Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa
File:                     200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa (raw, json)
Hash identifier:          ivAlGy7BZQcVJi+DKVHDjHASq0daHz92xTNLLwtpLQ8=
Subject key identifier:   F1:54:92:B2:4F:14:E7:82:CE:E8:6D:67:3A:4C:E1:9E:51:A8:55:82
Certificate issuer:       /CN=bca82dd9-eea7-4756-b420-960dfbe436c3
Certificate serial:       010D0C9F43285848FD56C0E767F45FA788835B00
Authority key identifier: CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     53508
IP address blocks:        142.79.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c0:e7:67:f4:5f:a7:88:83:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca82dd9-eea7-4756-b420-960dfbe436c3
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b27aa86f-72e0-4b13-a93c-02690fca3b83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:b0:9a:7b:86:95:34:ad:9f:f1:78:a8:23:
                    26:a8:8a:54:df:3f:2d:8c:71:0c:d0:7c:b1:49:56:
                    b6:8b:be:d5:59:12:dd:3c:89:fc:08:e1:57:0f:16:
                    cb:16:bd:f4:7b:de:96:c7:b4:df:25:81:c2:f4:cd:
                    6f:6a:62:b9:74:b9:20:05:6f:97:f3:7a:5f:8a:83:
                    d8:d9:f6:2c:00:b0:61:86:be:ab:68:a2:56:1d:13:
                    7c:0b:2f:75:d8:7d:de:d6:1c:19:5d:f4:20:61:76:
                    3a:cf:18:fb:06:fe:dd:eb:00:d6:2a:6d:4b:b8:9a:
                    f9:c3:4e:5f:02:ca:ca:9f:3e:64:2b:f9:ec:d8:36:
                    4e:b8:7a:ef:9d:26:bc:25:19:61:a9:dc:57:8b:a1:
                    82:9a:66:11:fe:69:b4:15:67:ac:42:0a:65:af:de:
                    16:21:88:8f:58:09:22:da:7d:16:31:32:e3:cf:90:
                    3b:4f:c8:c9:c8:9e:e8:a7:37:1c:9a:ac:f9:c3:60:
                    24:41:83:3c:99:70:39:3d:be:9a:ec:c2:7c:8b:eb:
                    a1:f4:21:cc:d4:2c:19:3f:5e:40:ce:67:24:b7:43:
                    7a:68:ee:b6:20:96:35:a3:a6:66:84:04:25:07:8b:
                    e3:ae:d7:a1:14:d7:14:46:b5:25:57:a5:0b:7d:38:
                    b2:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:54:92:B2:4F:14:E7:82:CE:E8:6D:67:3A:4C:E1:9E:51:A8:55:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/200010fd-7d91-36cc-a113-d4cd0bd24b7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3/bca82dd9-eea7-4756-b420-960dfbe436c3.crl

            X509v3 Authority Key Identifier:
                keyid:CA:B8:A6:1E:76:34:C1:30:80:89:AA:D8:58:61:EA:38:BA:1D:40:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/bca82dd9-eea7-4756-b420-960dfbe436c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.79.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:1c:18:c1:f2:92:97:b0:cc:9f:9c:9b:69:0f:a6:62:99:3f:
         a1:d3:6b:d0:26:bf:df:bf:7a:6a:99:f8:c5:c5:d2:51:df:fe:
         09:46:37:ec:a7:f6:06:86:b9:ef:1f:ca:94:1c:06:8f:58:ec:
         31:49:f2:11:92:62:71:a0:3b:1f:0a:92:22:ca:ef:6b:5b:b1:
         43:13:35:7d:cf:31:ec:ce:e0:dd:83:70:37:ba:59:e3:16:2b:
         ca:24:07:0a:20:a1:87:37:ae:df:32:98:5a:0c:b1:28:91:2a:
         ca:6f:74:0f:9a:29:e2:c2:68:61:84:b9:39:39:5a:f5:3d:b2:
         fd:7a:d4:40:f4:df:af:3a:7f:d1:94:ca:f8:b4:d2:b5:ff:f9:
         fa:8b:2e:f8:61:bd:3f:cb:7e:38:7e:38:7b:fa:18:d9:92:af:
         91:92:94:e6:fd:7a:11:8b:22:f4:d4:8b:64:d4:74:88:1d:ac:
         eb:08:a6:8b:19:31:95:09:06:a5:13:02:9a:f0:c2:d4:05:34:
         29:53:58:bf:99:08:30:96:2f:ed:b7:73:24:51:ae:6f:a6:db:
         81:96:08:20:ce:d0:1b:2f:c1:f7:dc:0a:7d:7d:35:bf:1d:a6:
         17:11:cd:dd:36:19:79:c0:64:a8:f7:83:8a:7c:a9:93:61:79:
         99:3d:74:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:52 2025 by rpki-client