Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa
File:                     5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa (raw, json)
Hash identifier:          gn7LyGXU0IxgXbmGovkI5yev2styLauJH7noKKCeEkM=
Subject key identifier:   27:A7:74:3B:69:52:46:3B:54:F7:53:DA:54:A9:DF:E5:6B:75:DE:1D
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848FDC928E5C5514346822832A0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa
Signing time:             Mon 24 Feb 2025 17:51:43 +0000
ROA not before:           Mon 24 Feb 2025 17:51:43 +0000
ROA not after:            Sun 25 May 2025 16:51:43 +0000
asID:                     11427
IP address blocks:        216.122.165.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:c9:28:e5:c5:51:43:46:82:28:32:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 24 17:51:43 2025 GMT
            Not After : May 25 16:51:43 2025 GMT
        Subject: CN=153be68a-79ce-4474-9bef-11af683bae00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:0e:df:db:e4:f1:80:c2:5e:7e:ed:5a:3a:eb:
                    57:76:c0:b4:d0:2e:0b:c2:15:a5:0c:b5:70:33:5f:
                    24:86:d9:02:68:e8:63:35:18:3e:62:bd:6d:5a:45:
                    cb:50:97:d4:ff:dd:5b:f7:51:fe:b4:5e:99:23:cb:
                    22:e7:45:b4:d4:0c:68:e5:2f:79:98:cc:9f:d5:16:
                    a8:99:fb:59:19:a7:d1:8d:38:f9:bc:37:f2:50:0c:
                    56:fe:96:58:1e:52:45:c1:6d:44:5c:b4:4a:39:65:
                    26:84:95:e7:ee:fa:c2:c6:9b:54:b2:c7:8f:da:96:
                    cb:64:7e:97:94:8a:0e:56:ab:40:f7:cb:08:bb:37:
                    d7:ce:ae:46:12:df:91:cb:e7:e9:89:75:7a:74:73:
                    c4:19:96:c2:1a:ec:0f:22:fd:de:b2:e0:89:e7:b7:
                    bc:87:5f:66:6e:5d:cc:dd:ad:95:9c:85:da:2d:5f:
                    9e:93:cb:a7:b8:a3:d8:b8:07:0d:70:ac:18:ad:92:
                    a8:34:4a:8f:70:e8:73:86:c4:c5:2b:56:54:a1:f4:
                    61:21:01:59:6d:03:f6:22:06:45:3d:c8:11:9c:97:
                    64:94:d3:4e:cd:3c:d3:2f:cd:b2:41:b4:7d:17:82:
                    a6:13:d7:2d:f3:d7:cf:4b:08:15:90:b7:ce:01:f1:
                    63:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A7:74:3B:69:52:46:3B:54:F7:53:DA:54:A9:DF:E5:6B:75:DE:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/5dee40e0-bfcc-388b-9c36-d2fccda31bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.165.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:ae:71:64:79:c7:28:85:8d:53:bf:aa:da:d3:14:6b:f9:f1:
         54:0d:67:e0:51:ee:0a:47:2d:0b:ad:f6:f8:fc:56:f5:eb:09:
         99:e2:2e:70:e5:bb:14:4a:d0:ee:5c:df:a4:f2:39:7c:a3:89:
         db:02:a3:9f:06:d1:97:a8:b2:45:c9:af:f3:a1:8c:b2:91:8b:
         b4:f1:c2:34:8a:fe:8a:11:25:11:0b:4b:42:d1:6b:bb:31:79:
         62:a9:ed:e5:9b:5d:ab:96:17:da:15:fd:85:13:38:eb:9d:db:
         0e:03:0a:c3:be:cf:13:0e:42:26:34:21:83:ed:8c:4a:c4:36:
         e4:64:23:6a:db:de:27:76:f9:4c:87:9e:2a:e8:1a:ba:5c:f9:
         a7:d7:be:d7:89:40:d7:ad:fe:ab:3a:e5:31:91:7a:7c:2a:2c:
         1e:89:62:77:39:5c:f0:28:ce:4e:23:ac:0f:25:84:1f:4d:05:
         be:ea:d7:7e:af:bc:d6:65:db:75:4f:08:5b:de:68:97:55:37:
         31:eb:d9:04:67:a4:8b:81:11:a5:74:3e:cf:70:1a:0d:cd:0f:
         ce:f3:c8:4a:78:68:27:3f:a5:c7:22:9e:d6:da:dd:b8:e0:65:
         85:20:7c:85:88:74:e9:38:d0:97:6c:5d:f3:55:a8:12:84:b9:
         85:fc:9f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 15:01:20 2025 by rpki-client