Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
File:                     8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa (raw, json)
Hash identifier:          +2xroQdJbgF6PqgtuRC/PjtBRu7P56AUgeAZ8tYIE4s=
Subject key identifier:   CC:B0:AA:78:49:21:01:B9:83:B8:42:F4:66:D9:DF:7C:23:70:B7:FD
Certificate issuer:       /CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
Certificate serial:       010D0C9F43285848EF615A402AE47C0F48C0EB00
Authority key identifier: 88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     397833
IP address blocks:        185.77.142.0/24 maxlen: 24
                          192.95.120.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:5a:40:2a:e4:7c:0f:48:c0:eb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cc943d8-e468-4794-9399-2ba32cf0dad3
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=dc1a546e-bcb8-4ab8-af2d-3a15f8a9a8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:65:da:eb:26:ff:45:a7:00:90:de:a6:a0:f4:
                    a5:12:06:ef:75:14:98:23:9a:8b:6c:22:19:d5:0a:
                    6f:8e:62:62:cb:38:03:d6:fd:23:e2:ba:7f:2c:db:
                    4b:76:06:37:b8:0b:c3:91:92:6e:c0:5b:8c:68:04:
                    8f:18:30:c5:2f:3f:18:dc:95:96:53:aa:a4:b6:d4:
                    4b:53:d9:13:54:c8:72:7a:ad:bf:8a:81:84:7f:e8:
                    7d:9f:3b:75:8c:5f:57:16:13:68:23:c2:dc:39:0d:
                    4a:c5:8b:4a:0c:9e:61:7a:96:1c:72:00:a5:f5:45:
                    25:bc:d7:df:09:71:fc:9d:b5:e9:af:2b:9e:4c:58:
                    be:e0:6b:95:5f:b1:a9:c3:f0:28:66:38:6e:d9:66:
                    53:9f:53:fb:80:b3:81:17:3f:d5:1c:59:ce:4f:09:
                    ad:50:a1:4a:b7:f1:b4:bf:2e:4d:68:5c:2c:de:eb:
                    61:e1:6e:23:ee:4f:9f:48:74:af:02:99:a4:c1:33:
                    f9:3b:91:da:76:ff:f1:76:cd:32:02:24:47:45:a8:
                    53:51:8a:0a:fd:a5:9b:d1:b6:87:9f:45:e8:a3:de:
                    09:bf:b1:97:82:cb:f2:51:4a:31:b2:34:6b:3e:08:
                    db:89:7e:bd:80:43:46:be:f0:81:b1:ac:5f:61:9d:
                    60:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B0:AA:78:49:21:01:B9:83:B8:42:F4:66:D9:DF:7C:23:70:B7:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/8ff51c7e-6d24-3e09-b5e2-2e7323efd1ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3/9cc943d8-e468-4794-9399-2ba32cf0dad3.crl

            X509v3 Authority Key Identifier:
                keyid:88:6B:99:8B:24:2C:6A:9F:82:E4:47:37:A2:2A:06:D3:D5:4D:4F:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9cc943d8-e468-4794-9399-2ba32cf0dad3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.77.142.0/24
                  192.95.120.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:41:d4:ec:de:b5:ac:e0:78:4b:4d:b0:46:4d:01:6e:d4:1c:
         d4:65:b4:ad:77:7c:61:dc:cc:7d:46:37:e3:9e:4c:74:bd:5b:
         e7:f5:4b:19:7a:b3:38:4e:2e:ae:8e:4a:26:ed:42:ac:16:80:
         b4:45:a3:c0:58:07:c2:7a:44:54:25:c9:63:05:a7:04:a3:40:
         3f:fe:e0:6e:a0:5c:3e:1d:11:42:cb:1b:f2:73:83:57:e5:8f:
         e6:fe:3a:2e:c9:1b:0c:c6:ab:d4:18:8a:29:1d:cc:f5:09:18:
         f9:d7:90:4b:27:00:af:fb:6c:17:a7:d0:d9:a2:fd:63:f1:64:
         a7:3a:66:51:d6:83:8a:2e:73:3d:09:85:d9:2b:c5:f1:7c:ee:
         8a:18:f7:b4:56:ac:df:62:96:b1:d8:20:c7:ca:1f:40:46:8c:
         87:11:ea:f1:1e:fd:ab:79:8a:74:94:12:b6:9a:e6:47:41:94:
         84:44:0a:2a:b6:33:ba:9f:d8:48:f5:50:33:29:59:7a:6e:80:
         5a:a9:9b:78:8d:3c:f8:48:24:70:a3:b0:6c:68:24:92:01:71:
         b0:ea:39:eb:b0:a8:07:af:de:39:89:7e:28:ee:6c:f0:25:92:
         dd:ff:9a:02:97:7a:b4:8b:87:dc:e3:2e:45:ca:a8:ce:ac:80:
         ca:3b:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:12 2025 by rpki-client