Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa
File:                     745cf059-f6d3-336e-a7cf-2547681d7221.roa (raw, json)
Hash identifier:          Se5UBOTBAAmVwBG7RrVYNJaOkK868Y3Ksadvn41+Bpw=
Subject key identifier:   0A:89:80:4F:F1:41:F6:81:05:02:FF:4E:9F:66:37:8F:A4:D3:51:2A
Certificate issuer:       /CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
Certificate serial:       010D0C9F43285848100A750E6D6EE5CC33A6DD00
Authority key identifier: 06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        165.224.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:75:0e:6d:6e:e5:cc:33:a6:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e39425c5-52e8-4eac-9e1d-b07079c84d7b
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=b67a1181-914b-4894-827c-c0c232bc4d8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:2d:1e:5e:1c:ca:5a:d9:73:ec:31:f9:df:
                    a4:75:53:b2:34:52:b7:d9:ad:a1:d2:6c:e3:3a:77:
                    8f:67:04:54:95:71:6f:c5:31:b6:ff:e8:20:76:7b:
                    3d:81:7b:4f:15:58:2d:fb:6e:42:cf:af:ff:9e:fe:
                    21:0b:14:57:9e:08:e9:55:16:9a:b6:b3:9d:a9:eb:
                    2a:7a:c5:a6:79:dd:c0:28:c0:a8:e3:a8:d8:3b:56:
                    e5:e3:1a:43:89:e7:8a:f8:83:c6:ee:6f:42:74:7b:
                    b6:ee:f3:9e:a2:61:66:a9:e7:87:03:64:10:6d:69:
                    7b:8e:31:54:9e:61:3c:e6:14:20:6a:86:89:ff:1d:
                    f0:cd:29:63:3a:c4:f2:04:cb:97:68:26:14:29:43:
                    42:76:d0:dd:b9:b2:e8:f6:73:d2:37:46:b4:7a:d1:
                    b6:10:51:6a:d7:f5:e8:08:83:cc:67:51:e5:f7:44:
                    29:f5:87:04:e3:39:5d:a3:1b:89:be:c0:12:83:2e:
                    e4:a7:39:50:57:95:d1:6d:39:48:a4:68:d1:89:d9:
                    d8:a8:fb:64:55:47:71:bc:56:c2:47:ab:2b:4a:07:
                    0d:3e:3f:70:27:0b:d1:c8:74:55:a7:3a:8b:18:35:
                    63:5e:56:83:e9:e1:e1:2d:f6:e2:14:b5:8e:d0:cf:
                    0a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:89:80:4F:F1:41:F6:81:05:02:FF:4E:9F:66:37:8F:A4:D3:51:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/745cf059-f6d3-336e-a7cf-2547681d7221.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b/e39425c5-52e8-4eac-9e1d-b07079c84d7b.crl

            X509v3 Authority Key Identifier:
                keyid:06:21:87:7B:4F:EF:91:DA:86:4D:F7:17:D1:1F:D1:18:D2:B2:53:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e39425c5-52e8-4eac-9e1d-b07079c84d7b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.224.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:2c:18:81:e9:20:ee:fb:dd:14:5d:2b:f7:92:29:cc:da:d3:
         df:53:91:2e:5a:f0:2b:7e:d0:e0:b1:8d:84:13:96:b5:9d:c4:
         a7:d9:bc:be:e2:85:f9:8a:c2:ea:14:cb:ac:5e:b5:72:9b:68:
         b0:ab:15:90:42:48:f0:bc:5a:2e:79:9b:ab:36:69:a7:00:55:
         60:e1:c7:47:ba:bf:fc:20:2f:1b:dd:9a:32:6c:7f:d9:92:96:
         6c:6d:b8:f8:c2:47:91:81:3e:26:7b:77:42:81:ed:06:9d:d2:
         7f:7c:c8:ce:8a:35:49:0a:a0:01:49:fd:10:dc:b6:28:7e:19:
         cf:e6:60:99:0f:1e:88:31:2a:c9:87:76:5d:34:4e:62:63:69:
         05:e4:86:20:f9:73:15:56:25:e4:5a:26:67:6f:08:b3:26:29:
         b1:3d:42:fe:84:37:31:fd:1c:39:a9:24:ef:99:bd:50:f6:d6:
         2c:65:24:6b:bb:a7:a1:83:de:ef:a0:ec:7d:b6:3c:12:94:10:
         9f:c9:e5:14:c2:be:f1:22:b4:b0:13:a8:b6:34:f1:52:5e:94:
         af:5d:b0:e1:b0:4e:19:49:50:6e:23:96:59:5d:77:69:29:cb:
         f2:ee:d8:cb:f1:88:2b:c2:b7:79:81:f5:9e:b5:40:5c:2e:eb:
         71:5e:aa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:31 2025 by rpki-client