Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
File:                     746d32d6-cdae-3263-a43d-4fe067b49807.roa (raw, json)
Hash identifier:          rS1qWxb+j8fRhPObvTvv2Wm3nZmNN9Iiv+IlKpK83ac=
Subject key identifier:   D4:9E:E2:71:C6:E8:DA:BA:C4:8E:46:1F:35:05:46:AF:FB:EA:C0:05
Certificate issuer:       /CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
Certificate serial:       010D0C9F43285849298F96848019527A67658F00
Authority key identifier: 19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa
Signing time:             Wed 12 Mar 2025 10:11:17 +0000
ROA not before:           Wed 12 Mar 2025 10:11:17 +0000
ROA not after:            Tue 10 Jun 2025 10:11:17 +0000
asID:                     62874
IP address blocks:        45.41.128.0/22 maxlen: 22
                          45.41.140.0/22 maxlen: 22
                          142.147.224.0/20 maxlen: 20
                          142.147.248.0/21 maxlen: 21
                          162.249.164.0/22 maxlen: 22
                          167.160.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:29:8f:96:84:80:19:52:7a:67:65:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2
        Validity
            Not Before: Mar 12 10:11:17 2025 GMT
            Not After : Jun 10 10:11:17 2025 GMT
        Subject: CN=d79ad5e3-e524-481a-86f9-60ca679af279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f0:92:20:b2:5c:45:68:c7:d0:e7:e6:ff:93:
                    e0:d0:e8:cc:9c:f8:b0:98:d0:84:fc:4d:54:f8:ed:
                    84:41:dc:91:a8:9b:ce:ab:76:ac:ad:75:38:b7:ec:
                    63:fc:27:02:46:f0:75:74:5b:5b:8c:d8:50:79:fd:
                    32:a8:1b:fc:0f:f3:9e:78:34:67:7b:29:38:c6:a5:
                    d7:67:60:e7:c8:7e:6d:92:c2:1d:28:db:6f:78:32:
                    60:91:d7:61:d7:fa:a1:02:74:bf:9f:a2:6b:3b:6d:
                    6d:99:9f:6d:da:04:70:52:d8:b1:45:a8:29:95:7a:
                    44:0a:b2:a4:59:13:de:2f:00:5f:9d:0f:37:6a:eb:
                    75:ab:04:c1:23:6b:31:4c:9e:e3:ac:7c:b9:a7:41:
                    5c:f3:76:a1:3c:a2:8f:35:ee:ce:63:91:12:7c:09:
                    5d:b8:e2:70:b8:83:6c:a8:9f:60:5f:dc:de:30:73:
                    cd:71:e4:6b:dd:6d:10:45:83:55:76:40:36:7b:f8:
                    d9:29:96:16:b7:f9:64:ab:05:8c:ab:3b:07:e4:c0:
                    88:63:1f:c3:f4:80:53:56:0a:0b:d6:83:ba:4a:89:
                    8b:46:04:a1:40:de:9d:db:55:39:97:ba:98:8f:ba:
                    9b:3e:07:ae:ee:cd:40:76:b9:c4:27:4f:15:2a:5d:
                    2b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9E:E2:71:C6:E8:DA:BA:C4:8E:46:1F:35:05:46:AF:FB:EA:C0:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/746d32d6-cdae-3263-a43d-4fe067b49807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.crl

            X509v3 Authority Key Identifier:
                keyid:19:E9:04:44:F4:A8:F5:DA:05:93:6E:23:2E:65:34:63:37:9E:BB:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/df7999c8-e4a5-45fc-9cc2-c4fe7f18bfe2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.41.128.0/22
                  45.41.140.0/22
                  142.147.224.0/20
                  142.147.248.0/21
                  162.249.164.0/22
                  167.160.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:5d:9b:cc:69:9c:b7:30:7e:06:fe:0a:dd:eb:72:92:af:
         24:5c:21:06:29:86:e3:89:a0:5c:4d:91:d3:60:b6:f6:e1:c1:
         69:55:93:3e:d2:49:79:96:51:d0:9d:e0:08:62:1a:87:91:9e:
         66:bd:4b:dc:68:eb:35:95:6c:b9:80:84:74:03:fa:34:d5:17:
         bf:f1:0c:5a:94:f4:b8:da:b4:0d:5c:08:e8:10:0b:a6:86:8f:
         8a:d0:0e:1f:9f:2e:6d:3d:0d:65:49:22:87:a4:44:4c:20:8a:
         2e:7e:fb:7b:3d:99:5b:a3:47:ec:e6:36:d4:e8:f1:ca:b5:a6:
         26:e9:09:e2:28:2c:ea:67:90:8e:b6:5f:de:69:ea:d9:8f:74:
         e6:8c:3e:94:57:fe:03:dd:8a:1c:c4:59:96:01:a4:11:19:85:
         ad:44:c7:ac:cb:59:20:b9:f9:fd:8f:2f:e8:1f:b0:24:a4:18:
         02:13:85:1b:96:2c:40:1e:c1:44:c1:55:30:6e:56:4b:b8:58:
         b1:8a:ed:2c:e5:09:92:fc:22:15:53:22:b5:04:f0:da:85:0e:
         79:b3:21:85:83:18:74:d7:ed:09:f3:fd:25:22:3b:a4:d5:0f:
         21:2c:48:09:eb:11:62:d0:6d:2c:1e:b4:45:8f:a2:d4:51:33:
         38:37:bd:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:15:30 2025 by rpki-client