Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
File:                     148fac5b-db30-374b-a428-f9d9c8a85496.roa (raw, json)
Hash identifier:          yE2o4TqR36ODpnySr8b62shvgXsf+0rypMrT7ckAtwE=
Subject key identifier:   33:FB:52:5C:26:A2:26:76:F0:A8:F3:0C:C3:CE:DC:26:02:67:B7:6D
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F4328584913C5891724622BFB70327C00
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa
Signing time:             Tue 04 Mar 2025 14:52:12 +0000
ROA not before:           Tue 04 Mar 2025 14:52:12 +0000
ROA not after:            Mon 02 Jun 2025 13:52:12 +0000
asID:                     63023
IP address blocks:        69.42.213.0/24 maxlen: 24
                          186.190.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:13:c5:89:17:24:62:2b:fb:70:32:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Mar  4 14:52:12 2025 GMT
            Not After : Jun  2 13:52:12 2025 GMT
        Subject: CN=3b37c653-7469-42f0-b9c0-1c3f39d093b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:29:9d:d1:91:7f:db:1e:01:79:97:01:d0:8f:
                    1b:59:af:9b:90:a9:61:df:9e:bd:ac:9d:e9:7c:4b:
                    4d:55:64:85:3e:d4:24:ff:81:3b:3e:df:d6:91:47:
                    49:cd:70:83:91:2a:af:ab:80:f9:59:27:a6:59:06:
                    58:93:86:3f:20:31:8b:9c:31:12:db:f5:db:98:3b:
                    14:85:68:b6:5e:42:6a:95:6a:49:59:38:73:43:4d:
                    7d:5d:5a:3b:4c:de:68:ea:e9:41:b6:21:03:a8:c8:
                    d1:99:2a:4f:9d:2a:82:0a:a3:b1:fa:85:f3:44:05:
                    bd:6e:8d:04:52:b7:a6:8d:7e:8f:fc:d3:74:d3:2f:
                    34:9b:5c:02:69:ef:a3:53:14:d3:8c:e0:ca:b5:57:
                    15:00:e5:bb:08:cc:8e:08:d6:d6:c2:77:62:63:3a:
                    b3:9d:f9:3a:87:3b:fd:09:5a:d9:bc:d1:21:ae:75:
                    13:b1:4d:48:fe:63:c7:79:8c:61:70:ab:11:15:b2:
                    11:37:4d:f0:7e:42:a4:0e:10:dd:55:36:93:24:d2:
                    59:38:89:0b:67:77:7b:d7:6c:fc:b1:ba:37:4e:55:
                    24:b0:47:aa:42:24:22:b3:82:a7:49:17:f5:71:79:
                    c2:90:94:bf:d9:ef:b6:25:c1:2b:63:e9:3b:e2:dd:
                    3f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:FB:52:5C:26:A2:26:76:F0:A8:F3:0C:C3:CE:DC:26:02:67:B7:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/148fac5b-db30-374b-a428-f9d9c8a85496.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.42.213.0/24
                  186.190.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:fb:72:ae:6e:5c:5a:25:56:3f:d6:04:b2:15:10:a8:81:07:
         fd:34:c6:85:3a:e9:43:1c:ee:b1:39:4f:7a:f7:af:ff:92:e2:
         e3:e0:1d:cf:1c:07:55:e5:37:6b:58:cb:28:76:fc:a6:c0:52:
         e7:55:66:b9:ec:3f:c0:3c:26:d2:25:fe:ca:98:c5:c9:bb:66:
         59:97:f7:6d:71:a7:25:ad:f4:33:f7:fb:39:a3:7d:cc:98:0a:
         cb:54:c0:84:22:3d:99:7c:42:bb:45:c9:0a:1c:68:de:a4:32:
         e7:5c:0a:8f:97:cb:18:41:c7:01:53:0a:e7:c7:f6:6e:45:70:
         6c:3f:da:ec:2c:a2:58:d2:fe:4e:4c:a2:dd:3f:66:6f:9c:23:
         29:22:a2:d6:07:9b:ae:0e:f2:ef:67:a3:b1:ac:75:5f:fe:e0:
         ab:01:b4:04:ce:aa:fb:54:9b:ae:65:8e:c7:2e:d2:fa:f0:fe:
         35:e8:4f:31:8f:d4:1a:b6:7d:39:9f:fa:4a:cb:63:dc:15:2c:
         ba:98:c0:fe:b0:13:14:b5:49:35:2c:ed:ee:57:e3:c2:ca:92:
         97:8c:8a:e9:89:9f:eb:a5:25:36:52:37:21:2d:02:4f:da:5f:
         db:0f:76:a4:01:57:04:7c:f2:58:77:28:b2:52:08:0a:ee:c8:
         ee:fe:7d:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:01:18 2025 by rpki-client