Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
File:                     df6ffceb-3664-34d8-8a96-01aafc7628e4.roa (raw, json)
Hash identifier:          1y64f1P7wZUlO2Rnbm838d2ZnH/7uVzuQBllVs3X2U8=
Subject key identifier:   2B:FE:93:A1:72:54:3D:DB:14:AE:1D:7B:8E:55:A4:19:B0:94:EA:F8
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858484EDAD094123A9D90E3E66A80
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa
Signing time:             Tue 24 Dec 2024 02:00:38 +0000
ROA not before:           Tue 24 Dec 2024 02:00:38 +0000
ROA not after:            Mon 24 Mar 2025 01:00:38 +0000
asID:                     7029
IP address blocks:        142.173.0.0/20 maxlen: 20
                          142.173.16.0/20 maxlen: 20
                          142.173.64.0/20 maxlen: 20
                          142.173.80.0/20 maxlen: 20
                          142.173.112.0/20 maxlen: 20
                          142.173.128.0/20 maxlen: 20
                          142.173.144.0/20 maxlen: 20
                          142.173.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:4e:da:d0:94:12:3a:9d:90:e3:e6:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Dec 24 02:00:38 2024 GMT
            Not After : Mar 24 01:00:38 2025 GMT
        Subject: CN=4d96012d-ec60-4d85-9dc3-6f639bc29c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6a:36:38:8a:fa:53:bc:14:39:70:20:83:7f:
                    19:c9:97:8f:2e:c9:e3:cd:35:f8:6d:9f:27:04:e9:
                    a5:db:a5:7f:04:de:d8:ce:b4:fb:29:b7:2d:36:9f:
                    c8:25:74:60:6a:da:31:f4:7e:c7:e6:9a:85:7e:03:
                    bd:cc:3a:0e:5d:1a:fb:53:f2:99:ad:a5:cf:41:82:
                    44:52:78:0c:d0:20:93:82:14:df:f5:29:48:5c:66:
                    1d:59:61:83:56:21:a7:b7:01:99:74:3d:d0:b9:7f:
                    d2:fc:f6:c1:c3:98:45:c9:f0:ac:d0:50:27:c8:4f:
                    6a:87:92:45:87:c6:e5:4a:bb:ea:b4:84:1e:3a:a5:
                    9d:61:5b:59:30:89:09:66:aa:d4:bf:b3:91:85:43:
                    24:f6:04:9c:e9:3b:00:94:9f:f5:93:fd:4f:8b:df:
                    c1:63:d5:5d:17:a2:85:e0:d2:05:68:e5:b7:c4:59:
                    a1:97:75:0f:de:1a:aa:df:38:ec:e3:0e:34:48:8c:
                    29:8f:fd:0e:f9:f1:1d:08:bd:3b:17:44:4d:4a:ca:
                    51:39:43:09:ae:4c:b5:84:54:10:d1:38:c2:ae:e5:
                    df:de:02:05:eb:0f:8f:79:e0:b1:e2:3c:b9:d0:da:
                    2d:62:e0:01:e4:28:a5:22:93:2b:c8:99:5b:4b:a8:
                    29:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:FE:93:A1:72:54:3D:DB:14:AE:1D:7B:8E:55:A4:19:B0:94:EA:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/df6ffceb-3664-34d8-8a96-01aafc7628e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.173.0.0/19
                  142.173.64.0/19
                  142.173.112.0-142.173.159.255
                  142.173.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:16:1c:9a:93:c5:20:d4:80:46:4c:f7:c8:fb:55:46:64:cd:
         e0:19:d9:f6:4a:23:51:ab:7b:e9:81:9b:09:5f:d3:63:a1:ba:
         cb:0e:34:d5:0f:5d:32:82:0b:af:a2:f7:ad:e9:59:d5:d5:67:
         22:e7:6b:83:cc:50:49:1a:d8:c7:aa:fb:bf:66:fc:78:f1:85:
         52:5b:d6:39:0c:a6:b2:b1:6d:ef:89:93:cd:34:39:c0:94:20:
         07:3b:b8:04:1c:fe:17:bf:c6:a8:63:db:d0:01:4c:6f:98:00:
         b3:3c:93:96:51:34:1b:dd:8e:d3:8a:3f:b2:fb:b1:15:01:07:
         1f:10:0a:e7:59:34:da:71:20:28:60:7e:8b:f6:3c:96:12:65:
         6d:e4:71:5c:0f:b7:71:c1:d3:f9:09:84:3e:10:2c:73:3b:7d:
         5d:c5:71:fb:b6:63:05:36:52:2a:f3:d1:c4:7f:b3:9b:d0:fb:
         d6:93:31:8b:25:05:cd:3b:df:bd:43:ac:8d:10:16:89:b7:c5:
         2d:3a:41:d5:44:93:d6:2e:fe:57:a1:d4:bb:02:c4:bd:70:e9:
         8b:d3:7a:bf:32:75:28:1c:e9:66:6c:32:9d:98:59:5c:58:11:
         31:3c:cc:d0:59:40:85:21:31:e6:25:66:1f:28:58:7f:30:a3:
         bc:13:99:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:27 2025 by rpki-client