Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/80c858ba-471c-36e6-8f75-0ecb0a8860ae.roa
File:                     80c858ba-471c-36e6-8f75-0ecb0a8860ae.roa (raw, json)
Hash identifier:          pvySLfX6L00qGdbYSTyXrwkU4js3rP+F+GGuDlC+Zbk=
Subject key identifier:   FA:C1:6D:64:E8:41:F0:4C:11:66:A0:78:A6:3B:6E:D0:73:D4:1C:89
Certificate issuer:       /CN=ce94afc7-3d50-4fb3-9677-616d7c1cc36f
Certificate serial:       010D0C9F4328584921840748E4DD975A29052500
Authority key identifier: D0:4B:48:93:A4:83:4F:D8:8C:A7:D9:E6:E5:10:7D:75:2E:26:09:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/80c858ba-471c-36e6-8f75-0ecb0a8860ae.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     399334
IP address blocks:        64.45.181.0/24 maxlen: 24
                          64.52.22.0/23 maxlen: 23
                          64.52.84.0/22 maxlen: 22
                          64.52.108.0/23 maxlen: 23
                          64.52.162.0/23 maxlen: 23
                          64.190.90.0/23 maxlen: 23
                          64.190.202.0/23 maxlen: 23
                          64.190.204.0/23 maxlen: 23
                          216.246.208.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:07:48:e4:dd:97:5a:29:05:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ce94afc7-3d50-4fb3-9677-616d7c1cc36f
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=a7daa659-5bf6-4d89-8abc-8590579ce32c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:3f:3e:7d:d2:49:9a:97:84:58:cd:64:ad:e1:
                    d7:25:c0:4c:11:8f:a4:35:02:d2:13:c9:8e:91:4d:
                    da:62:e5:58:7f:76:87:e1:9b:39:d6:06:62:26:f0:
                    7a:2c:d4:36:24:43:43:26:48:4b:04:2a:21:cc:2f:
                    15:ab:61:e0:6f:4c:ea:b9:04:42:15:40:c9:88:35:
                    03:eb:06:a5:d6:7a:1c:61:59:e8:3e:67:66:c3:50:
                    ea:a1:5a:b9:f5:75:13:f2:e8:ba:d2:ea:45:9c:7e:
                    45:24:1d:df:c9:2c:d5:7a:63:ce:b2:04:33:4f:9c:
                    94:14:f4:34:46:0c:2b:b3:c2:ba:c0:4c:77:8c:0a:
                    55:3b:12:38:55:3a:48:dd:25:1b:cf:a5:70:75:fa:
                    f6:60:7b:28:ff:0a:33:e5:63:63:c5:1f:c7:3e:5d:
                    f5:4d:b5:86:4f:fd:9b:04:ff:5f:4e:d8:11:6e:4f:
                    21:47:ca:81:50:1b:ca:5f:94:11:c3:e4:ec:a1:62:
                    aa:b8:e8:15:f0:00:61:7a:47:d8:d1:70:03:5b:67:
                    23:9c:5f:0e:6e:2a:84:c2:c6:c4:88:0a:49:f9:9b:
                    ca:09:b4:33:c1:a4:72:54:48:0a:4e:07:f8:98:2f:
                    07:61:e1:9b:f5:0e:2e:95:49:1a:54:7d:99:de:d4:
                    78:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:C1:6D:64:E8:41:F0:4C:11:66:A0:78:A6:3B:6E:D0:73:D4:1C:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/80c858ba-471c-36e6-8f75-0ecb0a8860ae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.crl

            X509v3 Authority Key Identifier:
                keyid:D0:4B:48:93:A4:83:4F:D8:8C:A7:D9:E6:E5:10:7D:75:2E:26:09:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ce94afc7-3d50-4fb3-9677-616d7c1cc36f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.45.181.0/24
                  64.52.22.0/23
                  64.52.84.0/22
                  64.52.108.0/23
                  64.52.162.0/23
                  64.190.90.0/23
                  64.190.202.0-64.190.205.255
                  216.246.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:fc:15:be:b7:7d:f4:d4:15:37:9b:02:1d:a2:a6:60:89:63:
         8f:f6:8c:4c:74:ae:af:e0:ae:26:0c:7b:8c:fd:e9:14:1b:40:
         3e:59:4b:fd:d4:df:54:94:cc:a1:62:f9:41:f7:8d:16:0c:18:
         cd:dd:ca:04:55:23:2a:5f:01:19:7d:7f:0f:a2:23:15:01:1b:
         92:5a:86:16:69:b9:04:cb:31:b7:18:fa:7a:ed:27:f8:ce:16:
         7b:8c:60:2a:6c:c4:47:17:52:7f:6c:ba:9e:86:f1:c4:bb:bf:
         55:52:6b:d2:e0:7a:d5:51:21:15:80:35:41:4c:34:25:91:c8:
         6e:fa:a4:4e:0f:15:31:7a:51:02:e3:bf:c3:06:dc:3a:dc:30:
         cf:13:b5:10:5a:da:20:4c:9b:7b:d6:c1:fb:8c:18:18:bb:9e:
         a1:4c:55:b0:50:fb:07:ba:43:15:e1:de:db:ae:b1:e1:a4:de:
         a4:52:03:fc:99:83:55:4a:38:ba:df:d0:68:16:3a:a4:f0:d4:
         90:ff:b2:5f:92:78:a2:a5:6f:40:c2:5a:84:8a:86:47:96:61:
         3a:01:0d:3a:91:e8:e7:4e:33:09:07:78:8c:f3:35:da:76:e6:
         fb:30:a5:be:5e:37:72:36:58:22:77:85:0b:cf:0f:7a:9d:8c:
         b1:5b:ec:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:39 2025 by rpki-client