Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
File:                     683f5d66-eaff-3067-96b9-4bcce2c49736.roa (raw, json)
Hash identifier:          z6o1T3fE9yWa2yrTMfJy9Y0F+8B7+ckoRiq5KVJhRQc=
Subject key identifier:   E1:96:BB:D3:15:28:08:FE:45:22:19:BF:5F:5C:B7:55:05:4E:87:24
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F432858486AC5A11C2370E191DB2AE3CE
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa
Signing time:             Fri 03 Jan 2025 02:00:40 +0000
ROA not before:           Fri 03 Jan 2025 02:00:40 +0000
ROA not after:            Thu 03 Apr 2025 01:00:40 +0000
asID:                     21769
IP address blocks:        67.203.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6a:c5:a1:1c:23:70:e1:91:db:2a:e3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jan  3 02:00:40 2025 GMT
            Not After : Apr  3 01:00:40 2025 GMT
        Subject: CN=2df7a1c2-6a3c-4fc0-887b-f58a22e4499e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:98:a8:27:50:e8:e8:47:53:ca:88:fd:a7:
                    de:59:e9:92:61:9d:a1:18:37:b7:b5:69:90:c4:d5:
                    b7:09:c5:4f:c8:7e:77:37:8c:8e:6f:2f:10:40:50:
                    aa:11:91:2a:b6:bd:75:8f:f8:90:0f:fd:40:dc:4e:
                    b2:91:65:e7:39:14:86:77:8b:d4:42:95:62:7c:c3:
                    14:bd:9a:1d:5e:cf:41:95:26:26:7c:57:f4:70:63:
                    d6:7a:f9:da:b4:a9:57:b4:fa:9f:1c:a0:8a:09:4e:
                    b8:b6:eb:95:69:25:51:a8:a5:b0:dd:e8:c9:5a:5c:
                    23:43:8d:f9:4e:62:d3:b2:94:ea:f9:41:c0:fa:82:
                    d0:3b:f4:02:ed:0c:1c:b0:5e:a2:5a:66:8e:56:03:
                    e2:cf:10:35:f7:31:bf:85:5f:32:74:ed:9e:c1:bb:
                    b4:11:66:05:b6:9e:8b:c8:be:bb:cd:90:98:7c:e2:
                    31:63:1e:44:58:fd:85:26:da:60:de:29:89:59:99:
                    51:91:f9:00:61:ce:12:8d:ad:b1:12:df:c5:27:cf:
                    7f:1c:0e:44:8a:40:ba:5d:72:ab:31:25:e3:cc:f6:
                    78:46:04:1e:f1:af:8e:c2:37:1a:37:94:08:e2:c3:
                    a7:dd:1f:68:24:4a:04:81:55:30:f9:04:cf:ee:da:
                    31:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:96:BB:D3:15:28:08:FE:45:22:19:BF:5F:5C:B7:55:05:4E:87:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/683f5d66-eaff-3067-96b9-4bcce2c49736.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:4a:27:bd:e6:f7:19:20:c3:c1:51:95:9d:1c:e2:c1:bd:87:
         59:10:10:4e:4c:67:f5:f3:87:5a:ce:34:8f:0c:45:52:d5:c3:
         6d:0b:25:9c:c4:ad:f2:d0:7a:13:c1:23:83:08:8b:54:c4:1a:
         14:0e:de:09:3d:6a:1e:f6:2a:5d:54:95:43:e9:77:6f:bd:66:
         c5:de:7a:68:73:16:6f:00:f5:0f:4e:0e:b7:a3:21:38:23:03:
         ea:08:80:d3:4e:e0:c3:46:10:f6:dd:32:32:99:67:a0:03:25:
         5d:f4:53:c9:09:d4:d9:1c:05:8a:0b:d3:23:47:90:3a:20:e5:
         70:f0:eb:8d:50:2b:ed:91:f6:e9:52:42:32:8e:7f:bf:de:c6:
         fc:14:81:67:60:2a:34:8b:3c:b0:5e:a7:de:19:03:e9:33:8c:
         23:aa:43:ec:5f:ac:b1:93:4f:6d:9f:52:47:f9:aa:6c:cc:dc:
         f9:c0:6c:f6:78:71:63:25:b6:1e:50:2b:3f:55:3d:18:a1:bd:
         1d:4d:8f:a4:90:19:10:f7:61:71:52:c7:31:3e:b9:f5:b4:8c:
         f9:a9:84:5c:e8:98:8f:7b:91:5b:e4:d7:5e:a0:0b:b3:9e:90:
         51:15:b2:4d:fa:09:5a:fa:72:1e:6b:7c:3a:e5:66:08:e8:4a:
         02:f0:07:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:20 2025 by rpki-client