Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52315453-deaa-3a0c-ab4b-045963d84919.roa
File:                     52315453-deaa-3a0c-ab4b-045963d84919.roa (raw, json)
Hash identifier:          OVLOa/ip1K97qFXorzdMg9EonPpsT6MTtL/i5BM0zuI=
Subject key identifier:   C3:70:F9:39:38:21:31:7A:33:AD:86:94:67:2A:7F:1F:2F:B4:B7:06
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AB599ACB61652814BE80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52315453-deaa-3a0c-ab4b-045963d84919.roa
Signing time:             Thu 23 Jan 2025 06:13:21 +0000
ROA not before:           Thu 23 Jan 2025 06:13:21 +0000
ROA not after:            Wed 23 Apr 2025 05:13:21 +0000
asID:                     16591
IP address blocks:        136.50.96.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ab:59:9a:cb:61:65:28:14:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:21 2025 GMT
            Not After : Apr 23 05:13:21 2025 GMT
        Subject: CN=c4fdc3fa-0b96-4582-89cb-289dae125829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:26:4b:89:39:bb:21:1f:2c:f9:7d:0c:c7:4d:
                    f9:05:c9:eb:2c:69:a7:46:1f:27:73:c9:e9:8d:fc:
                    19:06:28:40:98:32:f2:75:c1:75:ac:c4:76:2b:9f:
                    4b:0b:34:1b:d1:14:b1:9b:a5:0c:4d:bf:f7:6a:6c:
                    8b:0b:02:b6:85:ee:27:2d:7b:bb:aa:10:d4:06:5c:
                    9d:7b:05:d0:a4:00:d5:71:c9:8a:a6:23:25:a2:a3:
                    ad:e9:03:f1:8b:8d:2d:63:d4:cb:0f:91:e7:80:91:
                    c9:de:ab:66:b6:2e:17:6b:10:35:0d:bb:92:ef:76:
                    1c:7c:f6:37:10:a8:c9:b0:4a:9d:f9:e4:bb:d0:b8:
                    74:39:ca:98:25:02:1b:14:cd:15:e5:74:6a:65:43:
                    1f:09:6a:78:8f:89:32:d1:0f:58:e5:25:7b:3b:b0:
                    07:2d:dc:bc:0d:91:0a:e5:45:1b:09:3a:40:bc:2a:
                    b8:93:62:48:40:2f:dc:14:c1:e2:b7:86:78:67:5c:
                    b1:34:76:04:a9:dd:0a:a6:9d:3c:95:07:b6:39:f4:
                    a6:95:52:53:43:94:fc:61:08:b9:2f:ff:5a:ca:a3:
                    ca:cd:7e:29:82:16:8e:4f:28:29:49:7e:45:f3:f6:
                    57:5b:3c:a4:2e:02:bc:e7:52:3b:8a:a8:15:34:b2:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:70:F9:39:38:21:31:7A:33:AD:86:94:67:2A:7F:1F:2F:B4:B7:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52315453-deaa-3a0c-ab4b-045963d84919.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.50.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:dd:30:c7:5e:cf:31:fb:08:c3:93:48:37:15:a9:64:4d:97:
         bd:7b:35:b5:ad:ea:b0:89:93:96:74:e1:2c:7f:e5:99:7f:b8:
         24:71:ff:09:db:87:41:8b:14:f7:f0:a4:2c:9a:d4:cb:df:84:
         e0:42:4c:22:ac:e9:0f:bc:a5:15:38:ed:30:87:a3:6b:90:b4:
         6f:77:aa:a3:f5:b8:13:4f:7f:54:f8:b0:2b:8c:57:f4:a3:54:
         7a:8f:95:cb:95:ec:f2:fb:45:56:8a:b5:96:ff:3c:11:07:b8:
         50:c0:3d:70:4a:84:be:36:49:2f:47:cc:f0:9a:5b:b0:12:c7:
         ea:c9:2b:c1:9e:87:8d:ca:ff:88:2e:6b:4f:c0:df:be:6d:dd:
         98:ff:9b:3a:80:35:dd:f9:b3:45:e0:3b:1f:37:57:75:00:20:
         27:6c:1d:16:24:07:aa:1d:1d:e1:46:55:53:49:a3:7a:4b:f7:
         d3:1e:c3:86:2a:cd:6c:76:60:2d:41:eb:d5:dc:76:5c:a7:6e:
         a5:64:e5:a9:97:bc:a9:9c:41:3e:84:16:68:37:2d:07:69:00:
         6c:37:cc:15:fb:36:f8:af:4e:ac:32:01:7d:51:49:c1:f0:19:
         59:b6:29:fc:01:31:ab:6e:87:af:3b:a7:25:55:9d:7c:60:f3:
         19:1e:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:41:22 2025 by rpki-client