Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa
File:                     7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa (raw, json)
Hash identifier:          7su3GVeXwjGH13/UVpMW2fNddrVo5azKcuU9YD5q5GA=
Subject key identifier:   3B:6F:38:97:BF:1F:FD:11:5F:20:3C:B5:7B:17:69:84:C1:D1:95:19
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F432858486C2B3151F01B58D4FCC23200
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa
Signing time:             Fri 03 Jan 2025 14:00:51 +0000
ROA not before:           Fri 03 Jan 2025 14:00:51 +0000
ROA not after:            Thu 03 Apr 2025 13:00:51 +0000
asID:                     11404
IP address blocks:        208.53.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6c:2b:31:51:f0:1b:58:d4:fc:c2:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jan  3 14:00:51 2025 GMT
            Not After : Apr  3 13:00:51 2025 GMT
        Subject: CN=c1a3c442-df72-4da5-ac34-79530f2143e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:61:9c:e5:19:2b:c0:13:0e:32:75:f4:f8:84:
                    d6:f0:29:36:dd:8e:42:30:8c:10:4d:78:f7:69:93:
                    47:d7:96:8b:0f:3d:1f:7a:a6:b5:bf:cc:f6:9b:80:
                    d2:95:7a:07:0c:74:96:0c:09:16:ca:1f:40:c1:aa:
                    b3:a8:fc:aa:3d:e1:10:66:94:6e:1a:34:7a:97:0d:
                    a5:71:47:e4:55:2f:b1:9c:d5:aa:fd:14:8b:69:9a:
                    f8:0d:07:9e:56:5f:d3:2f:b8:90:66:02:be:10:74:
                    43:7f:11:92:8f:4a:36:24:8b:0b:80:fd:57:ae:29:
                    7f:46:ba:31:d3:03:c8:87:74:fd:98:8d:9c:2b:f5:
                    49:5e:ea:fa:db:3c:85:b4:12:39:5b:7c:57:e3:4e:
                    e1:c2:3f:19:66:46:70:f2:51:9c:46:d3:29:dc:cb:
                    4f:ec:a7:21:38:00:eb:39:6d:1a:8e:ae:80:6e:81:
                    7c:98:1c:e2:eb:b9:9e:ae:24:ea:52:9d:87:ba:8a:
                    a3:f8:00:03:71:b0:c5:e9:fb:8c:58:9f:5a:db:61:
                    3f:f7:e1:af:d2:fe:bc:92:49:85:93:a7:dc:a4:e7:
                    0b:e3:48:f3:38:aa:be:0d:a0:08:26:e5:f7:73:cb:
                    5b:20:72:2d:ef:0b:3b:e0:85:23:db:c0:1a:1b:05:
                    f2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6F:38:97:BF:1F:FD:11:5F:20:3C:B5:7B:17:69:84:C1:D1:95:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/7145a76b-bc44-3ebb-87cc-73d1eafdc55b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.53.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:22:2d:05:bf:b4:20:50:cb:f4:a3:ea:89:d3:13:a0:0e:8d:
         f9:d4:9c:2d:b4:d0:cc:37:47:85:4d:f7:77:09:9c:52:36:99:
         a7:5c:a5:c6:f1:c3:14:39:23:54:04:8e:4c:45:6f:2e:ad:f1:
         fd:1a:c9:fc:0d:cb:e7:6f:94:11:6f:81:5a:ef:79:45:14:4d:
         dc:4b:d3:ef:ce:fd:7f:99:44:2a:b3:92:43:21:14:f1:2d:8f:
         ae:58:d4:75:28:bc:a9:fc:0b:f7:f4:d5:d0:70:5f:e6:1c:78:
         5e:b2:2a:8c:3e:6c:ad:5d:6a:51:7e:36:f1:20:90:6b:de:bc:
         2f:9a:65:6a:cf:d5:e5:92:bc:13:8c:a7:16:69:9d:9f:27:97:
         2e:94:f5:c9:85:80:9d:3e:96:bd:48:83:a0:b9:89:2e:53:44:
         8f:94:62:9a:c2:17:ac:b6:44:84:07:4c:c3:d2:5d:b8:f3:cf:
         37:21:4f:50:cf:86:cb:3b:5f:45:7f:92:b4:6d:8b:4f:cb:8b:
         10:55:b3:8e:b3:92:11:f1:4d:7c:3a:9f:63:4f:53:f4:54:6b:
         62:bd:0d:fa:8e:93:fb:15:81:28:68:fa:11:fe:51:ab:48:8c:
         6e:76:b4:62:17:31:5c:98:db:74:6b:35:fe:ef:38:c9:97:6a:
         1a:21:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:35 2025 by rpki-client