Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa
File:                     60865740-d45e-3574-8042-7cfae34971b4.roa (raw, json)
Hash identifier:          ckO6ELiIvbQBwWkiOlBA7EWMFPKPbO62jetfbvyzjKg=
Subject key identifier:   A7:A6:49:85:5B:D6:29:55:17:75:DF:0E:7A:4D:51:7C:75:66:A4:76
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F432858496FAF12F38C08D55F207B6A80
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     32931
IP address blocks:        104.219.168.0/23 maxlen: 24
                          216.126.56.0/24 maxlen: 24
                          216.126.59.0/24 maxlen: 24
                          2606:1880::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:12:f3:8c:08:d5:5f:20:7b:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=3b19fc07-f552-4977-86d5-61eb65ef2e03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:09:78:df:73:66:d3:83:96:e9:20:76:ff:7a:
                    3f:3b:66:34:db:a2:96:6d:57:4e:8f:32:a1:17:4d:
                    07:5a:83:8f:0a:65:97:15:d5:ba:8c:be:5b:6b:97:
                    df:2b:fe:f3:c1:c0:33:57:ba:61:98:4b:44:ce:39:
                    a7:58:9b:d8:46:44:37:7e:e2:6b:18:10:fe:4b:7e:
                    03:0a:6e:de:88:2d:93:4e:71:51:ce:32:73:51:11:
                    0e:61:66:1c:bd:73:60:f4:d1:22:27:ec:1e:d7:6b:
                    87:37:d8:10:d2:60:ec:0f:8b:5a:43:ba:cd:70:8e:
                    1e:34:67:a3:36:66:67:dc:71:a5:cd:90:5a:e0:6d:
                    57:ae:c7:bb:99:f6:28:e5:15:44:a2:5a:55:01:28:
                    19:7e:40:f5:6c:a8:62:10:66:01:8b:0a:c0:d6:62:
                    13:27:5c:29:f2:c2:bc:c7:f0:70:58:0d:30:94:6c:
                    57:7c:75:14:e6:b0:2d:4a:4d:89:5d:da:aa:fc:d3:
                    23:ec:6b:6f:33:2f:5b:3d:94:86:4a:64:af:05:9b:
                    1f:07:71:97:a2:30:9c:7b:8f:f7:cd:57:72:e4:81:
                    33:c0:60:58:cf:96:78:4f:71:4d:e9:1f:16:db:2b:
                    8a:fd:02:a5:b8:6a:aa:0d:fa:f7:d9:e8:bc:63:c9:
                    26:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:A6:49:85:5B:D6:29:55:17:75:DF:0E:7A:4D:51:7C:75:66:A4:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/60865740-d45e-3574-8042-7cfae34971b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.219.168.0/23
                  216.126.56.0/24
                  216.126.59.0/24
                IPv6:
                  2606:1880::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:dd:0f:db:7c:1f:9d:a6:0e:b8:b4:63:a0:80:06:91:b0:c7:
         40:e0:15:b8:ea:8f:ec:5a:aa:b1:47:50:25:ad:57:d2:1a:04:
         b9:b4:a1:54:c0:0f:02:05:93:31:1c:21:56:71:75:9d:55:12:
         f9:b7:6f:7b:60:0c:df:8a:53:0b:69:30:f8:c3:34:9d:73:9c:
         55:be:8a:1e:cc:4c:23:e1:61:c1:0b:86:be:cd:fd:68:1c:af:
         1f:e5:10:ee:50:2d:b7:3b:8e:dd:f5:09:ca:98:7e:e2:c6:8e:
         5c:bd:e8:ea:e7:48:58:99:cd:a1:77:e5:fe:c9:05:57:c4:a6:
         13:35:92:10:03:64:9a:c7:0d:dd:cb:c6:dc:13:b9:63:aa:8e:
         43:18:ea:90:67:dc:f9:db:30:d6:4f:ae:e3:4d:9e:14:4b:a7:
         ee:1c:50:c3:6d:ab:ec:18:9c:06:22:99:f7:f4:2d:bd:5e:0f:
         6b:69:a7:d7:29:36:73:eb:e1:00:ef:d5:d9:b7:57:72:a7:f1:
         46:98:71:0b:3b:29:db:07:37:69:ee:8b:30:9c:88:03:b3:78:
         73:ad:91:d4:1c:47:d9:f3:af:9a:62:1d:66:47:a3:15:ad:68:
         8d:51:e4:d4:05:d6:e1:02:14:cf:e5:f6:85:76:de:6b:06:2c:
         fb:ad:77:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:51:41 2025 by rpki-client