Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
File:                     8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa (raw, json)
Hash identifier:          mUrdDp2m33GqRfoy4fTR2zqN+whcFNolERtfo7t7Dlg=
Subject key identifier:   74:55:4D:C9:4E:B2:F2:E3:03:74:39:9A:16:E5:21:C8:C8:9A:8A:E0
Certificate issuer:       /CN=fb17e7fe-b629-4f60-b002-5a63654202da
Certificate serial:       010D0C9F4328584823954C41FFBD8143DE151700
Authority key identifier: 9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa
Signing time:             Sun 08 Dec 2024 14:00:51 +0000
ROA not before:           Sun 08 Dec 2024 14:00:51 +0000
ROA not after:            Sat 08 Mar 2025 14:00:51 +0000
asID:                     396982
IP address blocks:        142.147.14.0/24 maxlen: 24
                          162.247.96.0/21 maxlen: 21
                          162.251.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:23:95:4c:41:ff:bd:81:43:de:15:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb17e7fe-b629-4f60-b002-5a63654202da
        Validity
            Not Before: Dec  8 14:00:51 2024 GMT
            Not After : Mar  8 14:00:51 2025 GMT
        Subject: CN=dfe6568b-baef-47d8-af25-0f846acbc17f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:10:54:86:f9:2e:db:1c:b4:07:b7:17:86:
                    29:f4:f1:05:95:35:d5:7a:eb:61:d9:7c:28:c9:ee:
                    55:5a:cf:cc:56:2a:cb:f3:16:6b:1d:5a:1c:8c:e1:
                    aa:ac:0b:54:9d:a0:73:4f:7a:21:38:c3:47:cc:63:
                    f2:20:fd:38:b8:ca:a8:b1:44:06:d3:6e:74:6e:f6:
                    e9:2d:60:9b:f9:31:6e:24:04:c7:f3:1d:be:9e:f0:
                    f3:90:ae:82:34:7e:fc:98:c4:fb:49:11:c1:2a:52:
                    67:55:f3:c6:89:21:88:ee:79:8b:20:2a:a6:99:26:
                    d9:15:34:ba:78:6a:7f:1f:bb:bd:35:b9:f4:fe:a8:
                    94:50:55:f8:09:a9:9b:1d:a2:bf:37:44:49:b6:19:
                    5b:1f:f5:79:95:b7:c9:6c:ff:01:bb:25:f2:02:0e:
                    39:2f:7d:34:da:1f:23:ab:b4:36:d5:1a:d5:22:ff:
                    35:e9:c9:11:1c:bc:db:23:88:d9:15:cb:c4:95:5e:
                    c5:68:95:97:05:0f:e8:d7:39:21:c7:fc:a6:f2:a5:
                    fd:e8:4d:a3:83:64:52:7f:d8:94:20:c7:29:27:2a:
                    c3:0b:8f:8d:76:59:28:cc:6b:45:be:26:b6:e4:13:
                    6d:fb:04:ed:0e:19:33:83:55:36:22:b0:30:ba:18:
                    b5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:55:4D:C9:4E:B2:F2:E3:03:74:39:9A:16:E5:21:C8:C8:9A:8A:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/8f75596d-0db5-3764-bc9a-ef98eb382d5a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da/fb17e7fe-b629-4f60-b002-5a63654202da.crl

            X509v3 Authority Key Identifier:
                keyid:9C:F0:17:C1:A7:39:85:BD:CA:C2:8B:85:92:9D:5B:A2:B2:43:6E:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fb17e7fe-b629-4f60-b002-5a63654202da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.14.0/24
                  162.247.96.0/21
                  162.251.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:10:cb:0d:b7:33:98:98:c3:32:c2:86:cb:57:4f:77:25:47:
         d6:b2:8f:d7:e0:92:29:54:31:28:c4:6b:81:66:77:57:94:19:
         3e:f6:08:f9:cf:67:fe:8a:b6:71:6b:75:5a:a5:e0:0b:d1:cc:
         ba:48:4a:c7:86:d1:1b:ce:b8:23:c2:25:cc:88:c0:98:47:c4:
         4d:d0:b5:13:2a:ed:b0:7d:df:c9:23:95:83:b2:80:ed:e7:15:
         22:36:85:7d:a0:b8:d2:73:eb:5e:4d:74:64:cd:1a:31:bd:ee:
         e7:d5:dd:48:5f:17:24:03:45:3d:b4:ee:74:c6:ab:a8:81:52:
         ce:5f:89:87:4f:52:fc:72:14:a1:b9:92:7a:4c:cf:a2:66:7a:
         a9:82:a1:32:44:13:d1:51:a5:0f:26:25:a5:a9:ca:3d:19:ca:
         de:28:b9:88:98:fe:89:57:84:d1:f5:64:35:d8:1e:35:77:2b:
         e1:4a:28:db:73:8a:22:fa:98:91:36:17:fc:d1:5a:be:9e:19:
         89:2d:66:16:62:40:8c:d9:6b:a2:ed:a9:3c:3a:61:e4:48:be:
         d6:49:5a:95:dc:62:e1:11:fc:66:89:35:e6:6b:a7:0c:06:e1:
         c0:f8:68:03:19:51:5b:21:8a:79:81:a7:8e:f2:69:98:1f:aa:
         16:da:72:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:14 2025 by rpki-client