Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/eb2d8e65-53a6-3e30-9a2a-a9a546283e5a.roa
File:                     eb2d8e65-53a6-3e30-9a2a-a9a546283e5a.roa (raw, json)
Hash identifier:          hwIect1TaM0m20kDzrt17sQzcILfLlsfuavr45NPyhE=
Subject key identifier:   10:39:F2:2B:73:3C:3E:7C:89:C4:77:9A:4D:3C:7E:F5:AB:76:B8:BB
Certificate issuer:       /CN=796bba95-b159-4867-a648-a9ff88973be1
Certificate serial:       010D0C9F43285848318AABAAB70AA31706CF0200
Authority key identifier: B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/eb2d8e65-53a6-3e30-9a2a-a9a546283e5a.roa
Signing time:             Fri 13 Dec 2024 14:00:50 +0000
ROA not before:           Fri 13 Dec 2024 14:00:50 +0000
ROA not after:            Thu 13 Mar 2025 13:00:50 +0000
asID:                     21874
IP address blocks:        205.156.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:31:8a:ab:aa:b7:0a:a3:17:06:cf:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=796bba95-b159-4867-a648-a9ff88973be1
        Validity
            Not Before: Dec 13 14:00:50 2024 GMT
            Not After : Mar 13 13:00:50 2025 GMT
        Subject: CN=0199d51f-1120-468f-8742-61b4acc843ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e8:0d:74:79:a5:d1:e1:c9:ee:6f:83:16:f2:
                    db:6d:67:70:b1:57:bf:78:8e:82:74:80:d8:27:63:
                    2a:51:17:ec:7c:92:75:dc:20:64:41:cf:45:d4:df:
                    cc:a2:44:f1:ed:e0:2f:fa:15:39:e5:aa:13:01:7a:
                    a3:12:92:be:bd:e4:43:ac:7b:d6:90:23:87:5e:71:
                    ca:88:e4:8d:5e:a9:18:47:52:dc:70:0d:46:9d:d9:
                    df:89:df:72:32:ef:b4:78:e3:41:c3:fb:16:6a:63:
                    e8:96:b1:df:52:67:75:2c:26:9a:f6:7f:36:f6:e3:
                    c1:c2:2c:7c:ef:02:a9:7c:96:04:d3:64:04:f3:6a:
                    c6:02:56:ad:e7:a8:ff:17:0e:8d:eb:51:a7:82:18:
                    07:61:8e:6b:da:5c:3c:d6:f9:67:bd:ed:d2:80:08:
                    43:11:f9:f1:0e:40:53:43:a9:bc:17:cd:93:22:bb:
                    f8:3f:7f:7d:5e:c8:a9:4d:47:14:aa:c4:bd:55:d0:
                    c7:95:20:03:07:69:fb:66:a6:42:9a:a7:ae:c1:39:
                    d7:10:d3:ed:b4:95:0c:85:21:4e:69:d7:74:da:6f:
                    72:14:74:ef:60:b0:d0:87:67:1a:d5:85:2f:10:ad:
                    e6:b7:e8:2b:f0:1f:22:d8:ee:5d:40:9b:af:fe:ca:
                    56:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:39:F2:2B:73:3C:3E:7C:89:C4:77:9A:4D:3C:7E:F5:AB:76:B8:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/eb2d8e65-53a6-3e30-9a2a-a9a546283e5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1/796bba95-b159-4867-a648-a9ff88973be1.crl

            X509v3 Authority Key Identifier:
                keyid:B6:EB:25:F4:B7:AB:73:FB:89:E9:A8:1B:DD:22:28:DA:A7:7B:5C:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/796bba95-b159-4867-a648-a9ff88973be1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.156.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:51:c9:0d:42:d6:0a:bc:c5:bb:9a:14:83:5b:92:88:84:46:
         97:4d:bf:3c:69:26:64:59:d8:fb:35:08:87:d6:11:1f:ee:3c:
         07:2e:39:38:ee:df:64:40:04:91:a1:35:6e:2c:f3:11:ef:ba:
         48:76:15:4a:85:9e:9a:36:81:4f:98:fa:af:05:a8:45:c1:4c:
         98:a7:ba:4c:2b:f2:4b:1e:8b:11:e4:e2:95:60:80:4a:f6:c6:
         69:9f:30:a4:26:3c:72:52:7d:59:1f:bc:5b:0b:37:49:7a:49:
         23:a0:b3:b0:4b:aa:9c:b0:76:c3:90:5b:55:b9:32:82:8a:da:
         eb:74:8d:2a:29:54:d2:c1:80:2b:0a:04:3c:e3:97:1b:0e:0c:
         9e:2f:e9:aa:54:e9:f9:60:fe:a6:77:4f:36:ad:e8:5e:9e:9c:
         7e:fd:ac:dc:b7:e2:11:a9:c6:b3:8e:5f:43:9f:29:9e:4a:d6:
         40:28:32:93:99:ee:4e:dd:46:3b:50:38:ff:12:0c:db:12:77:
         d2:f9:a2:47:db:41:c6:53:1b:28:2c:3a:86:88:ee:28:96:2d:
         9e:99:1d:06:7a:b9:f5:9d:da:13:1c:0d:53:e5:67:c5:80:3c:
         78:f0:22:a7:9f:87:47:f7:f0:d8:0f:69:6a:e4:22:0f:c3:d7:
         e4:0f:52:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:00 2025 by rpki-client