Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa
File:                     3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa (raw, json)
Hash identifier:          /ZEqp2EW3+HSQzJgklsksO++gj52OrynWo2xcgd2VNc=
Subject key identifier:   5D:59:F2:C2:28:DA:18:C2:CC:BA:B9:10:76:CA:E0:57:98:12:01:18
Certificate issuer:       /CN=761633ef-0fb8-4855-a42b-c999cd4782b5
Certificate serial:       010D0C9F43285848ED683B07DEB303F086EE0F50
Authority key identifier: A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa
Signing time:             Tue 18 Feb 2025 21:03:29 +0000
ROA not before:           Tue 18 Feb 2025 21:03:29 +0000
ROA not after:            Mon 19 May 2025 20:03:29 +0000
asID:                     396040
IP address blocks:        66.196.32.0/20 maxlen: 20
                          67.226.217.0/24 maxlen: 24
                          161.199.104.0/24 maxlen: 24
                          162.142.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:68:3b:07:de:b3:03:f0:86:ee:0f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=761633ef-0fb8-4855-a42b-c999cd4782b5
        Validity
            Not Before: Feb 18 21:03:29 2025 GMT
            Not After : May 19 20:03:29 2025 GMT
        Subject: CN=dc4d2b61-9682-4f0b-adb4-d85955236456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b9:04:f7:42:7d:c3:7a:87:ce:f6:ab:fd:e7:
                    a7:b8:3a:44:2d:d3:00:e9:80:74:a0:3a:77:c9:a8:
                    2a:12:99:a1:71:91:ab:f7:50:f9:35:9f:bb:02:e5:
                    c2:87:7b:19:87:8e:b9:6a:49:81:bf:3c:7d:ce:88:
                    87:8f:cc:05:55:a1:2e:60:8c:8c:c4:1b:ed:6a:f0:
                    3d:53:2a:00:25:69:0a:f3:17:c7:d6:44:36:50:37:
                    c5:f8:f6:c4:e7:5d:c6:eb:3c:03:ad:56:e2:cd:40:
                    7a:b7:0c:88:47:c3:8c:70:5d:aa:fb:f8:78:a4:0f:
                    5f:b0:e5:72:22:f8:cc:d7:6b:a0:ba:ee:f1:77:30:
                    c0:50:74:00:b9:f7:f2:9a:4c:0c:41:2a:cd:c1:5b:
                    d5:76:01:7f:8f:ca:da:e7:43:60:a7:be:8c:b3:a0:
                    17:b6:aa:ee:42:36:b9:69:38:a7:ad:af:ea:61:c4:
                    eb:7a:ea:91:24:c2:9b:82:63:cf:2d:ad:5c:95:b9:
                    45:e5:ea:ac:6d:8b:e2:8b:a0:83:6c:e6:46:79:ea:
                    97:a5:5f:43:8c:7e:a3:06:78:ba:38:1e:10:15:78:
                    05:8e:a4:43:3f:87:c5:c3:bd:fb:be:05:93:9e:35:
                    2b:27:61:43:7a:f7:55:62:9c:8f:b1:51:85:b8:f1:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:59:F2:C2:28:DA:18:C2:CC:BA:B9:10:76:CA:E0:57:98:12:01:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/3d01ad4f-9c12-32d9-b706-856b6cea5f06.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5/761633ef-0fb8-4855-a42b-c999cd4782b5.crl

            X509v3 Authority Key Identifier:
                keyid:A0:6F:78:7C:3B:42:5D:C9:68:13:88:03:00:C3:1E:2F:C1:49:7A:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/761633ef-0fb8-4855-a42b-c999cd4782b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.196.32.0/20
                  67.226.217.0/24
                  161.199.104.0/24
                  162.142.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:cd:c3:8f:40:67:cc:a1:4a:98:57:43:24:68:c1:69:8d:88:
         4e:28:ac:47:d4:9f:80:04:61:68:0e:a8:ee:09:84:55:35:bb:
         31:b6:fd:ad:80:ff:2c:fa:95:9a:42:ad:84:9e:a5:76:89:63:
         50:ed:f8:eb:79:58:16:4e:8f:6b:fa:88:69:6a:62:4b:0f:2e:
         3e:51:c1:a3:70:23:82:96:17:2a:3d:9a:e9:62:14:fd:3b:cd:
         5a:37:7f:a9:7f:97:06:3f:67:00:91:86:32:45:25:53:4c:a0:
         4a:16:8e:64:8d:75:8e:c5:78:87:eb:90:74:ac:a0:07:92:a6:
         37:8d:0e:a3:21:8c:9d:44:dd:fd:91:bf:d0:a7:7a:29:b6:20:
         86:b2:93:1a:d9:50:36:86:07:a7:f7:5e:b5:0f:a4:96:31:ef:
         1e:c4:fe:6d:fb:63:29:02:41:82:75:29:77:85:7e:34:a8:9f:
         47:90:66:82:a8:a4:97:49:62:1c:ef:84:fb:08:7b:be:cc:03:
         2e:a6:b7:43:9e:cb:88:05:d5:58:ee:05:26:0e:88:6d:cb:27:
         d1:9d:3d:14:36:5f:a3:62:7b:3f:8a:4a:de:86:90:db:47:dc:
         cd:4f:2c:8c:33:2d:ea:ac:36:85:96:78:d3:4f:85:71:88:71:
         e0:05:84:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:37:36 2025 by rpki-client