Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
File:                     c0d92aec-a852-3811-9169-c6a18fe58454.roa (raw, json)
Hash identifier:          GILK6mI01myylJVqXCMxz8S21X5egD3/3nLyLxc+sjQ=
Subject key identifier:   2B:16:94:E2:3F:B7:B6:9D:76:F1:7E:76:30:BC:19:2E:CB:83:BA:CF
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F43285848AAFB65B61A12D471BD512600
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
Signing time:             Sun 26 Jan 2025 02:00:38 +0000
ROA not before:           Sun 26 Jan 2025 02:00:38 +0000
ROA not after:            Sat 26 Apr 2025 01:00:38 +0000
asID:                     14434
IP address blocks:        66.248.160.0/19 maxlen: 24
                          98.142.160.0/20 maxlen: 24
                          172.84.192.0/18 maxlen: 24
                          198.36.28.0/22 maxlen: 24
                          209.221.192.0/19 maxlen: 24
                          2606:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:aa:fb:65:b6:1a:12:d4:71:bd:51:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Jan 26 02:00:38 2025 GMT
            Not After : Apr 26 01:00:38 2025 GMT
        Subject: CN=c81dcc2b-f72e-473e-85ff-0d0ccaf8ae57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:50:05:e5:2e:f8:31:4d:a4:3c:56:9c:2a:87:
                    ba:ac:4f:38:38:c9:64:57:90:de:9e:a6:80:78:e5:
                    85:33:16:dd:1f:46:f5:23:f9:5f:b9:15:4b:05:ff:
                    63:71:fc:2a:f6:49:ee:65:bc:d4:b2:09:08:30:08:
                    ca:45:fc:a6:68:e6:b5:fe:8a:52:f8:2d:bc:52:af:
                    d7:77:8c:c4:3a:9d:8c:bc:48:2f:63:dc:28:66:a1:
                    20:19:94:50:ca:72:48:b4:55:01:a9:1f:c2:65:a6:
                    53:9d:bd:82:f7:2c:0b:27:55:a8:45:4c:0b:1a:38:
                    10:ae:83:b4:fa:d4:9a:02:77:d7:f6:61:99:3b:36:
                    d3:13:cf:e8:e8:cb:6d:f1:02:32:f0:68:c8:88:1b:
                    8d:00:56:88:25:e1:67:47:53:79:5c:55:0a:12:8b:
                    eb:14:4f:48:d6:18:af:cb:48:6f:55:a1:cf:ea:45:
                    83:9a:58:c0:7c:f2:63:7b:89:ce:36:16:0f:11:61:
                    19:87:73:ec:83:3f:09:ac:8a:e6:b7:fd:81:3a:0d:
                    05:e8:a3:8b:d4:87:77:cf:86:d4:e1:3c:f8:8d:62:
                    11:57:32:69:2e:25:e9:5b:c3:a9:10:7d:7c:ae:23:
                    cb:f7:16:98:59:53:95:47:6e:d4:ee:d4:dd:39:40:
                    a7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:16:94:E2:3F:B7:B6:9D:76:F1:7E:76:30:BC:19:2E:CB:83:BA:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.160.0/19
                  98.142.160.0/20
                  172.84.192.0/18
                  198.36.28.0/22
                  209.221.192.0/19
                IPv6:
                  2606:5a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:2d:f0:27:09:8d:ab:80:a4:07:33:d9:12:97:cd:a6:42:40:
         ff:91:f4:2e:2d:6e:b1:f6:48:a4:ca:12:7d:aa:98:1f:5b:41:
         11:2d:40:3a:f5:b8:0b:c9:52:37:c7:75:d4:c7:5d:8a:d6:a3:
         b2:a5:3f:38:51:b3:ff:25:07:4f:71:6e:05:5a:3f:04:5e:6c:
         fa:ec:f0:01:22:a2:59:35:02:bf:36:0b:a3:2a:fd:40:ba:c1:
         de:e8:01:90:37:5e:14:39:84:54:ce:52:5b:b8:d3:3a:53:b5:
         94:2e:bb:2e:f5:57:c3:c8:60:15:4f:41:47:02:b0:9b:82:07:
         9c:3e:58:ef:47:89:5d:87:46:95:59:37:ab:e6:17:0e:c9:6a:
         a4:ff:92:b0:c1:e2:7a:76:6b:0c:47:c2:26:ad:91:fc:71:df:
         d7:77:30:86:51:33:1b:c9:55:ba:f4:9a:1f:13:74:e5:09:f1:
         f7:7f:72:9c:71:2d:ff:45:e5:66:06:eb:48:e8:eb:f2:c5:34:
         92:12:e0:33:3a:6d:2b:aa:ae:7b:a1:c5:df:2f:8e:c9:0b:3f:
         eb:ed:44:ee:06:da:3c:5c:15:b4:a2:24:e3:8c:d9:90:9c:32:
         ec:34:6a:4c:c1:e0:da:e4:96:59:3f:44:66:5c:0b:ca:8f:ad:
         1e:93:b7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:28:36 2025 by rpki-client