Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
File:                     68587886-0724-3bc4-a0f0-ac8745defcc4.roa (raw, json)
Hash identifier:          z0HuT9pMTqIbdd9wPN+m2YD5FDtQF6grnDSSUMG6Plk=
Subject key identifier:   1E:B9:35:48:26:52:94:88:53:B0:26:E5:D5:8B:FB:5B:B8:39:CF:A8
Certificate issuer:       /CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
Certificate serial:       010D0C9F432858487A20869EA377E63B2AB44080
Authority key identifier: 5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa
Signing time:             Wed 08 Jan 2025 14:00:51 +0000
ROA not before:           Wed 08 Jan 2025 14:00:51 +0000
ROA not after:            Tue 08 Apr 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        172.83.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7a:20:86:9e:a3:77:e6:3b:2a:b4:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e
        Validity
            Not Before: Jan  8 14:00:51 2025 GMT
            Not After : Apr  8 13:00:51 2025 GMT
        Subject: CN=c993eb46-8141-44b7-b138-17922054d2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a0:61:a0:de:8b:47:da:3c:4f:a3:bc:0c:e1:
                    50:48:1a:f3:bc:85:8a:73:23:10:ca:6e:b9:a7:ec:
                    a8:0a:7b:cb:39:00:df:ed:96:fa:b3:ce:9d:b6:4d:
                    58:4f:5c:83:94:2e:3c:e1:29:d4:a0:ed:34:87:cd:
                    50:ef:97:11:19:2f:8b:56:dc:6f:1d:cc:14:89:4d:
                    92:81:00:2f:5f:8b:af:cc:25:7d:2f:94:9f:8b:0e:
                    05:fd:2a:82:c5:2b:20:12:5e:5b:26:06:b3:d6:71:
                    45:0c:b5:e8:12:d9:77:c2:e7:56:9c:a8:9b:28:f0:
                    07:4e:c4:e9:38:0c:fe:34:62:9b:21:74:49:ef:eb:
                    57:a2:18:5f:11:64:42:3c:65:fc:5c:51:e4:a1:10:
                    76:cb:d1:cf:f5:97:7e:60:6a:6d:84:2f:8a:3f:35:
                    94:0a:5d:12:73:8e:33:94:6d:6e:4e:d8:e4:ae:bd:
                    ea:1e:c3:07:d2:1b:f8:1d:31:df:49:27:c1:79:79:
                    08:ad:cb:6f:26:ba:d3:97:a8:95:c2:dd:83:44:aa:
                    8c:b7:a8:c0:d3:e8:7f:72:a2:fd:e8:b2:01:65:88:
                    d8:65:ec:31:ee:8e:3c:ce:e4:70:99:03:1f:a9:d3:
                    b6:dc:0b:8c:8b:c5:4c:fd:f4:59:2e:d4:ca:ec:d1:
                    62:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B9:35:48:26:52:94:88:53:B0:26:E5:D5:8B:FB:5B:B8:39:CF:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/68587886-0724-3bc4-a0f0-ac8745defcc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.crl

            X509v3 Authority Key Identifier:
                keyid:5E:79:AD:88:68:E4:EE:11:F3:E4:DB:6E:8F:CE:E0:30:BE:FD:D5:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/2e81ab17-e9ec-4223-ba5e-d6e26a69cd9e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.83.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:51:aa:bc:42:d2:f0:f3:ba:95:e0:87:78:78:fe:bb:f2:36:
         a1:8d:c8:63:c4:c1:98:bb:8a:41:40:5c:44:4a:25:b8:19:40:
         07:43:7a:53:ac:14:41:8f:12:19:e2:ca:3f:2d:3f:f5:8b:d2:
         75:41:77:ca:ba:bd:7e:7d:40:a3:38:b1:37:3d:07:10:63:b7:
         d2:7c:0d:81:dd:ea:39:1f:22:31:3e:3e:5b:cc:c5:36:0b:fa:
         03:42:59:6c:3a:32:a8:f8:6f:07:b1:20:f7:9a:51:f7:73:ce:
         06:be:95:3c:cd:da:12:c5:e1:68:d6:e0:fc:49:ac:64:69:57:
         31:96:63:5e:01:78:78:d3:bf:00:88:21:50:68:ab:63:62:4e:
         ac:77:ed:5a:18:bd:a2:ed:4a:97:68:79:46:a7:96:d9:67:74:
         c9:7d:4a:e0:5d:e3:93:e4:47:13:12:04:64:c3:9e:2d:96:fa:
         68:8a:68:48:2b:a6:13:de:7c:7b:ae:d4:42:82:d0:78:3c:72:
         38:5f:3d:31:0d:d9:5d:cb:4e:64:50:1e:85:d3:51:84:1e:24:
         23:9f:c2:97:98:e3:72:98:33:f0:bd:88:8e:1d:3f:75:ae:cf:
         a7:6f:4e:52:4b:1f:93:62:31:30:e9:11:59:0d:fd:8b:56:43:
         bc:1c:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:16 2025 by rpki-client