Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae4a2d0d-e634-3677-b6df-e438486ea9dd.roa
File:                     ae4a2d0d-e634-3677-b6df-e438486ea9dd.roa (raw, json)
Hash identifier:          kGNpvx0rW4kNd5ZZbaA3aLPwyYmLOFRa7Ev3UdiUdFo=
Subject key identifier:   02:4D:20:8B:00:22:2B:BB:24:9F:02:87:2F:00:3F:BE:F0:3C:7E:CC
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246D4C649101C6D62C40C20
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae4a2d0d-e634-3677-b6df-e438486ea9dd.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        173.67.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:d4:c6:49:10:1c:6d:62:c4:0c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=12d4c4bf-b0da-4c75-9419-d616a3ce57dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c7:4a:01:13:9c:a9:9a:05:05:48:40:63:c9:
                    fb:6e:a8:4e:68:56:bd:1b:78:54:56:76:43:55:5b:
                    c3:ea:90:ab:2a:aa:a0:12:6c:88:18:a8:98:13:b1:
                    0b:6c:f3:bf:98:7a:8e:2f:83:40:74:95:bf:7e:7a:
                    11:ad:87:0f:9d:89:33:13:9a:73:3b:67:bd:a7:e6:
                    0c:fb:bd:4d:8b:ab:9a:75:76:f2:0f:db:22:a3:99:
                    8c:46:a2:d0:48:5d:0a:58:00:d0:bf:15:be:74:57:
                    66:81:50:fc:3d:e3:3c:5a:1e:48:38:24:84:2c:0e:
                    df:52:d7:ab:7f:f9:81:f6:cc:28:65:38:0d:2f:a0:
                    15:32:74:56:9b:83:25:dd:19:9c:0a:16:0c:5f:23:
                    90:85:c4:7d:8d:d3:ed:58:7a:0c:15:0e:71:8d:1d:
                    52:ac:42:be:c7:99:0f:cb:ef:3c:79:0e:08:7e:af:
                    4d:b1:5a:f6:20:a4:72:04:9f:54:71:a2:34:3d:86:
                    2d:40:df:8f:bc:9a:7c:a4:8a:06:a9:78:85:cd:f5:
                    c4:7e:1b:3a:95:28:8b:e7:23:69:63:12:e8:9d:0e:
                    0f:d4:aa:0e:7e:0b:cf:5a:cb:a3:85:5e:d8:93:2d:
                    58:3f:9e:46:bb:21:3a:ee:c1:ea:9e:b0:c0:e6:cd:
                    8e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:4D:20:8B:00:22:2B:BB:24:9F:02:87:2F:00:3F:BE:F0:3C:7E:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/ae4a2d0d-e634-3677-b6df-e438486ea9dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.67.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:50:25:63:53:f7:5f:42:90:79:65:69:36:06:13:13:57:
         02:b8:b4:d2:11:ec:1d:9e:5d:a9:1b:7f:ed:a7:80:3e:79:56:
         0b:fd:dd:72:57:19:3d:33:45:23:dd:3e:ae:91:04:f9:43:f3:
         cb:d1:29:f0:bf:6c:15:22:83:d9:61:14:00:de:ac:68:e1:dd:
         0e:5c:90:51:08:ff:f5:fd:1a:36:60:4b:cd:af:af:f4:e9:b9:
         d7:a3:27:58:73:6f:d7:25:1f:22:59:cc:dd:2e:9d:0d:a8:0d:
         e7:a1:02:15:60:b2:f8:98:60:18:0c:b8:71:ca:7d:e3:e9:55:
         b7:8e:64:72:2e:42:35:d6:69:57:67:f5:dd:bd:e5:2f:be:f7:
         c8:0a:a3:5d:8c:1c:ba:a4:2f:b9:fa:86:b9:21:9d:70:96:eb:
         c9:74:25:db:52:86:6a:9f:c0:61:67:bc:77:f3:3d:a3:60:7b:
         50:e7:1d:7b:1e:b8:2f:af:35:ea:f5:15:9c:0a:e0:47:b9:7e:
         61:23:93:44:cd:12:08:07:91:b9:95:34:f6:e3:b0:d3:6d:b0:
         8a:28:59:74:7b:62:90:31:03:aa:65:26:c9:59:b1:83:7f:6e:
         fd:54:fc:e4:27:f9:0d:14:5d:42:0d:ec:d0:22:af:ff:e5:91:
         6d:7b:3a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:22:27 2025 by rpki-client