Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e7d5a17f-95a5-3459-a304-cbc252ad349d.roa
File:                     e7d5a17f-95a5-3459-a304-cbc252ad349d.roa (raw, json)
Hash identifier:          wvYiSKy5zlKB2YasfK6BZtLk1nxIBrJnawVyud/aLMY=
Subject key identifier:   C0:06:06:53:9B:14:7D:73:31:C2:E0:F3:CD:5A:E8:31:93:75:26:D5
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584845B21BBE4F146B479819AB00
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e7d5a17f-95a5-3459-a304-cbc252ad349d.roa
Signing time:             Fri 20 Dec 2024 19:16:32 +0000
ROA not before:           Fri 20 Dec 2024 19:16:32 +0000
ROA not after:            Thu 20 Mar 2025 18:16:32 +0000
asID:                     199737
IP address blocks:        216.185.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 07 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:b2:1b:be:4f:14:6b:47:98:19:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Dec 20 19:16:32 2024 GMT
            Not After : Mar 20 18:16:32 2025 GMT
        Subject: CN=ec3cb2d3-d767-4d33-99bf-ae7a1752a5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:44:c9:f7:84:24:e0:08:68:81:a2:eb:8d:ae:
                    77:f4:71:ed:f0:b4:55:11:b6:b9:89:fc:75:e8:85:
                    16:ff:5b:53:fc:c0:62:db:d9:84:b4:a9:28:54:4f:
                    ac:57:c1:26:2c:e9:56:63:f5:ed:20:4c:2c:1d:09:
                    fc:60:24:97:fc:23:2f:f4:62:ce:be:5c:80:1c:65:
                    92:9f:a2:bc:f9:c1:89:08:7a:11:e2:33:fc:a2:d4:
                    6e:cc:bb:a9:2d:29:11:cb:17:36:b3:d4:67:be:a7:
                    72:e6:6c:73:e6:09:87:1b:0a:e3:e7:c5:c5:83:1a:
                    e1:01:ca:1d:36:19:62:45:c8:be:eb:5d:16:4e:ed:
                    4b:f9:46:b9:af:82:15:ec:84:66:61:61:bb:82:cf:
                    fc:df:b5:0b:88:0c:b4:84:58:79:48:5a:ae:cd:3d:
                    2e:c6:f2:a7:5b:96:b3:dc:8f:bd:79:a6:f2:a1:fa:
                    84:02:45:1c:69:09:3b:4c:86:77:97:a9:c5:9d:df:
                    82:34:b3:61:3a:69:77:36:7b:e0:c8:17:65:5e:5f:
                    c1:f8:6b:6e:33:29:ad:00:c7:e5:31:e8:7b:cf:c8:
                    84:d6:81:3b:38:9f:51:96:80:0e:6d:70:03:81:b9:
                    1b:5a:7a:24:00:b9:de:44:a2:bd:22:67:2c:49:c4:
                    8a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:06:06:53:9B:14:7D:73:31:C2:E0:F3:CD:5A:E8:31:93:75:26:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/e7d5a17f-95a5-3459-a304-cbc252ad349d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:f0:c4:61:de:66:28:18:fd:e9:45:ac:60:ea:90:0b:ba:f7:
         12:b3:80:be:46:6d:e6:1b:52:3d:b2:62:88:25:23:39:e5:92:
         66:b0:09:7a:13:16:ae:03:d3:89:8f:90:38:a2:dc:83:76:fe:
         4c:a2:58:69:88:63:ac:f8:bf:22:0d:a3:a0:50:94:8e:6e:1e:
         10:50:20:c3:c9:46:6b:af:f8:a4:0d:9d:69:22:b6:cb:60:63:
         2c:c8:8c:c3:ec:a6:9b:63:0a:d3:66:9c:93:16:14:37:46:f3:
         7f:b8:15:7a:02:9c:73:fe:a1:d0:3c:13:0d:ba:9a:0e:8e:f8:
         bc:a1:07:14:1b:2f:db:f8:70:59:d6:28:e1:fa:c7:01:c3:07:
         14:b0:bf:06:5b:bf:9a:a5:7c:aa:0b:6c:53:8c:71:a9:58:d7:
         59:8e:a3:11:84:b3:f1:f8:d1:70:3c:89:7d:81:d7:2c:fa:d0:
         fc:8a:5e:86:5f:92:66:06:fd:f1:1a:1a:0e:59:c0:55:4d:e2:
         b7:0c:e8:c2:d5:c3:19:de:f3:8f:38:7d:5c:e4:bf:d9:31:a7:
         3f:10:24:51:f8:b0:71:8e:25:96:25:2d:ae:41:aa:a7:7e:44:
         f6:9e:6b:fc:bf:5e:55:44:89:4e:90:af:da:72:60:3e:1a:4f:
         14:96:da:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 16:04:50 2025 by rpki-client