Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
File:                     70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa (raw, json)
Hash identifier:          kXV6+7eVhBfhsTF3LPCYBHKOtxQh2VM4kuj+C/YyZVA=
Subject key identifier:   AC:0A:BE:6F:C6:34:D6:06:83:86:08:78:29:72:FB:D9:2D:66:24:81
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584823954B1D3E6D0A945D37B060
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     11269
IP address blocks:        199.193.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4b:1d:3e:6d:0a:94:5d:37:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=2a7b9755-167c-4206-9d39-0a1b6b2b17b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:91:4f:6c:e6:2b:4c:87:ff:26:2e:23:4b:c8:
                    3f:af:65:c1:b4:3b:03:fd:c4:0b:69:ef:97:ab:1d:
                    bf:08:8e:54:c9:20:a2:10:72:72:47:3b:c4:4e:0f:
                    5b:c6:3c:d6:28:f5:50:89:71:00:57:dd:a1:e6:42:
                    aa:ba:15:0f:c3:3f:7f:4b:20:8d:57:34:dd:4a:c6:
                    39:63:48:41:92:97:3b:ef:22:a6:15:78:6c:60:78:
                    0a:c4:fd:9a:07:53:e8:ac:13:ea:b0:09:43:3a:d1:
                    c9:19:74:81:e3:48:46:ad:e2:d5:d4:ee:5f:77:32:
                    0f:5d:30:c6:af:b7:1c:8a:02:d9:3a:b2:9c:be:90:
                    e7:a7:2d:3f:53:24:a0:39:ce:50:b5:b6:ec:ba:65:
                    55:b3:50:a8:73:57:08:79:1e:8b:0e:f6:26:89:95:
                    cd:07:5f:49:46:41:f4:8c:5d:21:38:75:bb:37:9f:
                    6a:91:c2:d3:c6:04:e6:72:4a:7e:54:85:05:fd:f7:
                    a9:76:33:99:ef:4c:6c:cc:24:3d:22:a7:11:5b:c4:
                    83:23:fa:2a:c6:0c:a0:99:8a:a3:d5:85:02:44:d9:
                    32:8e:92:a4:e5:00:f5:38:5e:5d:5f:53:c1:ee:54:
                    22:b0:1b:a0:7b:f8:13:ed:cd:5c:0b:de:02:57:d4:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0A:BE:6F:C6:34:D6:06:83:86:08:78:29:72:FB:D9:2D:66:24:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/70ccc468-ff6b-3424-8fea-7b48ce5263e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:ed:80:b4:15:72:81:1c:c1:0d:bf:3a:52:d6:83:20:5e:c3:
         e9:d9:d7:92:38:68:bb:ce:fd:82:85:cd:0a:d5:5d:f8:c6:56:
         d4:81:3b:a9:59:79:45:e2:a4:18:d4:5b:8a:d1:0a:01:f5:f8:
         04:fd:09:da:f2:77:b5:cc:61:96:2b:90:3d:87:aa:31:f6:40:
         36:15:12:cc:55:eb:56:14:75:3e:be:e1:bc:2f:bb:09:ee:f7:
         b0:45:96:e9:f4:24:8e:84:63:94:01:72:71:30:50:a8:26:44:
         49:a7:3a:d6:6f:e0:44:15:8c:bb:5e:82:de:36:21:0a:a3:6a:
         0b:4b:e9:90:3a:da:39:52:74:05:0b:e7:22:57:0e:31:83:d2:
         19:40:d9:31:d5:39:f2:79:54:ee:f4:76:96:54:27:94:14:e7:
         34:59:f7:ee:7d:c8:18:c3:7a:d2:a5:60:46:b6:68:91:da:5f:
         62:3b:e0:3b:9c:42:38:5f:86:77:8c:f3:77:f5:8d:db:0e:fb:
         ee:fa:38:7a:7b:6c:47:d5:6f:1d:31:b8:b5:5c:b9:04:bb:3a:
         7b:6c:b8:4d:71:68:58:78:58:d5:ef:e1:0d:1c:01:8c:40:1c:
         3c:2c:38:89:24:b5:f3:4e:cf:80:1e:df:3c:ec:73:0d:f0:02:
         19:45:ef:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:34:49 2025 by rpki-client