Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
File:                     ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa (raw, json)
Hash identifier:          K2ft0lDx3GWQjw00zHAGEq0G++3TA6YWdXxeEI8zsLM=
Subject key identifier:   8F:BA:2C:21:8C:19:98:86:A2:21:E8:F9:A0:DD:71:8C:E7:68:D5:B2
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584824FA81E500CFE1C7D0906E40
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
Signing time:             Mon 09 Dec 2024 02:00:40 +0000
ROA not before:           Mon 09 Dec 2024 02:00:40 +0000
ROA not after:            Sun 09 Mar 2025 02:00:40 +0000
asID:                     16509
IP address blocks:        199.47.128.0/24 maxlen: 24
                          199.47.129.0/24 maxlen: 24
                          199.47.130.0/24 maxlen: 24
                          199.47.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:24:fa:81:e5:00:cf:e1:c7:d0:90:6e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Dec  9 02:00:40 2024 GMT
            Not After : Mar  9 02:00:40 2025 GMT
        Subject: CN=b63b5fc7-4112-4366-b722-37162a70294b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3d:f3:52:93:78:45:49:37:27:e7:29:67:8f:
                    3e:76:53:19:16:1d:6e:a5:e8:71:83:37:e3:36:cb:
                    c2:8b:57:f5:b9:29:58:f0:c6:7f:19:6b:eb:f0:1a:
                    e6:56:e1:02:3f:42:88:33:fd:c8:cd:94:a0:70:1d:
                    4b:7a:ff:72:ae:6b:61:7e:b3:a4:46:c5:11:cf:d4:
                    63:f0:20:3a:3d:53:aa:99:49:da:b1:cb:06:cd:f3:
                    ab:4c:01:73:16:4c:28:9d:80:f5:02:04:e4:88:a8:
                    98:80:5d:44:e3:55:12:87:35:78:be:6c:cf:a0:92:
                    a9:f1:79:6a:a4:22:3d:7b:e7:08:16:0e:43:5e:03:
                    53:80:49:42:73:db:de:7c:47:34:9a:11:07:58:e2:
                    25:e3:96:93:f5:ae:1a:7f:d4:13:a3:d1:45:2e:ef:
                    30:07:c5:d2:56:9f:d4:dc:34:a8:f3:74:21:78:3c:
                    04:86:22:34:4e:15:7f:4f:5c:0f:96:21:00:07:b0:
                    87:b2:b1:72:fa:29:cb:04:c8:25:57:3d:6d:f8:2f:
                    90:b5:8c:78:11:aa:27:89:02:32:2a:5b:15:48:35:
                    db:20:5e:da:59:11:a5:bd:e1:6f:da:f9:e3:c4:2f:
                    89:5b:41:1f:69:68:6c:b8:48:27:4a:3b:01:ec:5e:
                    34:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:BA:2C:21:8C:19:98:86:A2:21:E8:F9:A0:DD:71:8C:E7:68:D5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:62:de:f8:3d:3f:6e:a4:b3:3f:cb:84:bc:fb:cf:e8:cc:36:
         62:8a:5d:82:ff:5a:0f:24:f4:83:6a:63:43:f9:45:a8:81:b8:
         e4:a6:7d:a7:f6:f2:a3:00:76:00:2e:69:c9:1b:82:3c:db:a0:
         ed:f1:c0:3c:b5:bc:31:72:4a:23:9b:17:4e:25:8c:72:3d:97:
         f6:28:49:d8:76:12:a4:a1:b8:0d:1d:5a:ea:fd:f5:20:ef:b9:
         c2:8c:87:bf:78:3b:de:a1:7e:d4:88:97:7e:8b:64:95:e7:26:
         a0:4d:6d:ea:c3:bf:b3:14:c6:f4:06:9a:4a:0d:a2:99:7c:1c:
         bc:78:0f:d6:11:26:7e:88:60:46:32:c4:6a:48:fc:70:51:89:
         17:c5:2f:8f:65:80:78:52:e6:9c:bb:3b:1d:53:19:77:b0:7c:
         75:dd:a4:ed:86:95:1e:bf:b7:49:0b:a8:76:51:e1:e3:04:be:
         c4:44:8c:8f:c8:de:32:72:cf:bb:8b:dd:08:ee:69:0f:06:2b:
         17:43:9b:9f:cc:40:43:47:47:ac:81:d5:ec:77:f3:d4:6e:30:
         bf:11:0a:3d:ea:ce:8d:b5:ab:8d:58:d4:45:41:e4:3e:f4:11:
         d5:08:8f:c0:09:24:f1:a5:d3:78:a7:95:56:25:99:23:dd:f3:
         e3:81:31:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:57 2025 by rpki-client