Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa
File:                     50131b63-dc30-3e49-a1ff-f1b54003b87b.roa (raw, json)
Hash identifier:          kp4V5Xnb89Oy30EOcG6lu9iwVVAo3HdaoCgk3GdBo78=
Subject key identifier:   18:3C:2A:B5:6F:3A:C7:93:DD:8F:97:A0:D3:D8:EC:10:C3:34:69:C0
Certificate issuer:       /CN=7f1c958a-c540-4699-8a42-ad625fc751f3
Certificate serial:       010D0C9F43285848222FD4A54C1F7617D2BAC800
Authority key identifier: C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     14618
IP address blocks:        209.160.100.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:d4:a5:4c:1f:76:17:d2:ba:c8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7f1c958a-c540-4699-8a42-ad625fc751f3
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=4f548edb-a6a0-4519-a999-3a640c784951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:df:33:34:3b:d5:ef:57:36:3e:8f:43:6c:4f:
                    93:a9:9a:22:9e:8a:73:82:af:0f:8e:74:61:ee:31:
                    e2:77:1a:05:26:59:95:b6:1c:1e:a5:8d:de:3a:12:
                    b8:c0:d8:6a:fc:17:1c:25:d4:97:ae:ef:48:5c:c8:
                    1b:c7:25:37:61:f9:aa:11:3d:91:47:7e:57:e7:a8:
                    3d:b2:db:74:15:a6:99:4b:f0:7c:58:a4:b5:93:c2:
                    ec:3c:f2:86:9a:cc:26:9d:c7:16:fc:99:0f:2a:f6:
                    58:b8:a9:15:af:66:a5:14:1a:ac:da:7c:65:97:fe:
                    8e:64:c9:b1:0b:0f:d1:86:6a:73:e2:de:bf:c2:4a:
                    ab:80:5a:c1:f3:6a:92:be:ff:55:86:fc:f2:23:97:
                    fd:e0:02:26:65:2f:ec:ca:a0:f1:ad:1e:c0:38:72:
                    43:8c:f8:f1:e3:c6:16:f8:bf:cb:90:a3:c3:8e:9d:
                    c2:c3:72:89:c8:fd:28:0f:07:2e:b7:7e:76:c0:fa:
                    b2:bb:1a:06:f3:cf:c1:6a:b9:86:d1:9a:46:d8:f8:
                    d8:99:6a:fa:cd:ca:f8:10:be:0a:f7:54:be:54:32:
                    e9:84:b5:98:cc:38:57:d3:9b:08:6b:22:3a:2c:b5:
                    aa:02:d1:ae:24:ac:24:f4:70:a9:98:cf:b0:30:99:
                    52:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:3C:2A:B5:6F:3A:C7:93:DD:8F:97:A0:D3:D8:EC:10:C3:34:69:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/50131b63-dc30-3e49-a1ff-f1b54003b87b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3/7f1c958a-c540-4699-8a42-ad625fc751f3.crl

            X509v3 Authority Key Identifier:
                keyid:C4:1C:32:5D:DD:38:0F:57:D8:4B:04:F4:01:B8:9C:61:DA:52:59:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7f1c958a-c540-4699-8a42-ad625fc751f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.160.100.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:73:04:82:ac:9b:e3:ab:96:ed:17:cb:09:f9:00:0a:2e:92:
         92:6f:61:af:63:56:f7:d1:24:08:1a:45:77:52:27:8b:d4:32:
         d2:90:a1:a9:50:b7:e8:1c:77:40:f9:cc:74:04:ea:03:2f:4e:
         2a:7b:45:3f:8e:38:fb:a2:c1:bc:97:8b:4f:64:c6:0c:8d:ed:
         ec:7d:a4:cb:73:5b:d5:17:49:56:5a:e0:ce:2d:87:b7:74:c3:
         4e:0b:fd:1e:5d:cd:46:61:3a:9e:55:f5:8c:cc:91:d6:47:15:
         c6:2f:f5:4b:56:3e:99:8b:7a:64:38:46:ac:cb:6b:61:49:44:
         0a:2b:82:f8:25:0e:6c:bb:d7:aa:de:6b:2c:d8:e9:1e:1f:c2:
         a4:85:68:bb:96:9c:4f:34:1a:d3:84:a0:b5:2d:f4:16:4c:ae:
         3a:f5:3f:ed:e5:b2:f4:88:3b:1c:da:d3:89:07:91:e8:eb:93:
         76:64:ab:94:d2:7a:a1:b2:82:08:27:a1:1a:0d:f1:28:dc:6d:
         c7:88:17:ba:80:44:85:55:46:55:f2:82:0d:a6:06:11:71:36:
         10:d3:a4:59:c9:62:72:6e:6e:d8:67:e6:f7:51:e0:7f:ce:aa:
         7e:2d:5d:62:ca:5a:a2:81:b1:ff:e5:ef:34:95:53:3f:43:ef:
         d8:85:00:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:27 2025 by rpki-client