Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a39e8343-ed19-3a24-a23a-7a20a1746cbe.roa
File:                     a39e8343-ed19-3a24-a23a-7a20a1746cbe.roa (raw, json)
Hash identifier:          ikfGDt1ZZqFHL60F8yo3qBwQ2ZguZUCeq6YsnQ36FVc=
Subject key identifier:   FD:9D:70:C0:F8:9A:E4:57:87:E5:AA:AC:22:12:93:38:86:F4:8E:1A
Certificate issuer:       /CN=45de47ca-0b52-44ab-af26-767d8a671192
Certificate serial:       010D0C9F43285848DA70FDEF6DA78E7573127280
Authority key identifier: C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a39e8343-ed19-3a24-a23a-7a20a1746cbe.roa
Signing time:             Wed 12 Feb 2025 02:00:39 +0000
ROA not before:           Wed 12 Feb 2025 02:00:39 +0000
ROA not after:            Tue 13 May 2025 01:00:39 +0000
asID:                     5645
IP address blocks:        69.165.128.0/17 maxlen: 17
                          69.165.192.0/20 maxlen: 20
                          69.165.208.0/21 maxlen: 21
                          69.165.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:da:70:fd:ef:6d:a7:8e:75:73:12:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45de47ca-0b52-44ab-af26-767d8a671192
        Validity
            Not Before: Feb 12 02:00:39 2025 GMT
            Not After : May 13 01:00:39 2025 GMT
        Subject: CN=45c28f22-d2b4-41ca-b9d1-76177e8f0b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:db:c2:fd:45:48:d8:92:71:d3:64:d2:ff:fb:
                    94:ee:35:2a:43:e8:5a:99:52:59:64:8f:cb:a7:6f:
                    41:d9:c7:bd:d2:61:54:bb:03:73:d3:8f:b4:7d:6c:
                    33:59:64:93:b3:ec:6c:63:c6:60:d7:9b:ea:ef:a4:
                    a0:2c:8e:ee:93:40:50:b1:47:7e:c7:e9:40:ac:25:
                    ce:88:e5:85:b3:eb:43:52:0f:46:98:69:35:bb:22:
                    95:60:f9:e3:d3:e7:d3:b0:f3:fd:6e:6a:df:bc:a6:
                    bc:48:61:7b:1a:c3:84:9f:09:38:20:68:83:c6:d6:
                    99:2d:6e:1c:f9:f7:24:e7:14:94:b5:6b:85:62:1c:
                    be:e2:dc:79:82:02:df:66:e8:c4:08:00:40:d5:b0:
                    d3:1f:d4:a6:eb:85:e7:f4:02:ba:98:60:b7:ba:f6:
                    f9:a5:69:68:8a:f1:48:f2:26:37:8d:5b:7c:ce:b5:
                    31:4a:80:fc:51:4b:27:eb:1a:65:40:2d:20:01:bb:
                    19:9b:70:b1:6b:2e:d1:d9:fb:bf:b9:23:40:4d:02:
                    85:f6:0d:62:62:17:32:18:3c:e4:28:52:dc:fe:18:
                    ad:1a:25:2b:d2:41:34:b4:23:33:e5:07:c8:e4:13:
                    63:0e:19:03:5e:bc:b9:12:6d:a9:43:5d:36:9d:d1:
                    55:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9D:70:C0:F8:9A:E4:57:87:E5:AA:AC:22:12:93:38:86:F4:8E:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/a39e8343-ed19-3a24-a23a-7a20a1746cbe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192/45de47ca-0b52-44ab-af26-767d8a671192.crl

            X509v3 Authority Key Identifier:
                keyid:C6:08:99:27:C9:FE:89:0C:0A:9A:47:71:B0:FB:21:A6:9B:D1:80:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/45de47ca-0b52-44ab-af26-767d8a671192.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.165.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:3c:90:a8:bc:a5:4f:19:72:48:5a:b3:43:de:66:5c:bc:b3:
         55:1f:2b:fd:a8:c6:7a:9c:36:a6:c0:73:5f:4b:30:6f:05:a9:
         af:b8:4b:04:d6:f5:d0:34:3f:c5:69:a5:69:2a:c0:70:24:2f:
         66:ec:91:7b:a0:57:4c:a4:03:a8:31:95:0b:47:94:c6:4d:b8:
         0c:2e:82:e3:b5:55:36:72:83:b7:e8:88:7b:36:ee:01:33:cd:
         1c:a6:a3:70:c7:9e:2e:a8:b5:34:e4:ef:d3:34:4a:4c:82:fd:
         d5:38:7f:a2:58:48:ee:46:02:b2:67:6a:10:7d:b1:d7:7e:a1:
         ad:b0:92:c4:6f:45:e7:53:29:dc:54:fb:7b:4c:c6:dc:f4:07:
         d3:22:ae:1e:f3:66:a3:c6:a5:40:d6:2b:dc:56:1a:be:cb:21:
         e1:45:19:5d:75:48:2f:e1:d3:ee:6f:91:fc:b4:4c:4c:20:35:
         2f:cd:3b:c9:09:09:ca:a2:38:63:11:36:84:d6:ce:55:aa:e9:
         3a:ba:91:24:fb:b9:ee:d4:10:53:80:16:4a:d9:3c:be:13:76:
         7e:20:0b:f1:ac:52:8d:0e:e2:33:b9:24:ce:8f:73:e1:e5:14:
         81:55:44:e9:1e:2d:8f:1d:2d:df:97:e0:d9:d8:1a:e1:b0:47:
         1d:e0:9e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:48:48 2025 by rpki-client