Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa
File:                     af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa (raw, json)
Hash identifier:          5GlJ4CopGhBvqevJDLCE1KXuY3oDpg/GJGueZVjW76Y=
Subject key identifier:   B8:BF:03:EB:14:1B:BF:75:3C:88:0F:A0:E0:0F:DD:EA:10:AF:CC:A2
Certificate issuer:       /CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
Certificate serial:       010D0C9F43285848CB1652C7121E90034979C080
Authority key identifier: 26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa
Signing time:             Thu 06 Feb 2025 14:00:52 +0000
ROA not before:           Thu 06 Feb 2025 14:00:52 +0000
ROA not after:            Wed 07 May 2025 13:00:52 +0000
asID:                     55293
IP address blocks:        68.66.224.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cb:16:52:c7:12:1e:90:03:49:79:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58
        Validity
            Not Before: Feb  6 14:00:52 2025 GMT
            Not After : May  7 13:00:52 2025 GMT
        Subject: CN=5a17e61c-f328-4fcd-b7f0-3d5b3d5d3c73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:31:93:15:59:76:7b:fb:95:0c:3c:88:7b:
                    64:35:da:0b:1c:b0:35:3d:20:4c:5c:fb:ef:2a:d1:
                    70:ae:aa:24:b3:8e:5a:5f:ef:2c:cb:a6:65:22:f5:
                    0f:b3:a2:ec:1c:9b:1a:a2:2d:c7:23:97:61:af:d4:
                    7c:4c:c1:7c:75:bd:3a:54:c7:f7:9f:ee:7d:6a:a2:
                    b5:6c:10:6b:de:c0:37:4f:71:01:5d:61:5e:a4:a6:
                    f5:7f:6e:42:5a:8b:1f:8b:93:dd:50:2d:14:14:9d:
                    ca:7f:f8:e1:2d:59:0e:14:42:5b:f4:5f:e6:ff:77:
                    e5:fe:73:cc:db:ba:e0:96:92:a9:49:fa:7a:72:c7:
                    dc:4e:11:3d:00:22:94:5c:b1:39:65:84:33:bd:5b:
                    86:d3:15:75:63:9d:88:c5:a0:cd:b7:ff:3d:3d:92:
                    b6:d6:61:5b:86:f0:28:5b:55:95:17:a8:0b:fa:dd:
                    a5:da:0f:b2:ca:a5:ad:bc:bd:c6:72:05:f7:13:10:
                    f4:9c:6c:c4:fa:c2:2c:c6:80:f2:46:bb:6d:60:14:
                    16:d4:89:d9:57:50:64:0a:12:a1:e7:d7:85:1c:51:
                    88:2c:59:00:56:65:5b:54:16:9f:39:f6:7b:d4:a6:
                    f7:e9:bd:59:f7:2b:be:20:de:59:d6:a4:4d:b5:82:
                    20:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BF:03:EB:14:1B:BF:75:3C:88:0F:A0:E0:0F:DD:EA:10:AF:CC:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/af84c3f0-fbb0-3e47-9f93-18c96df2b368.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.crl

            X509v3 Authority Key Identifier:
                keyid:26:D1:9B:B5:02:FD:CB:75:4D:60:A0:BB:6A:8F:47:07:E2:4C:17:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/cc9383e4-2c51-4ffd-bfe9-69e9fd6c5b58.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.66.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:01:0c:d7:7d:e4:24:79:a9:50:22:92:20:83:5b:18:43:b8:
         0c:e8:45:35:58:b4:cf:bf:98:6f:47:a8:ad:3e:73:6d:ea:6b:
         c1:64:df:43:4c:4b:cd:e8:66:fb:b9:3b:86:df:1e:ac:54:b8:
         46:4e:43:78:fb:f6:1d:70:af:b0:93:22:7b:a3:46:77:be:e5:
         a0:90:e0:92:33:74:bb:23:1a:24:89:a3:1e:92:bc:fb:32:35:
         bb:f9:c5:0a:87:01:35:12:32:f5:fc:0c:fb:00:05:19:69:d4:
         8e:e6:fe:dd:a0:8f:b2:47:14:dd:e6:80:2c:bb:14:a1:f3:3f:
         6c:7d:cd:1d:df:5e:19:7f:df:b3:1a:3d:be:47:6f:68:4f:8e:
         ee:b2:be:a9:d5:70:68:2a:5b:63:d6:0e:0e:1a:53:a6:d4:83:
         ee:d4:f9:e9:22:6a:28:89:79:59:8d:72:6b:4d:d0:06:b1:ef:
         bc:a0:98:5c:c3:6c:de:f9:30:2a:05:e1:db:e3:65:7a:19:f9:
         8e:59:4f:f7:e9:7c:a5:95:bd:5f:01:59:40:48:6d:7d:ff:0a:
         32:98:6c:38:d5:ec:16:d6:b6:08:3a:61:f6:ff:15:8b:1a:e4:
         ac:c4:dd:67:5a:01:bf:25:b0:1b:ad:6d:70:3f:3a:63:7d:62:
         d6:c9:91:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:29 2025 by rpki-client