Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa
File:                     1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa (raw, json)
Hash identifier:          dV7ednS/Y3SDeqU7DSeEz2kSs+VwAsozYNdYElmwhcs=
Subject key identifier:   E0:BA:E1:AD:11:E7:51:89:CC:1B:8A:C0:83:45:61:0D:AA:0C:F5:B4
Certificate issuer:       /CN=1c5adecb-4ac8-432f-817c-84bec47b7708
Certificate serial:       010D0C9F43285848BBBB78925353100A385CF4C0
Authority key identifier: 55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa
Signing time:             Sat 01 Feb 2025 02:00:39 +0000
ROA not before:           Sat 01 Feb 2025 02:00:39 +0000
ROA not after:            Fri 02 May 2025 01:00:39 +0000
asID:                     23167
IP address blocks:        149.234.0.0/21 maxlen: 24
                          192.80.67.0/24 maxlen: 24
                          192.80.68.0/24 maxlen: 24
                          192.80.73.0/24 maxlen: 24
                          192.122.250.0/24 maxlen: 24
                          192.206.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:bb:bb:78:92:53:53:10:0a:38:5c:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1c5adecb-4ac8-432f-817c-84bec47b7708
        Validity
            Not Before: Feb  1 02:00:39 2025 GMT
            Not After : May  2 01:00:39 2025 GMT
        Subject: CN=35edb23e-0f86-4ffe-a4cb-7db345d94cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b5:a1:1e:89:8a:63:59:02:f1:c6:bd:ac:6b:
                    9c:d5:8e:70:7a:25:74:5b:b1:60:b2:4b:75:5f:81:
                    f3:70:a1:7b:31:b3:a5:df:06:c1:fc:9a:8b:81:b5:
                    bb:02:75:e3:15:32:64:74:75:45:01:69:af:cb:d1:
                    5e:7c:8b:67:d2:70:43:f7:f4:07:f5:98:e1:06:32:
                    11:a7:64:db:79:94:ed:da:fd:c3:4f:2a:38:7c:84:
                    83:f0:5c:a7:69:f4:d2:11:70:47:92:06:a8:56:ff:
                    78:a6:1b:91:e7:33:2b:5c:9d:2a:af:2a:d7:f3:55:
                    8b:fb:0c:13:24:51:2e:13:c5:74:63:e9:14:b5:32:
                    74:b9:92:cb:b3:97:dd:43:68:d8:a5:f3:80:58:ed:
                    ce:28:21:2c:37:cd:47:a0:17:a2:b5:4c:f8:61:ce:
                    f9:ce:8d:8a:65:3a:6e:77:bd:b1:64:25:70:ec:6f:
                    fd:03:5e:e3:3e:b7:6f:25:7a:b2:b0:81:20:0e:78:
                    fd:0a:0c:9b:7d:e2:96:78:90:f1:1c:7f:6a:b9:36:
                    5c:83:47:14:78:e7:1a:c4:ca:8f:16:6f:7a:82:39:
                    d7:cd:37:a4:bf:ed:45:a3:02:25:14:15:b8:1d:f0:
                    6f:d2:14:b5:a4:11:42:b4:4b:7e:b3:34:b4:b6:d0:
                    54:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BA:E1:AD:11:E7:51:89:CC:1B:8A:C0:83:45:61:0D:AA:0C:F5:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1b3e453b-e16a-3584-8bb8-cf0c6e819cb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708/1c5adecb-4ac8-432f-817c-84bec47b7708.crl

            X509v3 Authority Key Identifier:
                keyid:55:AA:14:76:D8:03:38:C3:CC:0A:6E:F3:14:DE:32:30:AE:2F:80:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1c5adecb-4ac8-432f-817c-84bec47b7708.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.234.0.0/21
                  192.80.67.0-192.80.68.255
                  192.80.73.0/24
                  192.122.250.0/24
                  192.206.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:8b:86:27:c5:b5:07:ef:8a:6f:07:06:99:87:e6:55:0e:5d:
         69:b1:cf:ce:ed:5b:86:76:fc:b6:e7:f6:d0:fb:94:d2:5d:03:
         cb:81:84:51:a0:36:33:2b:3f:34:a1:2e:0f:6a:32:41:93:9b:
         e0:11:52:17:e7:72:cb:16:f6:b6:05:aa:d8:6e:04:65:d9:59:
         be:c0:a9:cf:42:05:f6:66:74:1a:eb:e1:aa:b9:86:7e:53:3a:
         b5:92:38:90:bb:24:81:44:d2:59:e0:47:1d:ae:80:b3:33:76:
         49:cd:f4:00:85:89:26:5d:f4:ac:2a:a8:32:d4:47:4c:35:20:
         48:31:43:17:0e:63:55:13:6a:fd:14:7b:96:01:e6:b5:9e:7a:
         57:37:8d:cd:fe:72:9c:f0:1d:8e:16:55:61:15:aa:99:90:d8:
         04:a1:31:7a:0b:26:2f:20:40:aa:79:73:d3:b7:ce:21:37:2f:
         53:3e:a8:42:e8:0e:d4:b4:c7:09:a6:46:98:0d:11:cb:b0:b1:
         ba:75:95:b0:2e:79:f1:08:50:05:d0:49:99:c6:c8:a2:18:5f:
         de:78:3b:94:10:24:df:23:7d:00:dd:85:02:51:0d:44:c9:9d:
         e8:68:07:3a:9b:03:ef:3e:00:66:e3:8c:91:24:b3:a6:57:f6:
         06:02:d7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 17:38:52 2025 by rpki-client