Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa
File:                     aa748512-018c-307a-b575-e11b343b461c.roa (raw, json)
Hash identifier:          VA9US1018OrsnAPoyekC6PzmWAjRW9l1lcTq062EkjA=
Subject key identifier:   F2:BA:2C:07:C2:FB:03:A8:66:29:13:E1:AF:CE:62:7A:54:1D:78:F2
Certificate issuer:       /CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
Certificate serial:       010D0C9F43285848100A8BC0A531BBB73718C240
Authority key identifier: B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     5670
IP address blocks:        23.134.80.0/24 maxlen: 24
                          206.55.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:8b:c0:a5:31:bb:b7:37:18:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c2fcb5-8224-40aa-bace-230fcdefbaa5
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=f1937834-7088-4560-be7b-9141f92abf33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:8c:0b:7e:f3:87:46:82:bf:d2:4a:b7:a8:b9:
                    fe:dc:9c:f6:11:22:ae:6c:97:e1:56:00:e0:b6:57:
                    42:41:5e:51:d2:a1:24:c1:c8:25:e5:b7:af:0e:6f:
                    0b:bd:a4:b4:04:d5:79:59:42:de:9e:2f:34:f5:d6:
                    70:b5:4c:f3:f7:61:f4:53:a2:18:eb:4e:81:e2:5a:
                    49:3e:a6:e5:cf:47:9a:c5:2c:3a:4d:f1:37:f0:27:
                    4e:88:d2:92:f4:7e:af:8f:e2:bd:bc:8a:2d:20:68:
                    dc:9d:e3:1e:0b:cb:c6:04:9a:8c:9a:d4:e2:ad:07:
                    f7:f2:c3:ca:cd:e7:76:01:c9:97:89:c9:94:ae:79:
                    3f:79:45:fd:69:43:46:9a:32:d7:bd:d6:e7:36:a2:
                    7c:40:21:06:ba:91:da:a2:b2:12:e5:0c:37:c3:ce:
                    27:5e:31:bc:3b:d4:49:73:c6:93:09:ef:c9:18:8d:
                    22:b0:c1:51:68:39:a2:2f:bb:6c:35:d6:8d:c4:17:
                    b5:34:24:79:1a:39:bd:ab:b1:65:38:3f:9a:28:87:
                    67:be:7f:a6:af:bf:41:ab:0e:a5:27:5a:c2:a0:ff:
                    a9:e5:c0:bd:12:8e:66:c7:01:9f:5f:a4:6e:c1:69:
                    3b:d2:2f:0b:e7:8b:98:09:11:a1:3a:42:9e:39:40:
                    71:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:BA:2C:07:C2:FB:03:A8:66:29:13:E1:AF:CE:62:7A:54:1D:78:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/aa748512-018c-307a-b575-e11b343b461c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:1E:7E:A2:3B:DC:EF:12:73:B8:E6:47:4E:F9:67:46:58:60:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c1c2fcb5-8224-40aa-bace-230fcdefbaa5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.134.80.0/24
                  206.55.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:60:7e:00:d1:28:25:2f:7d:86:50:55:c8:8b:37:64:f3:aa:
         61:86:76:c8:7b:83:a4:6b:fe:97:11:7c:94:68:97:5c:93:93:
         2e:8e:d6:06:e3:d0:d9:6a:e1:ba:78:eb:22:e4:a5:86:f7:98:
         d0:1c:a2:5c:be:57:fe:3c:47:45:50:f9:69:53:82:f0:3b:05:
         c4:71:ec:16:09:2b:12:2d:76:1c:bf:09:3a:e7:7f:35:cd:1e:
         e5:fa:e2:c4:5d:be:86:55:46:ca:bc:8b:f4:fc:4c:62:fb:18:
         14:64:17:fd:a6:17:72:99:84:22:91:e6:88:60:78:3f:b5:41:
         9b:40:45:a4:4f:90:ea:45:67:a0:bb:60:c8:f5:50:21:31:db:
         bb:fc:56:c5:a7:1e:77:ce:42:59:54:77:35:4f:df:21:5c:27:
         50:1a:a3:38:a4:7f:bc:4c:d8:ee:e4:b8:b9:a3:82:08:5a:29:
         63:4d:81:8c:f1:4a:f1:fd:fb:a7:71:71:7d:95:a9:e9:0e:e0:
         c0:6c:92:87:1e:8e:cd:10:69:78:3d:76:2f:84:39:c7:25:8f:
         1d:90:bc:fd:20:9c:cd:ec:f7:da:3b:2c:1d:13:ca:75:47:33:
         20:88:bd:cf:59:d8:60:7a:86:1c:46:b2:d6:82:66:82:90:24:
         30:62:a9:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:29 2025 by rpki-client