Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46f7375-ecbc-3c49-bbb8-15862f575682.roa
File:                     d46f7375-ecbc-3c49-bbb8-15862f575682.roa (raw, json)
Hash identifier:          RlPud4u6Xf5BJwuvioqcf4s19nEm2Skg1KAH1OSqJGY=
Subject key identifier:   61:EC:E7:91:BA:2E:5A:B3:5D:E5:14:B8:02:B7:50:E1:BC:EE:36:61
Certificate issuer:       /CN=18800324-5150-4981-a144-bdb80e6bcb7c
Certificate serial:       010D0C9F43285848CDE10B5DC3E8FA7A9A5DB780
Authority key identifier: 11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46f7375-ecbc-3c49-bbb8-15862f575682.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     16509
IP address blocks:        192.177.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0b:5d:c3:e8:fa:7a:9a:5d:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18800324-5150-4981-a144-bdb80e6bcb7c
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=fe835723-6575-4719-90df-2e11ae8232a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5c:45:de:d8:35:63:61:ee:40:3e:b4:68:a5:
                    fa:60:29:72:22:cf:75:44:a9:27:80:b7:82:91:19:
                    ef:a8:06:0a:ac:47:a8:0e:6a:11:6e:86:53:80:53:
                    58:c9:66:18:9a:dd:64:3e:5f:de:d7:4e:5c:92:14:
                    f1:78:8e:ee:a8:b3:4f:c9:90:79:ff:c3:ae:3f:1b:
                    2a:8b:c6:b6:f5:f7:f2:f9:5a:ab:f8:86:67:32:99:
                    bd:21:4f:f9:32:3e:11:9c:a5:df:86:15:90:35:78:
                    d9:9f:94:99:74:da:1e:59:79:e3:fa:86:46:e0:7b:
                    ad:7e:fa:7b:a0:08:2f:a5:61:ca:9b:e0:aa:8e:36:
                    d3:66:d9:8c:b5:a3:57:e8:fe:a8:39:a7:f4:08:34:
                    9d:3d:5e:68:7a:72:db:c5:b4:04:4b:1c:3f:7b:79:
                    c1:66:d3:32:b5:39:22:ff:50:de:29:bb:58:7f:a2:
                    a7:28:9a:d6:d1:15:05:08:70:3c:12:a2:d8:f2:3c:
                    9a:92:e3:6e:14:1c:69:f7:96:1b:16:b3:05:0d:55:
                    f2:25:5b:42:87:cc:50:1d:e1:0a:fa:b2:8f:77:10:
                    f4:03:c0:49:c5:94:d0:c7:d7:46:60:59:48:d9:7c:
                    d1:8c:c4:7d:79:50:0b:d5:ed:49:23:7c:ab:00:1b:
                    f0:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EC:E7:91:BA:2E:5A:B3:5D:E5:14:B8:02:B7:50:E1:BC:EE:36:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/d46f7375-ecbc-3c49-bbb8-15862f575682.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c/18800324-5150-4981-a144-bdb80e6bcb7c.crl

            X509v3 Authority Key Identifier:
                keyid:11:6B:47:33:36:D9:E8:9D:B5:96:1B:5E:EF:A3:40:22:AE:DE:69:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/18800324-5150-4981-a144-bdb80e6bcb7c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.177.66.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:46:84:67:3a:b7:45:57:c6:73:32:69:5b:01:16:1b:d1:6c:
         0b:a4:25:2e:a5:3c:13:fa:a8:eb:28:21:64:56:8d:17:b3:dc:
         eb:a9:c1:0f:f4:13:83:2a:1f:85:5d:3d:72:22:1a:9e:bb:18:
         6d:b6:43:10:74:14:14:c8:2e:e5:8e:ca:a9:69:56:31:8e:dc:
         13:fe:c3:69:9e:9f:d4:da:b3:b5:03:10:ad:58:1a:43:42:b1:
         5f:5e:bf:26:11:2d:0a:06:0c:66:ae:88:01:8e:b4:91:9e:45:
         5c:b2:42:d6:72:e2:ac:62:60:51:98:f1:ab:5c:3a:7c:60:56:
         f3:14:1e:4d:7d:98:5c:04:fb:5f:34:8b:f0:ad:4a:9a:d0:58:
         aa:0f:83:af:b2:a9:f1:d2:d8:94:ae:92:61:d8:16:7d:49:e2:
         bc:1d:17:20:6a:28:22:ca:44:86:40:cb:b7:20:aa:e9:7a:45:
         95:88:81:ab:96:78:0e:79:17:8f:1a:0f:38:e3:ae:01:db:b2:
         24:4b:59:6e:08:89:8d:a4:a0:af:7e:20:e3:b9:e2:56:32:fe:
         11:d0:d9:c0:f7:a7:30:87:eb:a4:5b:e8:d7:7c:fd:8b:c8:c6:
         9e:5a:9a:6c:1c:f5:32:76:c5:bf:ad:66:77:64:be:ae:70:aa:
         8b:9c:94:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:42:21 2025 by rpki-client