Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa
File:                     9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa (raw, json)
Hash identifier:          dtlpG7SdH/w5AbhMPpB6iNmyU6eP8Cz3NVfHswu/Gn8=
Subject key identifier:   FA:D5:E4:8C:9B:FB:13:9C:17:B1:7E:81:82:95:FC:1B:6C:E6:39:30
Certificate issuer:       /CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
Certificate serial:       010D0C9F432858480BDA7596EF958DBF22B67040
Authority key identifier: 31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa
Signing time:             Sat 30 Nov 2024 02:00:39 +0000
ROA not before:           Sat 30 Nov 2024 02:00:39 +0000
ROA not after:            Fri 28 Feb 2025 02:00:39 +0000
asID:                     148996
IP address blocks:        64.112.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:0b:da:75:96:ef:95:8d:bf:22:b6:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7a6341b-5a5e-4ac0-a760-5a54190af913
        Validity
            Not Before: Nov 30 02:00:39 2024 GMT
            Not After : Feb 28 02:00:39 2025 GMT
        Subject: CN=3da61836-ffd1-402b-8df0-73699e941ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:ee:c1:6c:57:e3:d4:61:2b:f3:b3:0a:03:4f:
                    d9:c5:b6:2b:6d:ab:e2:01:19:44:1b:ad:9e:e0:1e:
                    83:06:15:b7:75:53:52:90:e7:d7:f4:98:46:58:75:
                    27:c3:4e:11:c1:60:53:69:08:bf:9b:f8:67:04:a1:
                    07:63:34:8b:69:3d:11:77:47:87:59:53:93:57:12:
                    7d:22:c4:cc:b9:de:20:14:c4:27:96:dd:35:81:4c:
                    0b:37:1c:ce:4e:b4:6f:b8:50:6e:0c:74:39:df:b9:
                    ca:9a:19:1b:24:4d:24:9a:78:eb:24:6a:a7:b9:05:
                    a0:3c:19:bb:0b:eb:4e:d0:cb:25:68:bc:e4:af:7b:
                    41:50:9f:af:26:4f:af:e4:aa:29:c2:ae:d3:cb:69:
                    1c:2d:76:50:9b:15:b4:9a:ed:fb:d1:40:9b:bd:5d:
                    51:83:e2:92:1e:59:80:0c:3b:be:20:ef:fc:8a:b0:
                    ff:9c:07:36:29:12:68:ad:ae:97:3a:cb:4b:3b:ae:
                    a5:6b:58:55:7e:bb:d9:f9:fc:dc:51:a8:00:0c:b7:
                    09:43:6c:c3:18:6f:24:d7:f9:e7:c2:9a:d2:f8:cc:
                    89:ad:e3:44:ed:43:49:79:b2:76:95:b6:8e:d8:a7:
                    90:31:de:12:35:29:79:d4:6a:c7:24:ae:01:2f:85:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D5:E4:8C:9B:FB:13:9C:17:B1:7E:81:82:95:FC:1B:6C:E6:39:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/9c198144-1f7d-33de-8f7a-7ad2d0a793b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913/e7a6341b-5a5e-4ac0-a760-5a54190af913.crl

            X509v3 Authority Key Identifier:
                keyid:31:A2:AD:E3:C3:95:0D:C6:97:41:1E:2F:8C:B1:FC:6B:B7:83:25:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e7a6341b-5a5e-4ac0-a760-5a54190af913.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:2e:db:17:d3:a7:79:d1:18:3c:16:bb:4f:73:b6:55:47:b2:
         e6:bc:aa:09:e3:44:3c:8b:95:a5:2c:8c:e5:96:44:a1:94:ff:
         42:76:6f:bb:ad:c3:e3:23:f8:5b:db:a1:47:83:14:59:8f:55:
         24:c7:f8:c6:3d:bd:95:ab:b3:8b:cc:18:4a:e7:c4:54:cf:6c:
         32:ec:f5:0d:e5:bf:f8:03:8b:0f:59:a5:cb:c4:8a:40:9b:b8:
         91:cc:eb:a2:f1:f3:0b:80:81:a5:6f:04:05:a2:7d:3a:78:8b:
         69:37:91:ad:06:36:8d:c4:82:5e:29:75:08:3f:e1:a0:6d:2b:
         f0:36:c3:af:96:1f:37:49:ca:c7:14:1b:51:4e:46:fb:d8:5a:
         be:32:a3:ba:1a:9d:13:99:59:c9:93:bc:28:5b:3c:c8:d5:65:
         37:e6:64:58:e0:bc:79:c5:e9:ab:99:1a:c5:4b:30:65:56:ce:
         12:cb:14:d7:62:4b:1b:ac:7b:d4:aa:fc:d9:3a:7b:95:8e:31:
         47:c1:2d:49:7d:21:cf:e7:00:21:0f:c3:47:26:44:1a:b9:c9:
         92:63:da:b5:69:9f:57:37:15:4c:67:75:d3:0f:49:ae:a7:66:
         4a:db:1a:33:ea:02:99:65:c6:e3:10:0b:65:3a:19:fe:cc:4e:
         8b:7c:95:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:17 2025 by rpki-client