Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
File:                     02b155af-a5ea-3439-823e-69a59b8f01a8.roa (raw, json)
Hash identifier:          VWpJBVrinbJRDMp6Ohg3jp5RETERWDnfUB3MtS19waI=
Subject key identifier:   AC:C8:05:9A:A5:3A:50:1C:2F:44:27:AB:4D:45:CC:E6:3D:1D:0C:9D
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F43285848A400C309031B5B94F0050900
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        198.204.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:c3:09:03:1b:5b:94:f0:05:09:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=3fb4167d-0117-4030-a4ad-b792fee8b439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:68:64:23:4e:9a:e8:81:bb:ae:c9:ba:3e:26:
                    e6:4b:7d:f1:f2:04:00:bc:d4:2a:db:e1:bb:9a:3e:
                    7b:e7:dc:2c:00:2b:33:e5:03:08:cb:29:20:69:6f:
                    87:f4:34:7e:6c:32:cc:57:af:22:ef:cd:07:42:55:
                    75:fa:27:3c:57:d4:2d:c5:67:8b:5c:de:03:0f:1b:
                    8c:7f:d4:4a:3b:9c:e8:ff:c6:5b:3c:a6:ee:8f:a2:
                    9a:26:a3:ca:06:ce:25:a6:ac:91:24:af:54:d4:26:
                    e6:b4:1a:4f:f2:c2:02:ac:51:19:c8:a9:af:77:bf:
                    4e:0c:44:00:35:32:26:f4:8a:e1:64:72:53:45:3f:
                    db:08:7b:6d:be:5d:72:19:90:7a:5c:ca:2a:fe:2f:
                    b1:10:f9:79:c4:41:9e:c7:47:f8:ec:66:5c:21:0b:
                    48:18:73:a0:f9:38:fb:ee:2d:e5:53:ba:34:d1:99:
                    8c:55:75:5b:db:e9:ea:ca:68:50:2b:61:5d:ec:fc:
                    bc:ce:15:8b:bf:48:55:ca:f4:0b:86:43:1f:f9:dd:
                    da:1d:79:50:4a:ba:7a:77:ef:bf:a0:05:b3:91:38:
                    5c:55:02:02:7a:95:2b:91:dc:9e:ec:1d:33:9d:9e:
                    16:1b:b5:a0:ed:94:29:66:f7:62:3b:01:84:cc:43:
                    08:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C8:05:9A:A5:3A:50:1C:2F:44:27:AB:4D:45:CC:E6:3D:1D:0C:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/02b155af-a5ea-3439-823e-69a59b8f01a8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:13:75:17:9e:70:87:0b:5f:6a:46:73:09:83:d3:42:eb:41:
         8f:d9:80:03:53:5d:fc:6d:c9:b9:56:d1:7e:63:48:4b:1c:9a:
         35:4d:82:6e:83:2d:a0:5f:c1:df:e0:d2:03:c8:d6:67:e9:5a:
         ce:03:72:c6:50:cb:ec:d7:9a:28:52:a5:b0:da:6e:c5:a5:25:
         0e:ee:de:86:04:df:13:4b:dd:0d:c2:0d:d4:e3:8d:e5:ae:11:
         ea:ee:d7:70:0a:45:c5:d7:67:01:9c:07:2a:a7:41:b5:f8:f1:
         83:b2:04:eb:8f:57:03:83:a0:d2:36:25:a9:75:2b:5c:73:78:
         85:76:f1:1f:0e:8e:dd:f5:0a:64:84:d9:af:6a:95:4a:67:3e:
         9d:c6:f4:6d:d5:06:80:97:7e:4e:fa:b7:65:aa:34:2a:3e:6c:
         15:50:88:08:d4:97:d0:50:42:12:d6:0e:ea:dc:eb:9d:d2:a7:
         ed:6a:79:94:51:32:5a:0b:b6:b4:58:d8:c5:b7:15:37:f6:d3:
         c7:98:43:ae:c1:4e:3b:b1:26:0b:62:8d:34:75:6c:21:66:32:
         b8:a1:b0:e9:f8:80:7a:30:dc:63:98:c6:c9:39:97:ef:16:2f:
         e0:e4:49:95:68:e3:eb:a9:67:44:0f:0d:8a:a1:d8:35:18:1c:
         8c:d1:c8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:41 2025 by rpki-client