Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
File:                     4545cdb9-209d-3cc9-9074-490c2687d75d.roa (raw, json)
Hash identifier:          C1EmuyeUESAjlACoUiHB0qDOioP9x1buReeUCW69DOU=
Subject key identifier:   8F:B8:66:9C:AA:F2:E0:22:4C:10:7F:F7:70:25:85:78:F6:3D:06:53
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F4328584827C5370782C4B141A5C66E80
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     3663
IP address blocks:        50.116.128.0/18 maxlen: 24
                          63.135.128.0/19 maxlen: 24
                          64.246.240.0/20 maxlen: 24
                          70.40.224.0/19 maxlen: 24
                          74.213.208.0/20 maxlen: 24
                          96.126.0.0/18 maxlen: 24
                          108.167.192.0/18 maxlen: 24
                          142.11.0.0/18 maxlen: 24
                          173.254.128.0/19 maxlen: 24
                          173.254.160.0/20 maxlen: 24
                          184.95.64.0/18 maxlen: 24
                          192.173.192.0/18 maxlen: 24
                          198.190.64.0/18 maxlen: 24
                          199.115.224.0/22 maxlen: 24
                          206.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:37:07:82:c4:b1:41:a5:c6:6e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=563fde1c-d571-47e5-8bf5-160b68a6e878
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:f1:b2:6c:2a:eb:f0:56:11:78:94:9c:43:
                    03:4a:ce:4a:51:cb:b5:94:47:69:a2:13:14:02:b2:
                    e0:1f:b6:af:3e:26:05:56:c6:e6:3d:5c:7f:67:e4:
                    80:46:2f:78:67:e1:ca:33:eb:6c:0a:d8:d0:4b:a5:
                    09:cd:e3:7e:07:d5:af:f8:cd:5e:b7:44:c2:23:dc:
                    d2:40:5a:05:f9:d1:86:4e:1a:55:ad:cf:78:f1:0a:
                    5a:04:5b:84:16:dd:a0:ce:e4:da:2e:ae:34:76:83:
                    f9:10:3b:62:a2:a8:61:7b:ee:20:1d:ca:1e:d6:56:
                    97:c1:3a:64:59:1a:42:c6:e9:6f:dc:81:4f:75:c0:
                    81:44:b8:b4:02:d7:32:d1:f9:66:7d:33:d4:47:b3:
                    17:9b:1d:3d:9e:4d:1a:5f:7e:f6:ef:4e:f2:95:2e:
                    de:b5:ce:cb:05:82:61:7a:18:b7:f1:9a:8c:37:2e:
                    d2:06:14:89:2b:99:4d:12:13:e1:71:24:67:b5:24:
                    0c:06:00:18:f1:a9:97:d0:85:e7:f7:db:64:4c:b6:
                    b6:ee:76:53:3b:06:9b:fd:54:e3:e4:cb:33:36:13:
                    58:73:8f:9e:44:03:b9:8b:e2:10:9f:4f:19:aa:4f:
                    91:dd:c9:e4:77:42:bb:e8:6d:a8:ae:a7:66:59:0c:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B8:66:9C:AA:F2:E0:22:4C:10:7F:F7:70:25:85:78:F6:3D:06:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.128.0/18
                  63.135.128.0/19
                  64.246.240.0/20
                  70.40.224.0/19
                  74.213.208.0/20
                  96.126.0.0/18
                  108.167.192.0/18
                  142.11.0.0/18
                  173.254.128.0-173.254.175.255
                  184.95.64.0/18
                  192.173.192.0/18
                  198.190.64.0/18
                  199.115.224.0/22
                  206.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:6b:41:2d:a6:cb:f7:5c:41:f1:9e:a8:b3:c2:34:2f:98:38:
         66:7d:3f:03:03:2c:f2:8f:ac:df:62:bd:da:78:64:77:1c:3d:
         43:c1:18:58:34:d6:5f:c3:de:ff:78:c3:16:09:65:92:77:2a:
         14:26:fe:81:06:05:96:c4:9a:b1:f2:f2:19:de:0f:11:99:cd:
         ce:ec:a2:27:69:ed:8a:2a:97:17:34:ff:de:d8:5c:84:43:80:
         96:f5:df:37:4b:95:b5:be:e5:ed:76:6c:9d:e3:1a:0a:e0:3c:
         a2:ef:d3:2e:83:27:d3:67:e3:db:39:9f:51:6b:a9:94:7e:e5:
         0b:98:61:27:38:00:29:c1:16:33:b5:f4:b3:b2:e2:95:85:47:
         34:04:48:a7:21:9c:7e:f0:0f:2f:d0:c6:8c:bd:69:8d:32:97:
         b2:98:91:96:20:ce:3d:dd:de:b9:3c:ad:72:b2:53:6d:e0:40:
         60:16:1b:03:78:e5:da:25:6e:ba:49:78:ca:8d:c0:f7:df:31:
         69:64:e3:81:0c:44:37:83:fb:7d:40:5b:14:88:2a:66:86:a8:
         91:a7:48:40:8d:e8:0e:6d:1a:ce:5a:e5:c8:fb:e3:a3:d6:99:
         b2:07:4f:65:85:89:f0:ac:00:26:1d:be:95:52:ac:7f:30:f1:
         f4:e5:35:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:39 2025 by rpki-client