Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80790ace-ac27-30fb-9cc3-52427d7c547b.roa
File:                     80790ace-ac27-30fb-9cc3-52427d7c547b.roa (raw, json)
Hash identifier:          8bv+YEAEXSYOBZNzY8U19emmP3qDn5JOeBiZKq8PuHY=
Subject key identifier:   BA:13:C2:49:38:2D:CF:E6:D5:D3:18:0D:2A:A1:2A:F2:BF:11:62:CC
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285848D6A9E2923B73576B3B067168
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80790ace-ac27-30fb-9cc3-52427d7c547b.roa
Signing time:             Mon 10 Feb 2025 17:32:10 +0000
ROA not before:           Mon 10 Feb 2025 17:32:10 +0000
ROA not after:            Sun 11 May 2025 16:32:10 +0000
asID:                     174
IP address blocks:        64.4.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:a9:e2:92:3b:73:57:6b:3b:06:71:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Feb 10 17:32:10 2025 GMT
            Not After : May 11 16:32:10 2025 GMT
        Subject: CN=6b724a97-3619-4595-b5e5-03d5f845d8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f5:ed:49:5b:37:77:11:1a:1a:ee:f6:e6:89:
                    93:69:af:52:c2:b0:00:65:49:77:7f:2a:c5:14:0e:
                    c1:a8:e4:1f:1a:6c:bc:2d:23:ef:55:f1:a9:dc:d4:
                    93:19:8f:3f:41:80:e5:7d:c7:1c:2e:72:22:d5:9a:
                    c2:fc:94:91:38:ac:21:e8:98:f7:00:03:66:d5:10:
                    15:4e:d2:6d:56:8e:f3:57:b9:e8:48:57:6f:56:b5:
                    7f:e8:68:b7:4f:e2:f8:dd:ef:15:da:61:75:24:bf:
                    c3:38:c9:09:aa:9c:82:5c:bf:1c:3f:87:f4:45:29:
                    ec:a7:3c:83:da:5e:a3:f7:00:0e:f4:32:c0:85:6e:
                    95:4f:e6:05:f6:2c:cf:ee:14:3f:f8:3f:05:34:c0:
                    32:24:7c:74:df:8d:21:fe:47:ed:f5:1a:7a:be:f9:
                    bd:35:4b:54:79:f5:d4:f3:72:8a:16:ec:50:55:4a:
                    1c:68:d0:df:d1:79:35:ab:2b:47:e3:dd:38:96:ee:
                    55:87:af:ed:49:23:7a:43:55:b2:87:39:66:94:a0:
                    c4:a7:6f:84:7b:24:b4:ca:d4:fa:82:c1:b0:47:91:
                    c2:7b:34:b7:30:b6:33:ac:e8:2b:03:b9:2c:b8:7a:
                    ef:b1:ee:37:bb:ac:81:17:17:cb:7a:5a:d6:50:d6:
                    e4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:13:C2:49:38:2D:CF:E6:D5:D3:18:0D:2A:A1:2A:F2:BF:11:62:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/80790ace-ac27-30fb-9cc3-52427d7c547b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f2:28:12:7a:77:30:c4:7e:4a:0e:4c:62:c4:8c:00:3b:b8:
         1b:cd:09:76:59:53:a0:a9:3f:bb:c8:85:e9:81:b3:8a:20:06:
         a7:c7:49:84:36:35:a6:bd:56:6c:6b:13:60:d4:05:60:92:44:
         3d:3e:e1:55:f7:8c:f8:f6:f2:23:de:72:dc:fa:08:7c:95:6a:
         b3:f7:06:d8:77:41:e4:f3:3c:93:b4:5f:bc:d8:f3:92:57:c4:
         a2:13:1b:8c:1f:9d:71:aa:c2:b7:7e:c5:c5:4b:25:cf:a9:3b:
         18:bb:18:a8:88:5b:68:46:26:49:a5:e4:0c:e6:c0:73:51:aa:
         1a:c5:6f:6d:74:9f:99:ed:e0:c2:e9:48:83:8f:18:c5:0e:37:
         4c:6d:f6:8d:6f:70:97:cc:c5:1c:0a:db:40:42:06:47:74:1b:
         1e:7c:09:51:f3:c3:b9:6a:22:9e:f4:7c:8c:c8:4c:8e:40:2f:
         06:91:29:f7:ed:19:57:89:32:bf:b2:93:4c:6d:1e:5d:98:3d:
         c5:84:4b:80:23:c0:b3:b3:70:b1:94:c2:20:4a:e3:fd:24:87:
         33:9d:93:2a:fc:50:37:88:f4:35:ae:b3:ac:01:ac:90:3b:ea:
         91:c4:a5:09:8b:df:4d:22:9c:10:0a:de:e1:5f:28:b7:f0:c9:
         2f:c9:38:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:01:46 2025 by rpki-client