Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa
File:                     5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa (raw, json)
Hash identifier:          AC+j02p7HmRfvX3hE7s0Gu2Qbl8TW6x2hCAO+yswLTQ=
Subject key identifier:   44:4D:DC:B3:CD:4C:0D:04:02:66:55:E7:90:EA:79:1A:2A:73:CE:1B
Certificate issuer:       /CN=487abf98-3073-43c6-b10e-a615e64ccc65
Certificate serial:       010D0C9F432858481C9A7C247A8B083A50916EA4
Authority key identifier: 50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     22992
IP address blocks:        206.55.100.0/22 maxlen: 24
                          208.89.40.0/21 maxlen: 24
                          2620:133:c000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:7c:24:7a:8b:08:3a:50:91:6e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=487abf98-3073-43c6-b10e-a615e64ccc65
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=5788a6dd-c101-4e0b-9ee2-3c811c668e76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:89:c7:85:04:76:fe:25:8a:00:22:22:f7:52:
                    d0:6f:7e:4e:ee:a4:ff:20:cf:0b:5b:b3:1f:81:d0:
                    c1:09:69:74:eb:b1:ab:6f:00:72:7b:97:a9:80:f6:
                    dc:cb:a2:3c:0f:7f:26:02:7b:01:f0:83:e6:05:26:
                    1f:85:8b:b6:a5:ef:a6:e8:78:b6:f7:ef:26:e9:56:
                    53:ac:4f:5f:78:c9:6c:c5:fb:fe:bd:5e:60:d5:31:
                    f5:66:98:81:43:21:53:5c:23:37:29:18:02:49:70:
                    5c:17:85:be:03:2c:69:92:f7:48:cf:6a:d6:27:27:
                    77:5c:4d:67:ce:66:fe:48:9b:6b:3c:5a:31:c9:1d:
                    43:09:57:13:bf:97:8f:79:03:85:c4:b2:63:7c:88:
                    25:de:85:57:14:4d:7b:be:ac:11:3f:17:d7:2b:44:
                    cb:71:7a:cd:20:30:ec:cc:d3:0f:7d:e1:ba:da:9d:
                    03:b0:f0:76:09:44:52:0c:6a:8b:26:a1:6b:9b:54:
                    28:c4:46:68:ca:4f:a2:1c:ca:d4:e8:d0:26:71:e3:
                    91:02:22:60:13:c0:2b:63:8a:57:87:a4:e8:f8:06:
                    53:4a:30:8b:e7:39:66:8a:b3:a2:bf:a7:f2:a1:61:
                    93:76:53:d5:fc:18:53:51:11:ac:6f:03:8a:8a:27:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4D:DC:B3:CD:4C:0D:04:02:66:55:E7:90:EA:79:1A:2A:73:CE:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/5a6bcd1b-d743-33bc-a78e-f9441b613f48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65/487abf98-3073-43c6-b10e-a615e64ccc65.crl

            X509v3 Authority Key Identifier:
                keyid:50:7A:E4:02:3C:D8:83:E7:AD:F6:A4:D4:16:E6:E7:15:3F:0A:05:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/487abf98-3073-43c6-b10e-a615e64ccc65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.55.100.0/22
                  208.89.40.0/21
                IPv6:
                  2620:133:c000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:4a:e0:f1:21:9a:54:52:82:57:f9:45:b7:57:16:b7:c5:
         29:63:c2:fd:d8:25:59:8d:7d:6b:76:ca:97:3b:08:ea:22:f6:
         ab:f2:0a:e8:ea:a5:ae:16:a5:3f:c5:88:9f:b5:2f:55:fe:74:
         44:ef:03:1f:e1:f2:9f:6b:3d:8e:e2:fa:84:92:e4:c4:b0:85:
         8a:13:f4:7d:e9:0b:df:5b:93:41:6d:7b:1f:4f:22:e3:44:4b:
         be:ae:b4:40:ec:2a:9e:90:ae:9d:85:24:57:a3:cb:86:1e:0c:
         5b:ba:31:3d:cd:bf:77:91:96:48:18:ed:ae:07:c9:92:c9:01:
         b1:4d:54:54:39:54:9a:d5:15:e6:09:4a:16:0f:d1:12:d2:0c:
         21:65:d1:20:d8:e1:73:9a:60:e5:01:4b:05:33:33:15:04:09:
         47:f5:2c:d9:fe:a5:97:19:2c:24:09:23:f5:34:b0:b4:89:de:
         6d:7a:57:e7:92:38:49:a0:aa:19:cd:a5:5f:80:fd:e1:a5:ad:
         ad:7d:26:a6:13:82:7b:a6:32:0e:98:2b:2c:df:6d:95:0b:89:
         7c:3d:55:dc:0c:47:b8:8b:5b:a4:79:39:1f:4c:9a:cf:51:30:
         d7:d6:9a:0a:0f:56:93:2b:89:ed:4f:a4:df:c3:6f:e7:13:a3:
         0c:b3:74:63
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:22:12 2025 by rpki-client