Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/ee866f08-b991-3ce4-b4b2-4f268f9f564c.roa
File:                     ee866f08-b991-3ce4-b4b2-4f268f9f564c.roa (raw, json)
Hash identifier:          m+mgdJ78e41DyDWER9JMdq0lXVvYUXWv+DaR8fQ5e04=
Subject key identifier:   6D:81:8E:71:D1:57:40:1B:C8:8C:F3:06:05:D5:6A:EB:7E:C6:DC:07
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F432858487755DB4536B7E413C7154980
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/ee866f08-b991-3ce4-b4b2-4f268f9f564c.roa
Signing time:             Tue 07 Jan 2025 14:00:53 +0000
ROA not before:           Tue 07 Jan 2025 14:00:53 +0000
ROA not after:            Mon 07 Apr 2025 13:00:53 +0000
asID:                     33362
IP address blocks:        69.89.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 26 Mar 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:77:55:db:45:36:b7:e4:13:c7:15:49:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jan  7 14:00:53 2025 GMT
            Not After : Apr  7 13:00:53 2025 GMT
        Subject: CN=0b40a1dd-6b69-4a52-9151-a3d6cb4423fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f1:76:e4:32:6d:4a:d9:ca:8b:b7:8c:4d:b9:
                    65:55:6c:b0:7d:ae:29:00:08:93:5f:6b:87:d1:cd:
                    5c:1a:e4:11:d8:09:dd:81:02:f7:ec:90:c6:ab:e4:
                    1e:9d:82:cd:a2:00:bd:21:bf:4d:b2:6b:6e:b5:06:
                    d2:e2:01:b8:f1:04:40:39:ca:d9:7a:d7:ab:5a:26:
                    39:53:84:62:24:58:cf:95:30:5a:c8:40:39:e6:56:
                    47:fa:52:f5:55:85:0f:7a:2e:a1:2b:19:f6:b1:e5:
                    69:6b:a1:2a:f9:45:dc:aa:ff:42:de:08:47:ce:0c:
                    dd:58:b2:95:48:01:63:9d:a9:24:cd:5a:a1:8a:5b:
                    90:ef:83:c5:1b:35:66:dd:f2:a2:0a:21:ee:b7:3e:
                    0f:82:27:8e:5e:32:99:1a:c8:26:83:ac:da:18:fd:
                    a7:f8:85:d4:1e:d7:44:2c:4b:af:95:e5:b1:fd:9e:
                    c0:07:04:07:40:84:de:3a:c8:42:eb:96:06:41:55:
                    dc:72:5d:34:80:b5:66:65:06:dd:d5:b5:b9:46:5b:
                    17:fb:6f:95:28:36:a7:5c:b7:27:ca:6b:ce:d4:79:
                    0b:9b:87:ad:b9:31:bc:ff:e6:de:41:73:50:dd:e6:
                    ad:56:0a:05:75:97:1f:9e:2f:bf:16:4d:3f:37:69:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:81:8E:71:D1:57:40:1B:C8:8C:F3:06:05:D5:6A:EB:7E:C6:DC:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/ee866f08-b991-3ce4-b4b2-4f268f9f564c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.89.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:7f:b7:1a:1d:30:f4:c4:f5:9e:82:52:6e:78:f1:c4:aa:c5:
         3a:70:01:85:ee:d7:18:b5:ec:14:3c:dc:cb:d4:f2:7d:e0:2b:
         86:90:67:a3:18:79:99:8a:79:a2:21:60:86:3b:e3:0c:b6:7d:
         2e:78:15:0e:19:ed:40:96:fa:21:cf:72:93:34:b8:82:9a:7b:
         2e:40:46:07:f5:33:a1:da:db:6e:b8:49:6e:2e:ab:5b:bb:e4:
         f3:11:0f:e6:b7:6a:0e:0c:fd:8a:bb:bf:65:90:d8:32:ce:24:
         ee:46:5e:8a:5e:88:79:0b:6b:b6:b9:5a:a6:58:b1:80:ae:0e:
         0b:cd:7d:35:0f:23:72:73:dd:01:9e:e9:0c:86:a3:fb:dd:5f:
         75:be:df:fe:dd:fc:2f:a2:e3:0e:b5:cd:de:41:5e:74:38:5d:
         2b:1b:f3:f4:4e:f5:cf:d0:95:58:41:a2:25:10:d6:42:2e:23:
         f5:95:1e:d5:f4:23:52:2a:4a:c4:84:93:bd:34:bc:6f:74:e3:
         3d:86:08:f5:ee:8b:db:05:12:77:ad:d1:7f:6e:12:d8:d0:5f:
         1a:f2:f8:f9:57:a5:1c:bb:6b:10:3e:1b:75:37:56:e1:85:b4:
         13:23:15:e7:5a:dd:97:4d:c5:91:b1:89:0b:29:bf:a0:46:5e:
         97:46:14:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 25 22:51:57 2025 by rpki-client