Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/615eec3c-c089-3914-bea3-fbb8cd76d2a3.roa
File:                     615eec3c-c089-3914-bea3-fbb8cd76d2a3.roa (raw, json)
Hash identifier:          vLAW/5U4hnz6MiFtCORXyEfp09bOXHGnhaO6eTypYtY=
Subject key identifier:   72:2F:73:97:46:65:93:7D:2C:F3:7B:7A:2C:66:5E:EB:32:99:AA:B3
Certificate issuer:       /CN=1e536701-e40c-420a-abd0-993bf8e0eac8
Certificate serial:       010D0C9F43285849A1EF75A1D0FA7EB7FF9D2600
Authority key identifier: 4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/615eec3c-c089-3914-bea3-fbb8cd76d2a3.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     32181
IP address blocks:        64.29.79.0/24 maxlen: 24
                          64.29.88.0/24 maxlen: 24
                          64.29.92.0/24 maxlen: 24
                          66.180.133.0/24 maxlen: 24
                          66.180.134.0/23 maxlen: 24
                          66.180.136.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:75:a1:d0:fa:7e:b7:ff:9d:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e536701-e40c-420a-abd0-993bf8e0eac8
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=f604e3b5-a9fb-4a3b-8758-2efd08576e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5e:c7:f8:32:a0:80:eb:ed:3e:7d:69:b6:48:
                    98:2c:f4:27:20:68:10:11:43:55:0e:83:be:a9:0a:
                    1f:65:36:d2:ea:97:13:3b:b4:74:07:ed:6c:ee:59:
                    44:67:10:ce:04:d7:e0:f7:6e:74:6b:70:28:ee:ca:
                    05:9d:6a:65:17:07:7a:48:55:c8:2c:6b:4c:70:53:
                    f0:8e:ca:50:42:d0:ad:df:3c:5c:a4:40:5c:25:94:
                    5f:ed:a8:21:7d:19:b2:25:e5:26:e7:56:f4:0f:f6:
                    9e:f1:98:1c:e7:15:03:ca:4e:45:c9:81:5c:f0:8f:
                    da:01:91:54:cd:1e:23:34:78:26:62:60:68:27:b2:
                    24:b5:d0:5d:bd:24:49:7e:ce:6e:31:de:84:48:30:
                    94:09:ee:65:78:51:4f:7a:7e:74:32:03:d0:e8:36:
                    3a:71:f1:67:3d:f7:81:91:d7:ca:b1:59:37:4c:7b:
                    6d:67:3a:52:41:39:f7:a0:95:c8:e3:05:cf:72:4d:
                    b5:5f:0a:1a:d3:47:33:11:e5:db:7e:43:1a:cd:c8:
                    ad:c9:8e:bf:e3:cc:f1:9c:e2:a3:ea:a5:73:3d:ea:
                    2a:67:bf:40:24:c6:f6:16:6b:f9:88:f0:6e:2c:07:
                    ee:6a:cc:2d:a1:e1:e3:a1:e9:5d:18:77:e0:2e:5f:
                    80:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:2F:73:97:46:65:93:7D:2C:F3:7B:7A:2C:66:5E:EB:32:99:AA:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/615eec3c-c089-3914-bea3-fbb8cd76d2a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8/1e536701-e40c-420a-abd0-993bf8e0eac8.crl

            X509v3 Authority Key Identifier:
                keyid:4C:E8:F4:92:71:44:26:52:09:41:F9:50:3F:80:2E:2B:21:CE:8A:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e536701-e40c-420a-abd0-993bf8e0eac8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.29.79.0/24
                  64.29.88.0/24
                  64.29.92.0/24
                  66.180.133.0-66.180.136.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ca:b7:eb:22:88:ef:2d:58:76:57:4f:fc:19:7f:0c:a9:27:0a:
         dc:eb:8d:d7:00:63:91:40:32:54:a0:39:64:bf:a3:9a:2f:10:
         44:5b:39:ea:71:33:47:f6:94:aa:3b:9f:d8:f2:b7:8c:1e:22:
         29:0d:c5:b8:fc:57:1d:35:37:23:42:58:5c:bf:08:48:98:a3:
         0a:d4:1f:8e:7a:41:ff:0e:33:74:75:d8:39:0c:a6:a2:ab:3f:
         91:60:39:a5:a6:ed:bd:18:1d:49:58:4e:11:2e:48:f6:7f:d9:
         5e:5b:14:bc:32:68:0c:36:16:f8:ca:4d:7d:12:fd:3c:36:b0:
         84:c6:00:77:1a:18:46:07:61:ed:49:2f:73:42:49:60:c0:20:
         2c:84:88:a6:9b:4b:f2:a5:83:0f:5e:1d:a1:c6:61:3a:7a:e5:
         03:1a:9e:a0:8e:b4:64:c1:62:75:2d:3f:96:ae:af:62:26:26:
         ad:8f:04:c6:84:7b:61:8f:68:68:23:99:a4:f2:7d:11:91:88:
         07:6d:a2:42:2c:5a:16:c7:2e:30:3b:62:fb:74:7d:e1:04:0d:
         96:05:43:a4:23:45:e5:8c:15:ee:50:52:54:31:4f:36:c9:b7:
         fa:8a:d6:ba:51:5a:bd:ea:72:75:a7:4c:53:c5:90:d7:26:6c:
         da:7b:74:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 19:59:19 2025 by rpki-client