Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34176d91-d83f-3342-825c-88176786e0e4.roa
File:                     34176d91-d83f-3342-825c-88176786e0e4.roa (raw, json)
Hash identifier:          HSLurWpeGIMLMyANnY/vzbEDPGlIG5xPpiznzd+deaE=
Subject key identifier:   5C:3A:8F:0F:C3:EB:C0:D6:EE:2C:A0:A1:9E:88:B9:A3:E4:DA:97:3D
Certificate issuer:       /CN=b2f0a061-78dd-4d61-988a-266b192d9caa
Certificate serial:       010D0C9F4328584819D00F6050C0D5AB90783380
Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34176d91-d83f-3342-825c-88176786e0e4.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     398576
IP address blocks:        216.66.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:d0:0f:60:50:c0:d5:ab:90:78:33:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=62efaaf3-25d3-416b-99f3-5925f61d0fc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:f9:9c:ae:bf:11:fa:5f:68:9a:b8:5f:80:23:
                    11:59:ce:9d:c8:19:f2:2d:bb:b1:19:3a:b9:b9:d4:
                    ef:29:7a:79:c7:98:95:b1:e8:fe:e6:72:76:3b:1b:
                    99:35:1b:24:be:1b:eb:6b:97:a3:82:40:c5:b4:00:
                    76:85:b7:b7:7f:5b:19:86:0b:d4:5a:01:2c:f5:c4:
                    e0:42:38:82:1c:07:c4:3a:32:b7:98:22:e8:84:99:
                    28:4b:b0:a9:f2:b6:99:c2:32:af:0c:f5:96:74:ab:
                    da:6e:8c:ff:e5:b2:39:46:df:0d:e5:d5:95:1f:55:
                    d9:fe:3d:e0:fd:df:b0:36:09:6a:f4:c1:55:a7:d2:
                    6f:12:f4:0b:10:81:a0:82:e8:00:d1:a9:e5:f9:c5:
                    7d:ff:42:d8:d8:ab:c3:21:23:90:e0:5c:ca:11:da:
                    3d:b6:3a:2c:e5:02:78:92:e0:0d:f3:2e:a3:e5:62:
                    f2:fa:94:4c:a9:2f:cf:77:65:95:33:19:70:8d:53:
                    84:46:0a:58:e9:50:2a:04:1b:ce:bf:35:6b:4e:4e:
                    38:ea:df:d1:43:71:4c:fe:7c:a8:b0:78:f2:69:34:
                    61:95:83:ee:42:42:1d:4f:57:aa:d8:29:15:b4:c4:
                    7a:0a:57:27:33:6f:f4:ea:d6:28:4c:e2:b0:d0:dd:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3A:8F:0F:C3:EB:C0:D6:EE:2C:A0:A1:9E:88:B9:A3:E4:DA:97:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/34176d91-d83f-3342-825c-88176786e0e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl

            X509v3 Authority Key Identifier:
                keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.66.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:2a:53:7c:07:bb:27:49:16:f4:27:9c:3a:a3:f4:74:7b:e2:
         7e:b6:45:c2:63:24:43:d6:81:fc:bd:a5:78:da:70:8d:a8:0e:
         ad:eb:65:24:94:22:8e:c1:53:d1:4f:1a:94:1a:b2:f1:b7:8d:
         41:c2:f3:06:c5:6d:ca:d2:c0:90:85:d4:b1:1c:a3:13:b2:96:
         e2:a5:62:5f:79:1d:48:7e:f3:ab:1e:28:3f:e3:14:84:8f:d5:
         b5:13:82:fa:ad:34:b5:d7:35:db:61:e4:98:95:73:f8:aa:97:
         04:9e:e2:84:45:33:e0:0b:20:c2:ad:60:16:e6:ad:8f:3e:a9:
         4a:55:e8:a7:da:f8:9d:36:2f:a3:81:f2:57:4d:61:a7:ea:95:
         80:c4:07:4d:0b:34:01:ef:00:90:17:50:ed:30:4a:25:7f:c5:
         f3:b8:bd:10:de:be:ee:54:b7:a5:1b:1d:2e:c7:dc:17:a9:47:
         d1:b8:a1:c5:53:35:71:78:4a:ca:d9:bb:f1:ab:9a:e6:71:d3:
         6a:b4:38:ad:11:d8:b9:3e:b3:4c:6f:7e:21:b0:22:38:f8:8b:
         1c:26:aa:cd:00:5d:5b:d2:e7:07:78:3f:9f:43:3d:e9:59:81:
         97:e7:c6:ef:84:d4:c8:cc:1c:05:a4:55:cf:f8:0b:88:ba:25:
         fb:df:6e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 05:15:34 2025 by rpki-client