Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa
File:                     66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa (raw, json)
Hash identifier:          56JcQ5vqa3ncXOA5FuhOZTNank6qfRk0AVUgHm+X/bQ=
Subject key identifier:   F4:63:8B:EC:D5:50:FA:9D:95:65:77:1E:C9:8D:42:BC:95:D5:DF:28
Certificate issuer:       /CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
Certificate serial:       010D0C9F432858487DD56A5E5098C645A5952740
Authority key identifier: 1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa
Signing time:             Thu 09 Jan 2025 21:52:56 +0000
ROA not before:           Thu 09 Jan 2025 21:52:56 +0000
ROA not after:            Wed 09 Apr 2025 20:52:56 +0000
asID:                     397376
IP address blocks:        142.202.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7d:d5:6a:5e:50:98:c6:45:a5:95:27:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cf06829-25a9-43c5-8a21-38599a1fb23f
        Validity
            Not Before: Jan  9 21:52:56 2025 GMT
            Not After : Apr  9 20:52:56 2025 GMT
        Subject: CN=ffa73a7f-a066-4da5-b83b-e7b3fbe1bcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:5d:27:8d:79:17:ec:8a:c8:1c:b0:56:0d:84:
                    47:ea:f8:30:9d:ef:4e:ee:ba:fd:d4:b3:11:3b:42:
                    86:23:b0:75:12:2e:cd:a2:6c:6b:db:be:25:09:62:
                    e2:7f:42:17:50:28:56:7c:49:88:0f:56:80:be:9b:
                    74:8b:af:c5:f5:ca:09:97:93:3c:75:8f:ab:e6:55:
                    09:cc:14:52:8d:ae:ef:67:c2:a1:e1:26:c1:fb:0e:
                    86:ac:ca:28:49:af:70:a6:80:da:3c:8a:7f:db:70:
                    dd:14:75:1e:2e:dc:ea:0a:b2:33:fa:2a:c9:47:0d:
                    af:65:e4:0e:86:25:df:c5:92:db:f4:8c:7f:23:c6:
                    39:fc:a8:2a:dc:4f:ed:64:77:a2:63:48:fd:0e:24:
                    4c:18:ee:9a:f5:0c:f3:c0:e1:66:ad:38:d5:6d:37:
                    79:12:6a:da:61:36:d1:9b:53:5c:29:02:56:66:49:
                    ed:cf:24:55:c4:6d:cb:a5:32:5b:60:a5:29:58:cd:
                    b6:25:dc:0d:e4:7f:4c:0f:99:2a:2f:c8:12:f5:da:
                    83:65:53:a7:cc:12:1f:a9:54:ff:62:0a:dc:02:56:
                    73:df:62:94:42:df:fa:a2:2a:0e:68:a2:1e:33:e0:
                    d9:67:13:be:1b:f7:2a:5a:e3:fa:57:29:ea:22:3a:
                    6d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:63:8B:EC:D5:50:FA:9D:95:65:77:1E:C9:8D:42:BC:95:D5:DF:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/66b5b82a-36b3-3a97-a9d7-81ea8dad7eb5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f/5cf06829-25a9-43c5-8a21-38599a1fb23f.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D9:E9:E3:A1:33:F1:2A:E1:D0:E5:46:B8:F3:20:DB:A1:1B:6D:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5cf06829-25a9-43c5-8a21-38599a1fb23f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:28:6d:68:16:7e:f8:95:59:50:be:0c:75:dd:7b:e5:bb:b6:
         0c:ce:50:55:b1:57:d3:6a:a1:c8:55:b5:4b:a4:03:c7:9e:4f:
         69:09:97:6f:74:2c:16:c1:35:e3:cf:b4:02:17:f8:1c:7b:c9:
         cf:20:06:f2:f2:88:98:6c:30:aa:36:97:34:dc:b7:b6:30:d9:
         93:89:16:19:f2:21:c7:d2:f4:07:2a:a9:aa:8f:a8:a7:27:2c:
         df:fe:a8:c4:90:29:29:ec:85:56:18:26:4c:b6:6f:2a:8c:83:
         1d:cf:9d:37:63:4e:69:13:49:57:ec:d0:54:ac:53:68:78:ef:
         d6:9c:15:d4:1a:21:dd:2a:dd:24:2b:ee:77:2f:4f:7f:25:bb:
         71:c1:c2:6e:db:bc:46:1d:d4:7b:12:c0:21:b3:4e:90:d8:a2:
         bb:7f:1e:b7:5f:48:0d:6d:06:f5:fe:27:22:30:39:04:6e:56:
         86:05:4a:16:a3:56:3f:c8:b6:53:b1:72:c6:4e:1a:9d:e8:e9:
         67:e5:64:e2:fa:8b:67:e6:04:9a:5b:64:ea:8b:69:05:33:48:
         ba:fb:5e:0a:ab:8f:43:ee:99:70:c5:0e:03:b3:da:19:9b:96:
         71:93:fd:94:47:78:98:93:47:91:e6:f5:95:24:1a:75:15:9a:
         76:49:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:39:18 2025 by rpki-client