Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9acebb85-1807-365d-964b-2e3fa317511c.roa
File:                     9acebb85-1807-365d-964b-2e3fa317511c.roa (raw, json)
Hash identifier:          HkC02H+W92jHR+Y48EmabgHFuWRtJ+wxbtTm//nzLcg=
Subject key identifier:   93:BC:9A:44:16:AF:07:8A:3A:87:E2:1A:43:E5:37:35:00:E7:81:27
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246F2A392435469730E4F80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9acebb85-1807-365d-964b-2e3fa317511c.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        71.245.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:f2:a3:92:43:54:69:73:0e:4f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=1d3e7270-107f-4a2b-837d-6015a5f97f3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:76:a0:63:ac:80:c9:e8:f5:1e:33:81:79:4e:
                    9d:cb:57:d7:9c:20:90:dd:0d:2b:54:ae:81:df:23:
                    32:73:1c:27:2b:a3:05:67:c1:c6:7d:73:d0:85:6b:
                    81:5c:b0:21:cd:11:ff:d1:2c:12:81:bc:a5:46:05:
                    1a:f8:32:2d:a0:9b:19:cc:b7:0a:79:db:03:cf:c8:
                    e7:70:22:08:f3:d0:fd:66:d5:85:82:4a:5e:52:b6:
                    b7:ef:e0:1e:04:5d:59:0b:d3:77:a7:5d:41:5f:7b:
                    d2:b3:9b:20:41:8e:6d:c6:51:23:a6:26:3b:ce:7d:
                    92:32:cc:73:c4:da:72:8b:c9:88:ad:2b:35:0a:2b:
                    84:91:b1:10:b0:36:eb:a9:8c:56:d8:2a:37:b8:60:
                    14:dc:ca:83:11:bd:1d:f6:9b:41:2b:66:90:e4:a3:
                    77:55:33:f1:59:af:9f:6f:35:9a:29:5a:56:4e:86:
                    62:66:b1:0d:38:34:5d:de:79:74:15:c9:7a:be:e0:
                    c8:da:25:23:8f:ee:23:88:a6:e2:7d:a3:79:f8:9d:
                    ab:d8:c1:2e:e0:8f:36:93:06:bc:aa:b3:cb:98:ec:
                    ce:b2:25:38:21:15:88:38:84:88:c4:10:62:ca:54:
                    11:f9:17:5a:86:10:31:c9:0a:f6:dc:dc:83:13:2f:
                    ec:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:BC:9A:44:16:AF:07:8A:3A:87:E2:1A:43:E5:37:35:00:E7:81:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/9acebb85-1807-365d-964b-2e3fa317511c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.245.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:17:38:55:87:5b:06:dd:fb:f2:01:db:c7:7e:78:63:79:
         cf:73:67:6c:f0:21:64:10:62:17:ed:b0:c5:4e:b5:06:1f:d4:
         ca:c3:a4:a3:f4:50:8b:68:9e:9d:1f:3f:f1:fc:e0:b7:2c:74:
         e7:cc:fd:b8:48:c3:4c:03:6a:e3:74:7a:3d:67:db:69:c0:16:
         a4:75:b3:76:59:82:77:a3:24:5e:93:c1:40:be:8a:fc:a0:4c:
         c5:f7:4b:82:f1:7c:9c:94:b0:fd:89:d0:91:89:0d:ab:43:eb:
         61:3e:7e:65:df:7a:d3:ca:20:04:59:9d:47:1c:7c:84:63:66:
         6c:7b:26:f6:75:90:4a:f8:c2:a3:8c:49:9a:16:ae:a6:15:0e:
         9a:e3:74:27:02:7e:7b:84:fa:1c:2b:f1:4a:81:96:b2:e4:44:
         fd:85:e2:74:fa:ab:0c:40:2a:6e:24:4a:29:03:70:b2:1f:17:
         7a:67:ff:da:e1:bc:e5:e9:1a:8a:7b:e8:76:6a:46:d2:29:7a:
         c6:cc:e5:99:c8:60:59:ca:a1:d2:89:e9:57:c0:de:8d:54:4a:
         ae:88:0f:94:2d:4c:d2:f0:7a:92:b9:89:69:c7:07:d1:cf:eb:
         dc:c9:65:90:b1:5f:dc:65:72:66:63:a9:74:ca:fe:7c:d7:bf:
         02:f8:53:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:43:45 2025 by rpki-client