Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa
File:                     f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa (raw, json)
Hash identifier:          ZgD8T3f475xXeB05PIMV8JtoNPt27UgdORG591xFTG0=
Subject key identifier:   73:1B:FF:C7:9B:0F:AB:8A:78:C6:D8:A2:0E:B8:F4:AB:EA:8F:4F:BA
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285848424ACD94BF540E6E5832D2C0
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     11300
IP address blocks:        64.49.146.0/24 maxlen: 25
                          64.49.149.0/24 maxlen: 25
                          64.49.179.0/24 maxlen: 25
                          207.241.166.0/24 maxlen: 25
                          207.241.174.0/24 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:cd:94:bf:54:0e:6e:58:32:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=f8c107e6-6bd8-42a0-84c0-45f7cb2dd637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:20:e1:2b:fc:58:4f:38:6c:8b:40:c1:ae:e8:
                    21:1f:fd:f0:b6:4c:4c:e5:01:bb:81:c4:25:a0:30:
                    e5:35:39:c5:95:f0:fa:bf:96:74:3a:3e:e6:f6:76:
                    c4:37:b6:bf:cf:18:9e:dc:7b:f4:38:4f:9f:37:f1:
                    45:47:e4:ce:44:46:00:3f:f5:79:77:06:05:d9:29:
                    f5:8d:02:2e:34:3d:13:58:53:5f:ef:5e:b1:17:5a:
                    0a:41:d7:d8:f5:38:70:d0:33:03:63:2a:43:47:52:
                    ae:a2:97:78:b4:9c:91:f9:8b:6d:c9:43:dd:11:a9:
                    bc:08:3d:00:c1:0d:0d:1a:d4:81:72:1d:fc:b8:89:
                    4f:32:c6:5a:d4:3d:31:51:ee:fa:cb:9e:62:c8:87:
                    92:d1:02:89:a6:fe:e8:73:0d:e9:02:92:c7:79:32:
                    6c:2f:83:07:e2:02:0a:a3:75:fc:58:62:62:48:24:
                    a2:5e:e4:11:d8:5c:db:1a:75:d4:b5:c0:51:4a:d2:
                    12:b2:fd:7f:13:6e:58:20:1b:d7:d9:8c:8a:6f:bb:
                    03:cf:87:b2:2c:a6:b3:5c:ce:53:e0:25:19:02:90:
                    2d:ac:15:5b:73:b9:40:4d:27:76:a8:6d:46:18:6a:
                    47:82:2c:be:99:42:fd:5c:d1:d9:5e:af:2e:7d:b2:
                    1c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:1B:FF:C7:9B:0F:AB:8A:78:C6:D8:A2:0E:B8:F4:AB:EA:8F:4F:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/f08d761e-0e6b-38f1-8f1b-d51a58f26666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.146.0/24
                  64.49.149.0/24
                  64.49.179.0/24
                  207.241.166.0/24
                  207.241.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:d3:f1:78:a8:c4:ba:4f:ce:3f:c5:5a:db:fc:fd:35:71:9d:
         4b:16:a5:42:9a:12:e8:79:6b:e6:a9:31:26:14:65:11:72:ed:
         bd:0d:37:a3:1c:d3:11:b6:9c:90:90:ed:8c:0f:29:48:7b:03:
         dd:25:40:48:39:c7:fd:5e:9b:1d:11:5e:cb:60:ec:08:54:cc:
         59:95:d0:fe:ac:67:ce:a3:78:6a:df:cc:37:cf:e5:25:8c:99:
         a0:74:1a:41:d3:1e:40:be:6d:6c:a7:73:db:05:a8:81:c2:9e:
         f2:6e:c7:71:ad:ee:e0:06:ce:58:c0:a1:02:6e:45:73:68:16:
         88:1b:fc:58:68:72:68:0c:d1:1e:c5:e8:4e:dc:2e:2c:9e:0f:
         75:10:66:0f:89:44:77:9d:d4:bf:8d:2c:dd:c5:de:60:67:ed:
         ff:1c:b9:cc:d5:9d:0c:de:8b:fa:3b:d8:95:5b:fe:11:64:60:
         00:0c:ed:1e:c6:fa:98:06:2b:12:f5:4f:f1:47:57:d8:96:10:
         41:1f:11:f5:0d:83:85:15:2b:32:25:bd:78:c9:4b:27:a7:ac:
         6a:45:b4:36:71:1b:87:46:46:0f:03:c4:bc:5b:0c:d1:69:bf:
         7a:4e:be:5d:19:d8:51:58:e3:bc:88:13:52:cc:a9:17:2a:7b:
         23:17:51:e8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:04 2025 by rpki-client