Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/122583aa-b048-3f8d-95e5-1e34994b34b2.roa
File:                     122583aa-b048-3f8d-95e5-1e34994b34b2.roa (raw, json)
Hash identifier:          nIGfj+16P96LqiFLyA47kEpKbMU5ymMn8KsjRRgJ81c=
Subject key identifier:   DB:E0:44:9D:96:3D:90:EC:BA:8D:C0:29:13:77:14:4F:03:42:2F:9D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584858A05ADDAFC89F9539B8AE80
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/122583aa-b048-3f8d-95e5-1e34994b34b2.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     396356
IP address blocks:        216.107.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Feb 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:5a:dd:af:c8:9f:95:39:b8:ae:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=13b1383b-a312-41bd-a809-dca91f33bf1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:41:c1:8e:73:e3:3b:0d:e1:60:5d:2f:f3:43:
                    62:77:4d:b7:a7:3a:8b:0c:86:93:c9:0a:01:8a:b0:
                    8c:66:cc:29:9a:f0:f4:53:2d:eb:3b:a5:22:7b:ab:
                    fd:c3:82:9f:fb:20:b3:bc:bb:38:fe:d1:21:92:89:
                    54:c6:ee:41:7b:af:91:11:aa:03:54:7a:28:b6:08:
                    f0:a3:11:64:7b:e0:84:a2:c8:3d:27:85:cf:d4:40:
                    de:80:01:0a:88:c1:db:de:20:61:85:78:de:66:bd:
                    1c:9c:ed:ac:8c:22:0f:76:46:19:94:43:f6:7b:a2:
                    35:0f:1d:20:b1:58:c5:14:8e:13:92:3e:7a:4a:36:
                    57:8f:36:1a:e1:c5:58:fc:66:c6:97:6f:ea:c7:17:
                    6f:16:3a:a1:9e:53:61:cb:22:8f:b5:bf:fa:f9:6b:
                    0c:e2:3d:d9:16:3e:af:7a:13:32:c9:58:64:6e:9d:
                    bd:7a:a1:a9:5d:4c:f5:90:75:a2:8a:24:61:40:24:
                    2c:f1:fe:ba:16:ae:76:f8:a0:91:ce:e1:8a:3e:70:
                    d7:f3:a2:1b:fd:1e:33:7e:66:93:ab:a0:ee:c2:00:
                    d4:9f:57:fe:e9:4b:15:ec:c0:aa:ff:cf:da:69:5f:
                    1c:4e:2b:13:dd:d6:b3:11:9d:41:e8:13:19:e4:34:
                    e8:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E0:44:9D:96:3D:90:EC:BA:8D:C0:29:13:77:14:4F:03:42:2F:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/122583aa-b048-3f8d-95e5-1e34994b34b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.107.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:ca:a8:94:d0:7b:56:da:b7:6f:7f:eb:9b:0a:4f:68:28:
         f9:31:25:eb:48:d1:d8:ce:50:34:ea:f2:33:bc:d5:02:b0:93:
         4c:ff:30:e5:ae:f7:2b:55:09:62:59:1f:78:fd:dd:c8:b1:5c:
         67:b6:72:e2:20:22:bb:80:80:bb:d3:84:b0:63:af:33:9a:9e:
         20:3a:51:be:4f:90:08:6f:9d:8a:4b:8a:77:9d:9d:11:7e:55:
         0b:c7:27:09:9d:5b:74:d3:a7:0b:4a:de:92:30:39:d3:9e:eb:
         13:c7:a4:ff:a3:ac:8b:a8:07:d2:b4:23:1b:3b:61:d5:d7:3e:
         e2:ce:c9:e5:3b:0f:60:2c:7d:65:60:59:f0:fe:ea:63:8d:17:
         6b:ac:f7:a1:3a:71:8b:51:f7:ee:42:9d:02:af:b5:9c:d9:bf:
         70:73:a0:ae:3f:34:50:19:0e:f7:2d:0a:3e:c2:83:73:65:fb:
         9c:bc:3d:01:4d:fd:c5:15:0a:2d:b3:a2:f1:0b:e1:49:76:f2:
         33:dc:2a:78:1e:e8:0f:49:5a:e0:f5:37:27:3e:83:f6:08:5c:
         d4:68:1f:7b:87:1b:3c:ca:8f:f3:15:e7:27:72:87:c6:ff:ac:
         eb:92:c3:7a:d3:da:f4:f7:91:9e:b4:b8:23:40:0a:85:6e:ee:
         cd:62:c5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 15 20:41:46 2025 by rpki-client