Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/fc2e10d0-5d3e-3b32-be39-865c8855c2fc.roa
File:                     fc2e10d0-5d3e-3b32-be39-865c8855c2fc.roa (raw, json)
Hash identifier:          eua2k26WRut9KoWH9NF9CKlqLgEejUV2nVg+sk1RRZU=
Subject key identifier:   C9:99:55:48:69:10:52:7E:76:69:BA:D7:54:DE:D5:55:17:8D:89:58
Certificate issuer:       /CN=0798a6ff-307b-4061-bdd4-a418e9f3caf2
Certificate serial:       010D0C9F432858498769BD407680A9D889742B08
Authority key identifier: D3:41:E0:7D:E3:9A:24:10:07:00:CB:8D:4B:B6:A0:B3:78:4B:0C:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/fc2e10d0-5d3e-3b32-be39-865c8855c2fc.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     16509
IP address blocks:        65.98.146.0/24 maxlen: 24
                          65.98.206.0/24 maxlen: 24
                          65.98.214.0/24 maxlen: 24
                          65.98.228.0/24 maxlen: 24
                          65.98.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/0798a6ff-307b-4061-bdd4-a418e9f3caf2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/0798a6ff-307b-4061-bdd4-a418e9f3caf2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:bd:40:76:80:a9:d8:89:74:2b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0798a6ff-307b-4061-bdd4-a418e9f3caf2
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=70dc5f95-080f-48fc-bcc4-ac794f713a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:45:32:9a:99:92:da:31:2b:cd:67:de:18:a7:
                    33:1c:88:b9:be:29:de:80:b8:26:ba:14:de:84:35:
                    a6:57:4c:6e:8d:db:e0:cd:4c:c2:8f:6d:6a:bd:10:
                    cc:fa:29:24:8c:75:cd:a5:8a:fc:eb:29:c3:df:87:
                    e8:11:ee:18:e5:c6:83:d8:86:a9:73:38:95:5d:02:
                    38:0e:05:83:97:be:a7:62:78:8a:03:b1:76:6d:1b:
                    da:41:14:24:ab:38:7c:3d:da:53:5c:a6:d1:fa:f3:
                    bf:f2:27:c1:fe:46:40:a1:43:e1:20:96:c9:88:1e:
                    41:7a:2a:f0:ee:d1:4a:70:c0:ed:0c:8e:99:70:d1:
                    bc:7b:0f:ba:5e:2e:40:b0:55:73:e9:ac:2d:42:da:
                    2f:39:de:13:9d:52:93:9d:20:a6:00:10:ee:f7:1b:
                    81:ca:bd:c7:08:d5:db:6a:55:a2:6d:81:80:a2:69:
                    7b:72:c1:d2:f4:8d:b8:a9:23:2f:59:a5:7e:bd:70:
                    0e:69:fd:8f:02:d0:8c:e3:b1:61:c7:49:85:70:27:
                    ad:25:f8:3c:dd:f2:e9:ec:b1:5d:77:5b:f0:b8:7a:
                    08:3f:e8:5f:3c:36:65:50:96:c0:4b:5f:83:cf:da:
                    54:6d:35:8c:54:4c:7e:30:9f:10:0c:c5:70:f7:2e:
                    22:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:99:55:48:69:10:52:7E:76:69:BA:D7:54:DE:D5:55:17:8D:89:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/fc2e10d0-5d3e-3b32-be39-865c8855c2fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2/0798a6ff-307b-4061-bdd4-a418e9f3caf2.crl

            X509v3 Authority Key Identifier:
                keyid:D3:41:E0:7D:E3:9A:24:10:07:00:CB:8D:4B:B6:A0:B3:78:4B:0C:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0798a6ff-307b-4061-bdd4-a418e9f3caf2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.98.146.0/24
                  65.98.206.0/24
                  65.98.214.0/24
                  65.98.228.0/24
                  65.98.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:10:72:68:60:c3:8d:47:47:11:79:83:b5:f7:36:79:27:27:
         dc:9e:36:31:4c:42:bd:6c:44:92:02:6e:30:99:c8:09:71:f0:
         74:af:49:2c:a8:9e:bf:be:62:e0:91:76:5c:c2:2d:0c:63:ef:
         ed:e0:33:2c:83:40:a2:af:6d:c3:df:7e:58:8b:23:48:03:f9:
         11:3d:40:e5:43:52:5a:1f:3d:87:96:d2:8a:d8:38:0a:4b:00:
         e1:58:f4:d5:bd:14:f2:20:1e:c0:e9:15:73:00:e4:6c:08:2a:
         7d:c1:8f:2f:1e:df:99:3f:1e:a0:72:f3:5c:f8:b2:28:c0:0e:
         3f:7a:6b:41:d8:35:09:5b:25:93:fc:29:db:3d:48:f6:33:11:
         e4:16:6c:bc:ee:11:b6:eb:ca:8a:69:b2:41:0c:ef:87:cb:22:
         9d:ff:ac:dc:3e:ba:e4:ab:51:18:9e:65:84:6e:78:9c:0d:d6:
         20:e4:ae:84:d5:ee:f0:a9:10:4a:77:8d:26:4b:8f:c9:84:99:
         57:ec:76:aa:5b:2b:08:96:ad:3e:27:ea:d4:de:1d:e4:34:c3:
         7a:80:6c:47:07:cd:1f:fc:a6:89:04:c0:a6:a4:16:f8:72:bf:
         bc:0c:be:d7:8a:23:31:91:00:21:39:c3:0e:9f:95:c4:85:37:
         7a:35:5b:f4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:16:51 2025 by rpki-client