Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c4e765-4aab-345c-998b-b187007ccb6e.roa
File:                     66c4e765-4aab-345c-998b-b187007ccb6e.roa (raw, json)
Hash identifier:          7Ni3P7O0rq7onErFNVhshJB7KHnslbrAvaVc884AT/0=
Subject key identifier:   A0:3C:72:0A:B1:FA:D4:46:3A:9A:03:9F:B7:C2:E3:CB:0D:C4:A2:C0
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848B1F64D710DE46E618800CA20
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c4e765-4aab-345c-998b-b187007ccb6e.roa
Signing time:             Tue 28 Jan 2025 14:00:52 +0000
ROA not before:           Tue 28 Jan 2025 14:00:52 +0000
ROA not after:            Mon 28 Apr 2025 13:00:52 +0000
asID:                     23338
IP address blocks:        173.245.89.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b1:f6:4d:71:0d:e4:6e:61:88:00:ca:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Jan 28 14:00:52 2025 GMT
            Not After : Apr 28 13:00:52 2025 GMT
        Subject: CN=cf1b6425-8e63-4602-bc70-1b2374844eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:72:32:86:dc:a4:87:0e:74:6f:61:f1:11:
                    95:42:8a:93:d8:24:14:b1:e6:1a:63:c5:90:61:dd:
                    36:53:73:5b:d1:c1:ff:89:78:3e:ed:9f:d6:b4:59:
                    b4:85:0b:37:b6:08:2b:6d:2d:ed:65:3c:2d:36:bd:
                    82:be:ce:ab:01:4c:a8:3c:ae:bc:cc:89:c8:87:d6:
                    d5:52:0f:9e:64:53:a6:07:7a:a5:da:f2:44:9c:82:
                    ba:7c:44:8d:99:42:ff:23:df:4d:86:ec:a2:d8:7a:
                    68:f7:b9:6d:9d:9a:09:3a:80:f3:98:fe:2b:ef:84:
                    62:e0:9f:94:47:4b:40:d6:9a:61:40:72:2d:bb:d4:
                    33:69:cc:9f:27:8c:23:ae:3d:f7:47:91:3b:97:23:
                    70:af:13:ac:79:ec:1a:ba:8d:d8:70:85:99:e5:30:
                    aa:61:66:48:1a:56:64:5a:19:cd:0f:9f:b9:65:3f:
                    29:64:6f:5c:81:d8:35:6a:55:14:99:ad:bf:54:91:
                    36:5e:a4:0c:11:32:91:3c:f8:ea:6e:fc:29:86:66:
                    16:67:8b:b3:0e:e9:1f:38:09:90:ab:af:ca:28:61:
                    64:3b:48:08:02:8b:76:e3:0d:f6:ef:ac:07:58:34:
                    78:0b:43:3e:c0:78:30:9a:ef:d4:34:89:d0:85:c5:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:3C:72:0A:B1:FA:D4:46:3A:9A:03:9F:B7:C2:E3:CB:0D:C4:A2:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/66c4e765-4aab-345c-998b-b187007ccb6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.245.89.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0c:1b:d5:e3:d3:83:6e:93:b8:5d:2d:0e:d0:ab:a0:92:82:
         da:0b:86:5b:43:0f:e0:fb:69:14:39:79:96:1c:10:f8:3f:1a:
         91:e2:4b:54:2a:8b:13:a7:37:d9:2d:46:bb:0e:34:62:f6:75:
         21:03:da:33:fb:be:1d:73:d6:71:c2:5a:27:51:33:f6:65:e9:
         a2:cb:db:b9:86:26:41:54:46:3d:24:3e:3a:e4:60:9a:4a:a8:
         bc:1a:82:55:f8:58:26:2d:ce:45:83:a9:cc:3b:bb:36:fe:c3:
         df:7c:2a:c3:93:bb:24:b1:1c:0f:b5:c9:4d:49:35:bf:c5:10:
         2e:79:87:c9:0a:b3:72:17:fb:f0:39:a5:a0:b6:2e:ce:fc:81:
         29:ba:73:7d:bb:87:bb:7f:08:77:f7:21:9e:0c:03:57:03:7b:
         5d:60:b5:46:db:b0:f1:55:a9:8f:72:94:0a:2c:2b:3e:01:5f:
         ba:ed:09:a6:20:78:20:65:c0:e8:93:4c:80:0e:fd:ec:a4:ad:
         9d:25:8e:33:11:c8:73:88:40:4c:52:7a:01:7b:e2:2f:a0:06:
         38:0e:9f:9f:1d:f5:d4:3b:28:cd:f4:b1:02:c7:ca:f3:ce:58:
         d5:ad:d9:04:12:f0:45:38:e9:d1:90:4f:46:76:b3:04:17:5c:
         11:86:c6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:42:06 2025 by rpki-client