Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
File:                     4107572f-7f73-39cf-a83b-21e385062b8e.roa (raw, json)
Hash identifier:          tdBa4kY6wPoDX8wDYYwB4qfDxcvH+D1VVcHmQpl5kOI=
Subject key identifier:   2C:28:5A:F4:37:07:40:A8:4C:51:1F:D8:27:D9:7A:28:9B:A5:56:DE
Certificate issuer:       /CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
Certificate serial:       010D0C9F432858491C0C1F238D28AC511105CC00
Authority key identifier: 33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa
Signing time:             Fri 07 Mar 2025 14:00:52 +0000
ROA not before:           Fri 07 Mar 2025 14:00:52 +0000
ROA not after:            Thu 05 Jun 2025 13:00:52 +0000
asID:                     6939
IP address blocks:        173.249.230.0/24 maxlen: 32
                          173.249.235.0/24 maxlen: 32
                          173.249.240.0/24 maxlen: 32
                          173.249.245.0/24 maxlen: 32
                          173.249.250.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1c:0c:1f:23:8d:28:ac:51:11:05:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=533bea0e-cd52-49a8-9cca-a05cc33ce073
        Validity
            Not Before: Mar  7 14:00:52 2025 GMT
            Not After : Jun  5 13:00:52 2025 GMT
        Subject: CN=b9152ae3-fe14-47c1-8770-7825246a6fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:90:f5:d6:8d:b5:e7:d5:aa:41:aa:33:2e:91:
                    09:b3:df:bc:07:ab:ba:21:c7:12:4c:96:21:32:85:
                    3b:bd:d8:c9:51:6b:bd:47:16:2d:cb:30:c2:ee:96:
                    69:c5:c8:d1:cb:67:d5:9a:93:ba:bc:84:ec:51:75:
                    22:f6:8f:d2:6c:30:25:49:20:00:0f:ea:6f:e5:07:
                    4f:53:a7:b8:dc:2f:7a:d3:99:18:0e:87:63:ac:66:
                    9f:e5:d4:6c:a8:23:0d:70:2b:56:83:57:36:cd:e0:
                    c9:c3:1b:16:bf:d8:ae:2e:47:44:02:62:9d:24:2a:
                    4d:2d:38:50:63:68:a6:56:33:30:d9:ab:c6:60:89:
                    c8:0c:9d:ba:ee:5d:5a:96:fb:b4:31:6e:05:56:1e:
                    d9:ee:d8:8c:f8:9a:d3:bb:d2:97:b9:96:f8:d2:a6:
                    05:30:a0:25:f6:36:e4:fb:2a:ed:5c:41:c7:7b:8a:
                    98:2a:1a:9a:24:d2:d6:b6:30:4b:a3:f8:0a:44:c2:
                    03:4d:6e:ff:d9:d7:86:7c:cb:0f:62:c5:2c:0d:6d:
                    86:ec:ed:25:a5:73:94:c3:06:ef:b9:25:88:fe:39:
                    bf:d0:37:36:cb:a8:2b:9c:87:a6:68:40:0c:60:84:
                    23:16:cd:7d:f3:75:b0:66:4f:90:c3:4d:64:de:16:
                    87:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:28:5A:F4:37:07:40:A8:4C:51:1F:D8:27:D9:7A:28:9B:A5:56:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/4107572f-7f73-39cf-a83b-21e385062b8e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073/533bea0e-cd52-49a8-9cca-a05cc33ce073.crl

            X509v3 Authority Key Identifier:
                keyid:33:18:BF:25:9A:A7:B2:43:AA:A8:B2:C2:1D:7C:A3:8F:E9:B3:65:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/533bea0e-cd52-49a8-9cca-a05cc33ce073.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.230.0/24
                  173.249.235.0/24
                  173.249.240.0/24
                  173.249.245.0/24
                  173.249.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:d6:e9:7e:6f:a9:8c:f0:f1:d2:ce:ef:4f:10:62:2e:21:03:
         10:fb:3d:d4:af:10:a7:c3:b5:c4:f6:00:fa:b9:94:24:77:89:
         70:9c:f0:7f:df:a7:d7:d3:7e:01:43:b8:8a:68:1f:3f:44:bd:
         ae:83:2d:4f:3f:51:3e:b0:de:1c:d2:88:03:53:25:0a:f7:69:
         5d:3e:bf:ac:06:50:5d:c5:61:13:1d:93:7e:a0:5b:1e:73:05:
         cb:50:92:7b:fa:c5:8a:35:04:e6:25:6d:e6:af:4d:b4:30:99:
         1a:4a:ce:e0:34:81:31:5c:5b:9d:f5:69:a4:18:2f:64:19:94:
         58:ad:fc:de:0c:dc:d5:a1:87:c5:5f:36:5e:3e:37:d5:17:c9:
         4f:d7:46:d9:07:41:d9:43:b3:e0:a8:cc:14:3d:aa:f4:df:7d:
         8c:94:12:a3:a0:87:a9:84:fe:d5:35:fe:19:1c:4d:bd:2c:9c:
         b4:2e:f8:b1:07:a7:54:96:51:fc:c8:20:9b:d3:04:91:fa:82:
         d8:c9:a2:e6:df:b6:e7:42:25:3e:fb:54:b4:70:46:d6:04:0e:
         97:60:67:9d:ba:a8:a3:b2:b9:4e:4d:ba:6e:1c:95:13:2e:49:
         7c:c5:bf:ae:3d:64:30:b1:7c:fd:de:f8:1d:46:13:be:4d:86:
         da:cc:7b:c0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:47:09 2025 by rpki-client