Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
File:                     5c65a2db-0da6-34ad-a0f3-1e6760344465.roa (raw, json)
Hash identifier:          4t3l1gRPMHMLXz2v1iQYA5PUqRU3a4GHoHa3wVpaLMI=
Subject key identifier:   1C:F0:05:C3:50:2B:54:4B:29:AC:EE:F8:21:7F:9B:72:C8:C5:DA:A2
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285848424AC7CF8B63BB58696BE780
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     7922
IP address blocks:        202.165.72.0/21 maxlen: 24
                          202.182.64.0/20 maxlen: 24
                          216.185.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:c7:cf:8b:63:bb:58:69:6b:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2f2ff135-a49f-4248-b9f9-de8e23c944a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:e4:1f:d2:82:72:0f:fe:cb:43:c8:71:3c:e2:
                    51:4a:a4:9b:07:63:1b:31:2f:a3:25:cd:f0:1e:2d:
                    60:03:7a:5b:97:69:73:3e:88:34:e2:55:fe:b1:32:
                    9b:d2:b3:a0:83:97:f8:6a:51:b8:29:05:33:a6:c1:
                    43:09:c3:bc:ba:bf:93:5c:32:78:92:ed:1c:0d:7c:
                    bf:cf:ad:30:fe:6d:c0:3b:f9:9a:f6:aa:65:e9:a0:
                    fd:36:b1:3c:79:2b:85:bd:ae:14:60:21:79:62:0f:
                    8d:db:aa:f3:48:a8:cd:ef:db:e4:38:5d:12:06:5a:
                    b7:ea:09:d6:77:3e:7c:cc:1a:08:27:f6:df:3f:81:
                    d5:d5:c5:32:d1:6b:11:e8:e0:07:4f:72:c6:26:56:
                    45:74:ef:24:06:d9:1a:a5:40:97:c6:00:04:13:ff:
                    e9:86:87:3d:aa:1f:4e:e9:68:b4:ed:a4:01:2d:4a:
                    24:79:07:b8:24:04:7c:77:36:b1:80:3f:b1:7b:c5:
                    3d:36:eb:2a:ad:ae:7f:a1:69:38:99:e8:cb:8f:1c:
                    78:3a:b7:4a:eb:a3:94:a7:25:06:24:a0:14:3e:d6:
                    e3:88:92:70:b2:14:39:b3:bf:87:39:ee:f5:ac:08:
                    91:0a:4c:f9:d9:7a:a7:f0:f1:a8:c6:b3:e8:3d:d3:
                    27:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:F0:05:C3:50:2B:54:4B:29:AC:EE:F8:21:7F:9B:72:C8:C5:DA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c65a2db-0da6-34ad-a0f3-1e6760344465.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.72.0/21
                  202.182.64.0/20
                  216.185.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:59:9b:10:b4:b4:3f:6f:b9:39:ce:0d:2d:d7:99:20:83:ed:
         95:8d:39:8b:05:c7:89:81:91:35:d0:6f:a5:5e:c9:fd:ff:3d:
         52:7d:06:d4:30:ed:96:fa:9f:95:f4:45:8c:b9:72:90:e0:6e:
         f6:2d:bd:64:7c:7d:d2:37:89:d5:71:f6:fc:28:3f:b6:c5:15:
         e0:3c:9c:0c:c3:c1:d8:6b:41:89:3b:cd:e6:fa:63:e1:83:ff:
         1c:f7:3e:ae:dc:46:7b:e8:a1:6a:0f:42:23:7d:78:d8:a6:43:
         71:01:e3:56:01:a8:94:04:f1:45:ee:7b:21:43:27:77:2a:61:
         ae:7f:7d:2d:bd:39:3d:3e:7c:90:c2:8a:ac:01:ac:d0:a0:cf:
         04:a2:9a:3c:99:54:ce:22:ae:ae:b1:c8:fa:35:11:f1:c5:6a:
         bd:a1:e6:de:a9:0f:f3:5f:d3:fa:6e:30:26:5d:6b:c5:b9:e8:
         f8:25:1e:50:98:84:d9:1b:f9:94:87:18:fe:a5:c8:79:bb:dc:
         cf:c6:14:f1:7d:e2:37:28:f8:b5:d7:01:4d:da:d7:44:05:9c:
         9b:37:f0:ad:ac:87:ca:76:ef:7a:7f:c6:bf:9d:9a:79:c5:05:
         17:50:57:20:9d:f0:cc:64:83:62:8e:6f:9f:ad:20:42:6c:45:
         e0:17:68:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:47:57 2025 by rpki-client