Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa
File:                     77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa (raw, json)
Hash identifier:          MT16tW+duDsQW7U+tSS5Q/zTeQigk497/ay3n1VdSFA=
Subject key identifier:   2D:A5:83:99:A7:DA:B1:C2:B3:F6:D7:17:09:95:33:D3:47:03:7F:8B
Certificate issuer:       /CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
Certificate serial:       010D0C9F43285848F4F693E344B330D8FBBDD800
Authority key identifier: 6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     17017
IP address blocks:        137.83.72.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:93:e3:44:b3:30:d8:fb:bd:d8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=d3d6676b-5796-4200-a781-424502f7ed1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:6d:3b:40:2b:a3:a8:90:1e:37:a8:71:98:cb:
                    27:d5:2d:15:87:03:47:91:2a:55:71:8e:2a:10:8f:
                    ad:99:cd:59:56:3a:74:6d:77:73:85:68:89:c4:29:
                    7c:8e:89:0f:cb:87:d6:55:a7:03:af:13:95:80:eb:
                    56:23:1f:91:b9:88:af:9e:eb:c7:c5:89:ae:ce:0c:
                    00:c2:84:31:11:ad:fb:8c:5c:3c:df:a6:81:4b:b9:
                    08:e2:2a:b7:68:83:f8:dc:92:fe:1f:85:f2:b8:7f:
                    1a:16:0b:b4:a3:b3:26:b9:c4:13:b5:de:f7:d1:c4:
                    4e:0a:7d:8b:43:d4:6a:47:42:18:90:3c:e4:02:66:
                    e2:18:cd:30:b7:9d:f5:69:21:81:00:1d:32:ec:9d:
                    d7:5b:c9:dc:d7:c7:11:62:ff:b5:e7:0e:90:03:3e:
                    88:df:d9:00:d7:c2:bd:bc:42:b8:18:08:22:ef:fa:
                    7b:89:4c:66:c7:b1:5c:d4:63:95:b1:27:87:0a:40:
                    b1:25:d3:de:fe:5b:43:4d:3d:cb:30:60:72:02:53:
                    fe:71:61:7d:bd:a7:c6:e1:64:68:5e:e7:c0:82:96:
                    60:c2:72:9b:1f:d1:4b:06:df:ec:6b:39:c3:ad:79:
                    4a:09:c4:bd:9d:3a:47:bb:7b:20:ba:e6:b8:1f:79:
                    a7:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A5:83:99:A7:DA:B1:C2:B3:F6:D7:17:09:95:33:D3:47:03:7F:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/77deb947-6e0f-3256-9c6b-59f6468d6dd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.crl

            X509v3 Authority Key Identifier:
                keyid:6C:AB:4A:B2:F5:58:3B:F4:55:04:FD:C5:F1:8B:9E:DE:6E:49:01:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc1fbd8b-4ed9-4f5d-a8f0-7559d91bf3c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.72.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:12:01:7c:32:0d:81:c1:ef:05:53:47:5d:da:d5:72:2c:d5:
         2e:0e:d5:86:eb:74:82:82:bb:f5:36:2c:68:e9:40:54:b3:a2:
         57:d9:bf:9d:3d:cd:40:24:f3:6f:8d:1c:1f:07:b6:39:79:36:
         f0:53:fb:49:5d:91:fc:bc:81:f6:26:dd:fd:b1:72:5d:fc:e6:
         3a:e5:fe:c3:00:51:6d:01:e7:21:dc:ec:65:d9:e2:94:fd:e6:
         56:1b:b3:f4:a8:9a:1d:d0:7f:c7:25:53:e9:82:58:d2:c9:8b:
         d7:65:d5:b9:38:a7:9b:49:d2:27:c3:9c:a5:63:15:d8:68:1d:
         35:05:9e:44:9a:b1:8b:5d:15:07:6c:ec:08:a5:6b:b9:5c:ff:
         27:d6:2e:21:bf:8c:13:7e:9e:ec:7d:b5:e5:ff:b2:c8:dc:7d:
         e8:7c:8c:cd:22:29:5b:d7:1c:5c:69:dc:63:31:f2:7e:96:b9:
         42:99:b1:84:3c:9b:e7:c6:d0:13:85:bf:14:98:98:fc:48:0f:
         fe:a8:2e:41:78:48:6c:80:12:82:07:38:a0:0c:95:e0:74:a7:
         70:19:10:9d:b7:f7:f2:31:0d:3b:51:2e:8c:31:be:74:29:17:
         92:a3:f2:16:a8:7c:6b:b3:42:0c:5d:91:26:3b:af:4c:f9:84:
         2d:b9:94:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:39 2025 by rpki-client