Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa
File:                     76c7fa7f-97db-3c71-b5ab-27619321b499.roa (raw, json)
Hash identifier:          a2lvQd6uDb4IDatA+4oSpeViCQ26nv+4CAByJpX+5Nc=
Subject key identifier:   B3:BA:B3:C7:FF:40:82:AB:49:3A:FC:99:8F:4E:A9:51:DF:7C:23:8D
Certificate issuer:       /CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
Certificate serial:       010D0C9F43285848B35B6F1C1309482FC1757600
Authority key identifier: 9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa
Signing time:             Wed 29 Jan 2025 02:00:39 +0000
ROA not before:           Wed 29 Jan 2025 02:00:39 +0000
ROA not after:            Tue 29 Apr 2025 01:00:39 +0000
asID:                     19886
IP address blocks:        171.162.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b3:5b:6f:1c:13:09:48:2f:c1:75:76:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0
        Validity
            Not Before: Jan 29 02:00:39 2025 GMT
            Not After : Apr 29 01:00:39 2025 GMT
        Subject: CN=886cfc98-9e97-4785-aa8a-25620991a85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:e0:10:89:6d:79:55:c6:ba:c7:fd:96:ae:
                    a2:18:44:44:bd:07:96:8e:e1:62:b6:6b:ed:4a:0f:
                    b7:43:98:e9:ac:2e:e1:4c:23:41:04:0d:63:4f:5d:
                    6f:f2:9e:76:21:9c:dd:d3:25:62:a8:b1:d7:4f:9a:
                    3c:13:11:08:35:71:bc:00:2e:6c:3b:67:3b:e5:dc:
                    e8:d4:da:00:68:6c:de:1b:d5:8b:a3:2a:62:fd:c2:
                    c0:3b:b4:86:97:62:cb:de:84:6a:60:54:33:74:b5:
                    c7:ec:6e:f7:5c:7b:86:16:26:91:e0:ac:dc:5e:b4:
                    13:33:1b:ce:40:94:47:1e:17:4a:88:f6:fc:07:6e:
                    3c:bc:ca:9d:9e:25:72:b4:ba:86:51:31:ea:88:40:
                    32:4e:32:60:22:6e:41:c5:c2:66:42:eb:27:6e:df:
                    93:5a:ca:07:1a:b8:73:60:9a:0a:3e:9d:ed:51:59:
                    4a:d7:a7:c6:8d:84:c6:d0:91:f7:78:fe:f9:53:bd:
                    47:69:f4:3d:0d:5e:c6:63:1e:38:08:a4:c1:65:d3:
                    36:0f:f3:13:88:90:96:62:5b:49:94:69:c5:fc:ee:
                    e0:3b:90:27:be:bf:a4:ce:09:8f:90:68:a1:cf:cc:
                    f2:e1:76:8e:ae:b2:c8:06:ce:63:8b:c6:83:f5:2c:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BA:B3:C7:FF:40:82:AB:49:3A:FC:99:8F:4E:A9:51:DF:7C:23:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/76c7fa7f-97db-3c71-b5ab-27619321b499.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.crl

            X509v3 Authority Key Identifier:
                keyid:9E:18:65:13:C3:42:32:FD:AF:A4:60:79:8A:B1:74:6F:7A:B0:E0:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d0e9c2ef-4579-4a7d-bf20-8cdfad4ba1a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  171.162.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:1e:44:87:ae:a6:e0:e1:df:02:4a:7e:51:3f:08:9a:a0:3a:
         dd:e8:79:e1:00:9d:95:fc:f8:a5:65:cb:a0:45:e8:66:61:59:
         4e:54:da:78:56:b6:98:35:70:5d:74:2c:9d:bf:37:c1:32:ab:
         8c:2b:1f:31:67:57:4e:dc:a6:76:a9:17:08:4d:f6:39:01:f7:
         c7:9e:ec:59:95:a0:e9:d9:fb:0e:97:2b:c7:7e:a9:8f:e9:e5:
         77:67:33:de:f9:b3:ef:f3:29:a6:2d:d8:7b:ae:23:46:73:44:
         39:5c:56:c1:5e:74:21:2e:9c:6a:6a:ec:f0:af:f9:99:5b:d4:
         5a:55:71:0f:b4:e9:5b:b1:c6:8a:0f:e8:8a:bd:02:a6:e9:0e:
         82:9f:0f:dc:44:5f:c5:8d:b8:77:2c:60:23:0a:15:ba:fe:98:
         86:80:64:14:da:bc:23:24:4a:00:b1:02:6b:41:59:41:bd:70:
         cc:48:c5:61:e4:a4:64:b7:d7:04:41:61:9f:df:3a:96:6f:9d:
         36:e3:7a:86:f6:d4:9e:22:45:86:a2:ac:35:59:ee:ae:e0:c1:
         6f:e1:f1:dc:99:4b:17:64:c6:da:6a:f8:54:96:1a:70:a6:e8:
         4e:f3:de:f7:83:aa:8c:e4:22:ca:d9:b0:8a:34:0d:0a:9c:47:
         1f:05:2f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:51:33 2025 by rpki-client