Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
File:                     bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa (raw, json)
Hash identifier:          QEjykV1o3YHCkPUAhKMb+6JnsfaZQIXpSgylQxbapzc=
Subject key identifier:   91:68:54:6D:AB:98:8B:0B:CD:77:99:D0:38:CD:29:77:0F:A9:65:E8
Certificate issuer:       /CN=a90f006a-b108-4757-9dfd-b36376534658
Certificate serial:       010D0C9F4328584871C06BEA95A919DD5E44B380
Authority key identifier: 56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     22333
IP address blocks:        45.43.7.0/24 maxlen: 24
                          45.43.8.0/24 maxlen: 24
                          66.11.125.0/24 maxlen: 24
                          104.192.103.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:6b:ea:95:a9:19:dd:5e:44:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a90f006a-b108-4757-9dfd-b36376534658
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=7278b3e0-098a-4df6-8b93-7019a237f8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:67:02:9f:0b:7f:32:66:a9:cf:bf:06:77:f9:
                    14:26:08:2f:e2:ee:4b:2b:c0:3b:56:85:86:9c:20:
                    4b:9c:fb:30:29:5d:16:06:97:e1:8b:b7:ac:69:84:
                    33:fa:aa:af:75:a7:da:b9:6e:a8:b2:18:d0:d5:77:
                    18:4e:0e:bd:4e:2c:d9:88:95:10:68:09:5d:94:6d:
                    0c:cc:29:af:fa:cf:05:36:56:15:23:31:d1:a9:d4:
                    46:73:f5:75:36:cc:9d:20:bf:3f:50:b7:71:b3:ad:
                    2b:5e:13:db:7d:9c:c1:b3:69:d1:d9:7e:b4:b7:73:
                    42:09:4e:8e:67:a1:24:45:1e:a8:9b:54:15:41:f9:
                    e7:eb:a7:52:2a:77:cd:91:ab:61:28:eb:78:97:8b:
                    a5:51:d2:19:9a:76:b6:e6:62:a9:2b:2a:9d:61:2e:
                    6a:34:4a:b0:58:b6:be:6b:5a:f2:2f:04:46:f1:ad:
                    69:aa:91:7a:b6:af:41:4e:a6:ec:54:5c:ec:47:74:
                    ee:a7:b7:2a:39:96:cf:86:8b:f3:9e:8b:f9:90:58:
                    bf:10:a3:63:2b:93:f0:5f:66:6d:71:4d:0d:d1:e8:
                    de:df:ad:81:c5:92:71:4c:95:9f:9f:0a:28:0a:f2:
                    da:5a:af:b8:f6:47:38:61:b7:73:e2:d4:10:4e:2e:
                    b3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:68:54:6D:AB:98:8B:0B:CD:77:99:D0:38:CD:29:77:0F:A9:65:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/bed61a49-e0db-3864-a697-d8e1e0b1dcc5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658/a90f006a-b108-4757-9dfd-b36376534658.crl

            X509v3 Authority Key Identifier:
                keyid:56:BB:75:1A:8B:BE:92:0D:89:99:26:23:FB:B5:A5:FB:A9:F7:18:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a90f006a-b108-4757-9dfd-b36376534658.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.43.7.0-45.43.8.255
                  66.11.125.0/24
                  104.192.103.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:26:be:d9:7b:62:cf:e0:79:79:88:37:54:42:f2:29:90:e4:
         4a:9f:89:a3:1e:45:e4:ac:9f:64:6a:17:20:76:1e:74:8e:85:
         da:63:ff:33:a4:6f:b3:fc:43:96:91:a8:97:18:80:1c:fc:7d:
         05:df:bf:7e:bd:1f:3e:56:69:cb:9d:30:46:6c:73:3e:70:b3:
         73:ee:3a:78:e7:9b:d2:93:1e:45:98:29:7f:a4:a1:92:7a:bf:
         09:9b:ed:67:37:83:b9:bb:70:29:c9:c4:95:ac:df:4b:a0:7c:
         80:b3:03:3d:d5:9e:d3:8a:6f:eb:3f:29:66:5e:e9:e8:3d:d9:
         d8:c3:1d:72:8a:cb:8b:8b:a1:fb:b2:17:bb:43:04:f7:f0:c0:
         0b:2a:7a:60:be:19:20:78:f0:5b:86:76:05:2b:1b:bc:c5:09:
         29:d0:ba:3b:b2:62:c3:80:e3:0c:2f:45:fe:25:b9:03:8d:d0:
         a5:91:45:f6:3e:8d:87:9a:06:4c:de:9f:12:d7:ba:51:ec:c3:
         3b:22:44:18:27:39:9f:a3:0a:be:bf:02:05:26:01:46:cf:09:
         3f:a6:55:a0:41:4f:7c:da:75:f8:61:c1:f3:b4:3b:70:93:7a:
         c8:33:e0:14:42:b7:5b:8b:f3:c6:bc:c6:fd:a5:f7:b9:c7:4d:
         c2:ba:30:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:04:13 2025 by rpki-client