Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa
File:                     ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa (raw, json)
Hash identifier:          mMyIsjt1jzmhanduXO5hsM7CtgClI7qNOdFMcoLQ/oE=
Subject key identifier:   47:06:41:07:E3:8E:58:D9:8C:17:AA:D5:A9:5E:73:8C:CA:BA:7F:7B
Certificate issuer:       /CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
Certificate serial:       010D0C9F4328584812D531041EC9ADC4081D3380
Authority key identifier: 53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa
Signing time:             Mon 02 Dec 2024 14:00:51 +0000
ROA not before:           Mon 02 Dec 2024 14:00:51 +0000
ROA not after:            Sun 02 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        205.201.46.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:12:d5:31:04:1e:c9:ad:c4:08:1d:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdea7099-d2e5-45e1-8c1e-a8206f549539
        Validity
            Not Before: Dec  2 14:00:51 2024 GMT
            Not After : Mar  2 14:00:51 2025 GMT
        Subject: CN=36cd5c5a-02c0-44b6-acd5-4f88a0d593b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c0:19:43:d6:dc:d9:d0:d5:a9:51:98:b2:15:
                    a2:2b:7f:bf:7b:d4:c1:b0:a8:23:3b:99:9f:7d:c2:
                    02:1c:a1:5d:93:55:e7:e2:af:eb:0c:08:0b:06:b1:
                    88:80:b6:53:84:5a:b9:1c:53:cf:43:29:80:18:4d:
                    c7:ee:46:de:77:0d:0f:d2:fc:22:34:56:ed:14:0d:
                    53:7a:4f:2d:e4:0b:fd:26:78:7a:75:ae:65:c6:68:
                    5d:4b:e8:17:4b:7a:44:1f:77:03:5a:e4:c1:81:b2:
                    f1:16:2f:9a:71:95:00:cd:c7:49:33:25:16:81:d2:
                    b4:eb:ab:14:d6:c5:82:03:2b:a5:25:91:68:6d:12:
                    73:74:a1:2c:d1:74:b5:aa:c5:1a:ed:dc:1a:97:5a:
                    e3:e7:da:2c:f5:b4:1e:a3:f2:97:c3:0a:9b:8d:02:
                    c9:e3:40:94:78:42:9c:2f:2b:8f:5f:26:f6:dc:ec:
                    59:c3:ea:a2:54:e6:7a:e1:26:1b:4c:01:c5:28:4a:
                    c3:cb:53:1d:f3:50:1c:ab:3a:4f:6d:42:80:f6:e5:
                    e0:40:8c:90:a0:47:49:4c:b2:42:b5:3f:f3:34:e1:
                    4a:f5:b5:eb:4c:44:7d:04:ea:79:56:e9:82:c4:1f:
                    1f:db:7f:30:26:9d:ef:bd:f2:2f:85:df:ac:22:01:
                    a9:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:06:41:07:E3:8E:58:D9:8C:17:AA:D5:A9:5E:73:8C:CA:BA:7F:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/ada71975-59e5-3ad1-b65b-dfadb2b9683f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539/fdea7099-d2e5-45e1-8c1e-a8206f549539.crl

            X509v3 Authority Key Identifier:
                keyid:53:19:5B:43:E3:45:6A:E0:13:B2:4D:A8:F8:55:36:67:FC:01:F5:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fdea7099-d2e5-45e1-8c1e-a8206f549539.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.201.46.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:f6:36:bc:d8:24:ec:bf:bc:d2:c6:b6:c5:38:ed:5a:33:eb:
         c6:18:c3:dd:2a:65:c2:15:8d:69:03:85:77:bd:3a:f9:95:5f:
         3b:29:6d:8e:8d:75:57:c0:15:4a:67:99:79:00:db:a8:e8:fa:
         dc:22:3e:3d:4f:cc:c8:19:64:88:a0:c7:2f:ca:2c:90:77:45:
         ab:19:46:ce:db:0c:1a:c3:1f:97:2a:ae:6c:bc:49:88:37:dc:
         99:40:99:f5:6d:97:68:64:af:fe:f1:b5:12:f2:fc:cc:df:27:
         c3:ff:64:3a:74:8a:07:50:b8:27:3b:1a:d4:5e:1f:1a:d3:87:
         48:bc:89:3c:16:13:dc:e7:71:00:68:fb:1a:4f:a3:65:3d:c8:
         13:fc:64:33:5d:76:05:ee:f6:67:4a:88:45:32:c6:1f:33:88:
         ed:19:d0:49:9f:a7:07:4d:59:81:0e:5e:74:a2:c5:15:3a:f3:
         b6:ae:97:8e:17:ba:54:8c:b5:ea:8b:67:52:4d:25:49:3c:bf:
         0c:58:d8:2a:3e:1b:88:f8:dd:e6:ef:51:32:17:79:d4:5e:94:
         dd:25:cc:9f:b1:23:38:d6:c5:07:58:a3:25:1e:21:fd:9e:d4:
         43:b7:a5:4d:7e:d4:9d:d6:5e:6a:a5:c0:1e:7e:c1:f8:7c:d7:
         80:c9:26:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:02 2025 by rpki-client