Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/83ca4f40-c372-30e2-a5a1-b4517409b8d7.roa
File:                     83ca4f40-c372-30e2-a5a1-b4517409b8d7.roa (raw, json)
Hash identifier:          DIZpIa49WD6yJ8W3jUoSBuHKGuccwAkEghZRcA39O0g=
Subject key identifier:   50:DA:8A:4B:05:A7:12:9F:43:4B:E5:4A:6E:6C:A7:65:A0:B0:60:D9
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858488AE0A2D32A24B309A4AFD430
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/83ca4f40-c372-30e2-a5a1-b4517409b8d7.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     30103
IP address blocks:        162.12.233.0/24 maxlen: 24
                          162.255.37.0/24 maxlen: 24
                          204.80.108.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:a2:d3:2a:24:b3:09:a4:af:d4:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=fa858021-01a1-41c3-b591-0562af99003a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b3:6d:23:60:0e:b3:96:a8:28:5f:fe:b3:ff:
                    b7:50:3e:98:68:9f:ee:dd:7f:f8:16:54:b2:02:b8:
                    d3:d2:4b:92:bf:48:5f:a7:01:31:af:2a:44:29:89:
                    e0:fb:34:eb:67:00:1c:d1:cc:47:44:58:b4:2e:b7:
                    2c:f1:25:d9:fc:70:26:46:f2:df:8f:71:25:a3:6f:
                    02:02:63:30:10:62:38:46:a3:f6:a4:0f:41:75:b1:
                    b5:bf:cd:f5:a2:6d:78:f2:d3:e3:56:56:ba:13:fe:
                    61:4f:ad:47:8b:21:27:5c:ed:e8:70:5b:5d:86:56:
                    62:ef:5d:ac:08:af:06:64:fb:db:f5:b1:41:9c:e5:
                    f0:85:d1:72:f4:dd:2c:d9:9b:1f:8c:fc:9f:4a:74:
                    c3:6a:00:fb:27:8a:61:74:d2:81:02:25:f5:76:7d:
                    f4:ef:ea:db:08:3c:1e:82:14:9c:08:13:00:65:7c:
                    39:51:ce:06:d5:46:3a:48:9e:21:c4:7d:7a:e4:6d:
                    7f:c7:9f:cf:51:54:ea:30:62:5b:ae:bf:5c:f0:9a:
                    e8:f5:8a:2d:6e:59:dd:f6:48:8b:b0:d7:9e:62:54:
                    55:c8:da:4d:a7:ff:89:94:25:cb:f2:3e:37:f7:6a:
                    83:b8:c9:db:87:d0:d9:06:16:86:59:72:c0:40:32:
                    37:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:DA:8A:4B:05:A7:12:9F:43:4B:E5:4A:6E:6C:A7:65:A0:B0:60:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/83ca4f40-c372-30e2-a5a1-b4517409b8d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.12.233.0/24
                  162.255.37.0/24
                  204.80.108.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:e1:7e:d1:56:0b:63:2f:4e:75:a1:e9:44:1c:65:fb:b2:15:
         e2:fc:f4:19:3a:5b:79:f1:63:88:5c:c9:59:3f:03:b4:4f:bc:
         cf:a8:56:c0:84:3d:6d:cc:3d:7a:aa:07:4e:20:fa:37:a6:a1:
         e5:53:91:69:99:aa:90:c8:fc:ed:ea:44:12:34:d3:c9:83:12:
         f5:6c:5f:7b:c1:46:23:1d:50:06:fa:8b:ec:1a:8e:ac:43:b8:
         97:c6:3e:5f:4e:31:88:09:57:67:73:f1:6f:6f:10:12:96:ee:
         d6:64:dd:30:3b:03:8f:8b:6e:7b:ec:cb:0a:2a:6f:f6:4c:39:
         5f:02:6b:f0:d7:97:73:16:bf:da:92:56:16:c7:df:4e:83:36:
         6f:da:bb:d4:1a:69:a8:7c:5e:2c:ef:29:01:e3:21:d0:3b:12:
         30:b7:80:ad:68:ca:16:d7:2a:3a:33:ba:ea:21:17:b3:69:5f:
         29:55:56:5e:26:81:3b:3a:32:15:67:8a:7f:df:58:43:16:42:
         0d:e1:cf:7d:08:e6:26:c2:fe:96:0f:0c:0c:cd:51:58:71:e7:
         ad:67:e4:3d:86:20:5d:fc:ea:86:8f:49:5b:9d:ea:3d:22:67:
         01:7a:5c:bd:24:4c:6b:f7:ae:b7:51:01:8d:6f:32:6a:ec:d1:
         64:e8:02:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:08 2025 by rpki-client