Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa
File:                     97fde43b-16f3-3046-9287-5bb8d7603efa.roa (raw, json)
Hash identifier:          1/ia4SDgX+UxqRMHnGl1GHe+0rcw1/gZzJa/AcXx/oM=
Subject key identifier:   17:EA:CE:5C:56:DD:E9:E4:CD:5C:C4:47:A3:28:3C:BC:55:43:33:19
Certificate issuer:       /CN=faf569a5-954e-480e-9904-712ec61652b7
Certificate serial:       010D0C9F432858488AE0A56C547CFB440B9EB260
Authority key identifier: 06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     202013
IP address blocks:        198.161.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a5:6c:54:7c:fb:44:0b:9e:b2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf569a5-954e-480e-9904-712ec61652b7
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=dbc11745-d5b9-4159-9823-cd9c45d69d6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:7c:13:f5:19:ba:17:6b:38:b3:8c:6f:5f:4b:
                    32:78:75:23:44:8d:f4:08:f9:86:79:27:9d:d0:72:
                    31:e8:3c:68:da:21:ca:54:d9:28:ca:67:78:31:fd:
                    83:9e:5a:e6:5d:f7:24:ca:fb:6f:37:9a:d8:27:76:
                    5d:aa:75:65:96:12:77:6f:8d:03:95:f3:f5:60:3a:
                    71:f0:4f:93:26:00:c3:9a:82:5f:47:54:66:59:52:
                    d3:7b:3d:16:66:24:04:1d:02:17:14:c9:6a:54:5d:
                    ac:e8:35:14:5d:4e:8c:5e:c5:93:f5:9a:61:ac:a9:
                    be:8b:c1:37:59:12:c8:46:2b:16:54:11:e3:b4:67:
                    20:f8:ae:26:e6:f4:e7:66:a8:09:77:a3:a9:c0:0a:
                    c5:20:0d:dd:a0:e5:20:88:0f:f1:e6:20:36:34:07:
                    2e:96:35:d3:89:39:d1:d0:7f:65:03:11:8c:35:d7:
                    08:7a:26:48:49:60:d4:f8:b2:3f:e3:51:1e:eb:35:
                    9d:55:6c:14:f5:14:ee:22:d1:d4:ef:0f:80:6f:19:
                    87:fe:d8:8b:57:58:b5:af:67:1c:88:43:e9:a0:28:
                    93:d3:ad:3a:58:2e:6b:87:12:2a:3c:c3:93:0f:34:
                    43:c0:dc:27:87:ea:6e:5d:34:24:88:53:6c:f8:ad:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EA:CE:5C:56:DD:E9:E4:CD:5C:C4:47:A3:28:3C:BC:55:43:33:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/97fde43b-16f3-3046-9287-5bb8d7603efa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7/faf569a5-954e-480e-9904-712ec61652b7.crl

            X509v3 Authority Key Identifier:
                keyid:06:32:5E:FB:8B:27:C3:34:23:E2:86:F6:6C:02:1A:A9:B4:81:29:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/faf569a5-954e-480e-9904-712ec61652b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.161.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:02:29:07:08:b0:04:c0:7d:38:7b:9d:8f:5d:e5:38:51:68:
         79:78:c4:05:e5:ed:5c:57:cf:7b:44:3b:49:72:af:7b:6c:d7:
         3e:b1:28:c2:c8:cb:df:0d:f3:a1:f6:be:ac:a8:33:0d:09:e3:
         e5:3f:18:ce:93:de:a1:b2:6c:b4:bf:19:39:cb:42:63:c4:8a:
         17:85:fa:23:e5:20:2e:cd:4c:03:b7:05:ca:ad:9c:ea:a8:70:
         c0:3d:15:d1:c7:43:43:f6:70:9b:6b:25:1c:91:53:93:ca:01:
         73:c1:6c:b4:00:1d:19:b3:cd:3b:ca:ae:e1:bf:0b:94:78:81:
         d2:fb:f5:e1:4d:43:f6:b7:a2:89:59:45:5d:13:b1:47:59:83:
         eb:ef:77:9d:b8:2b:4b:c3:ea:e3:30:d5:b7:7f:50:e5:8f:d7:
         48:98:ad:0c:31:b2:3c:69:58:54:bf:bc:5c:9c:79:65:27:0f:
         e3:ae:e9:e4:14:a9:e8:5a:71:06:a5:c0:80:90:d6:3d:96:b9:
         48:94:7f:5d:ce:d7:09:7f:cb:c8:90:2a:40:b9:7f:6b:ef:78:
         8d:44:8a:82:64:5a:ef:a1:1f:b7:23:28:d7:2e:7f:ac:c5:64:
         93:40:f4:a9:60:5f:84:c2:39:4f:f4:a1:f0:9e:31:85:7b:ad:
         0f:49:95:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:17:12 2025 by rpki-client