Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ff685c05-65dc-31a1-bea8-aa967f5581f2.roa
File:                     ff685c05-65dc-31a1-bea8-aa967f5581f2.roa (raw, json)
Hash identifier:          4/SrthWwwEM4AXW24MEjQ5YQnHT6vGcgJlaup6LZG9M=
Subject key identifier:   74:62:6A:60:15:B7:73:E3:60:EA:A0:6C:77:D4:14:CD:D0:95:19:C8
Certificate issuer:       /CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
Certificate serial:       010D0C9F43285848C580EB4E33C5A6E54613D500
Authority key identifier: 80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ff685c05-65dc-31a1-bea8-aa967f5581f2.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        163.53.214.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:80:eb:4e:33:c5:a6:e5:46:13:d5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19c050c8-bd1f-4e41-931f-16ea7b9ecafa
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=140e536e-a656-4a63-8d38-5cf2bde2f805
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:26:46:b4:ca:7f:de:14:e7:f5:f7:4c:ad:61:
                    21:94:a5:21:0e:14:43:cb:20:05:a1:b6:66:ff:dc:
                    1e:7d:dc:c4:3b:d4:d9:f6:86:e7:8b:5b:14:f6:84:
                    37:b1:a5:e5:ea:ac:14:d8:86:cc:ae:8d:a3:03:d5:
                    12:62:05:40:36:81:15:87:86:1f:0b:c1:55:85:e5:
                    21:3a:1d:90:9e:1e:1a:44:72:5c:1c:56:98:6d:cf:
                    10:e8:04:06:76:6c:ce:78:f6:ea:8b:0d:33:f1:39:
                    7a:7a:08:7d:a5:a9:52:78:d4:43:72:48:78:80:54:
                    39:3d:6b:57:bb:b8:00:4a:9d:7e:0c:00:84:52:b9:
                    03:68:1b:8b:92:17:6b:f5:22:8c:bb:0b:64:c3:fc:
                    7f:50:60:fa:eb:6f:c8:b1:78:fc:ef:f2:e2:a8:96:
                    c1:f1:94:75:74:98:38:35:c2:88:7a:f6:d8:af:c0:
                    2e:8d:9b:3e:91:63:ed:c5:26:14:30:58:dd:98:7b:
                    bb:10:83:89:f6:c3:7a:db:17:38:dc:3f:49:d2:99:
                    6c:63:df:c4:d2:59:c8:0b:62:d2:fb:dc:0d:4b:4c:
                    07:e1:8a:cf:48:ee:eb:67:9f:ea:e0:f5:35:05:a2:
                    c7:74:7f:3a:a8:3b:64:59:50:22:56:bf:97:e3:d7:
                    71:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:62:6A:60:15:B7:73:E3:60:EA:A0:6C:77:D4:14:CD:D0:95:19:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/ff685c05-65dc-31a1-bea8-aa967f5581f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.crl

            X509v3 Authority Key Identifier:
                keyid:80:C0:12:2B:BD:EC:D3:5A:32:DD:E7:AE:1B:F0:B9:23:42:C0:B7:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/19c050c8-bd1f-4e41-931f-16ea7b9ecafa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.214.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:a4:8a:91:6f:59:1d:9d:a7:31:b6:6a:d6:e7:3a:6b:24:60:
         92:5b:fb:4c:b1:5c:d2:a7:f1:4a:2e:24:5b:3f:07:68:aa:ba:
         c1:79:98:8e:4a:9c:64:cb:0f:2b:7d:12:4a:8a:f8:07:1c:1b:
         e8:3b:a1:1a:bf:f3:ea:5a:88:53:5f:a6:5f:28:c8:60:d5:86:
         94:20:ce:4f:01:9c:2d:51:5a:80:3a:b7:b2:4a:2e:f4:2c:54:
         ec:b5:f7:e8:94:eb:c7:3f:0c:7d:50:d2:a9:ff:2e:f5:93:78:
         0e:c6:ff:37:b4:f0:b3:c8:00:e8:54:9d:e1:d1:51:be:4f:cd:
         db:c4:36:13:48:ec:84:1d:85:10:a2:e3:c1:dc:6e:60:28:6d:
         19:e8:a6:d8:2d:08:25:fa:2b:70:c8:50:4a:ff:ea:a2:2a:b3:
         24:cd:fd:d0:56:68:08:67:6d:20:5c:54:ec:ff:d2:bf:b2:6e:
         84:57:8b:5d:c7:9f:cc:bc:29:63:a5:85:9c:3e:32:6c:d8:b1:
         b9:c1:bd:e7:81:06:17:46:8f:21:14:39:27:b2:79:5a:c4:c5:
         32:81:46:cc:72:bf:0b:fd:b5:61:ef:69:4a:a2:ed:5a:ce:f3:
         fc:bb:b7:42:88:f0:bc:df:8a:6c:59:de:85:2f:b6:c1:ad:02:
         bb:f9:86:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:07 2025 by rpki-client