63:ee:2a:65:48:cd:26:15:42:5e:84:08:
                    94:5c:ab:19:da:c9:e0:28:fd:13:fd:06:61:1c:91:
                    27:89:04:72:f3:9a:20:c3:e1:65:e1:9b:bb:c8:25:
                    56:12:ab:97:5d:d2:fd:91:4e:7b:15:4c:79:58:3d:
                    de:43:b5:5e:cc:cb:1b:59:ff:46:db:6c:75:95:c0:
                    bf:9f:94:70:be:68:96:8f:2e:34:17:94:a8:b6:a7:
                    66:6e:b4:ee:a4:61:fe:14:7c:0e:43:29:9f:bd:7f:
                    3f:4b:76:4d:fb:06:73:1c:27:e6:da:02:79:ad:55:
                    52:a0:ba:8f:c7:ca:6d:2f:d6:99:a7:2e:16:51:0b:
                    6f:4e:2e:81:b8:ee:d8:4c:0d:b6:e0:85:47:31:0c:
                    f9:3a:9f:67:7a:9d:0d:87:28:1b:d2:07:4e:bc:ad:
                    5d:62:86:36:97:f4:2b:c8:2b:4d:d2:04:8e:4e:98:
                    55:95:d9:58:aa:51:38:53:cd:3c:0a:59:bb:bf:15:
                    f9:67:f9:59:37:58:16:66:0b:ec:ee:39:ef:48:e5:
                    96:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:E7:09:9F:46:1C:19:48:D5:99:FE:58:65:DB:15:09:CE:FC:1B:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/3220d0a5-cdd5-3f87-b685-9a7a62711425.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.crl

            X509v3 Authority Key Identifier:
                keyid:1F:56:7E:60:8B:2E:9E:66:63:58:E6:0E:CA:F8:23:A7:C2:7D:82:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/727f5fcf-eede-43ba-8c8d-c9fe87bf2802.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.60.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:bd:35:6f:7a:0e:42:0c:5b:df:2f:e3:71:aa:67:52:d6:10:
         68:4a:c0:e3:b8:fd:aa:a7:ee:9d:ae:d0:80:79:41:af:0c:53:
         69:5a:f6:cd:27:c3:d8:43:33:b5:d5:b7:bb:71:01:89:d0:c9:
         87:9f:54:06:fe:bc:81:ae:71:41:d5:86:f7:98:f4:f1:84:6c:
         55:b1:a2:b8:40:28:ca:ac:79:30:a9:b9:5e:01:86:85:68:62:
         33:87:6d:b7:ff:71:10:d9:23:ee:b6:4b:20:cf:23:4a:69:89:
         15:e9:70:61:b3:bd:98:b5:eb:f7:ad:12:15:ad:6c:04:0b:c2:
         3f:ac:42:19:ed:68:9f:16:7d:f1:ba:91:6e:a7:e1:c9:82:2c:
         de:91:49:89:78:3e:b9:b3:5f:18:b2:bc:5a:d5:44:1f:f1:2f:
         09:3e:0c:91:0f:d6:26:2f:7b:94:9d:a0:d2:28:91:cb:ac:21:
         01:9f:88:ef:85:fe:f9:f7:2b:02:cc:42:21:85:1d:64:ba:0e:
         05:2d:e5:64:37:4f:6c:df:40:58:8f:7a:d8:8c:4c:07:bf:0d:
         0e:5a:0c:e0:11:37:3b:32:45:e3:ba:7d:a5:69:c8:62:e7:51:
         4d:81:e2:5a:4a:85:79:b4:63:80:9a:ad:30:6d:23:4d:e2:1e:
         7b:c1:cf:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:02:19 2025 by rpki-client