Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa
File:                     3b65e538-7eac-399f-a285-565152afd8f6.roa (raw, json)
Hash identifier:          wCAOj682gJ+N+IxwRSkhP9JkRstocQRf0L8Go8ja3W0=
Subject key identifier:   68:DB:00:F9:4F:B3:5E:EF:7A:F4:E5:AE:6A:84:24:A6:4B:D1:33:FD
Certificate issuer:       /CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
Certificate serial:       010D0C9F43285849912F31267E0034436D2CA3C0
Authority key identifier: C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     33234
IP address blocks:        64.77.213.0/24 maxlen: 24
                          64.77.216.0/23 maxlen: 24
                          64.77.218.0/24 maxlen: 24
                          72.14.97.0/24 maxlen: 24
                          72.14.119.0/24 maxlen: 24
                          72.14.126.0/24 maxlen: 24
                          97.75.255.0/24 maxlen: 24
                          208.101.227.0/24 maxlen: 24
                          208.101.234.0/23 maxlen: 24
                          208.101.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:31:26:7e:00:34:43:6d:2c:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b7074c2-7c8f-41ac-8307-74ece44a460c
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=6b98d381-ed86-48f1-b261-2a32f9f4ef82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:f2:26:25:6f:9e:80:e8:a5:59:97:0c:f4:87:
                    ea:4c:07:07:64:8a:c1:dc:7a:f8:77:57:27:41:32:
                    41:3d:43:55:5f:4d:82:44:f4:76:31:bf:55:01:2f:
                    e5:66:27:5c:a0:08:af:7e:92:3b:18:0e:a8:05:99:
                    31:99:36:44:9e:7f:49:c2:b2:f1:11:4d:3c:68:45:
                    39:03:cb:17:5b:61:a2:f0:ac:07:1b:89:08:bf:db:
                    aa:84:07:6b:a9:ae:5b:ff:0b:9f:96:f1:26:33:3c:
                    98:b3:fc:0e:f1:79:d7:f1:23:cb:fd:5b:9b:51:a9:
                    cb:e0:4a:91:08:a4:03:d1:d3:3e:74:cb:ff:b1:65:
                    ca:ea:19:05:f2:6b:8d:98:1e:20:29:f2:6d:c3:81:
                    be:7c:eb:97:4e:07:e3:ba:51:f0:07:ee:b4:86:f3:
                    80:c1:d8:dc:36:a4:39:83:1c:5a:c2:3b:5c:74:9d:
                    1c:8a:16:dd:6c:f4:9c:0a:a8:98:e2:00:53:6e:15:
                    42:68:4b:f6:90:1e:f9:38:b9:d6:bd:85:a9:e9:70:
                    36:2e:a6:09:2f:b1:ce:43:b0:93:67:ab:f2:c8:6e:
                    79:35:cb:69:22:96:53:28:4f:3f:22:cd:49:d8:19:
                    37:d6:d5:aa:fe:6c:81:5e:db:2a:e7:df:93:d0:ec:
                    58:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:DB:00:F9:4F:B3:5E:EF:7A:F4:E5:AE:6A:84:24:A6:4B:D1:33:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/3b65e538-7eac-399f-a285-565152afd8f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c/8b7074c2-7c8f-41ac-8307-74ece44a460c.crl

            X509v3 Authority Key Identifier:
                keyid:C1:CC:88:BC:4A:C0:09:D7:61:48:C3:D1:C3:B2:52:40:69:D5:9F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/8b7074c2-7c8f-41ac-8307-74ece44a460c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.77.213.0/24
                  64.77.216.0-64.77.218.255
                  72.14.97.0/24
                  72.14.119.0/24
                  72.14.126.0/24
                  97.75.255.0/24
                  208.101.227.0/24
                  208.101.234.0-208.101.236.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:bb:46:86:77:b8:a4:e8:73:9a:b1:4e:39:41:93:f6:21:5b:
         10:3a:da:0c:d9:ee:2d:19:9e:c2:c4:ad:15:d4:23:bc:35:4d:
         36:8d:11:9e:3a:f7:69:42:59:62:04:4b:fc:f3:b7:0f:17:ef:
         5b:55:33:45:54:67:df:c8:ea:8e:05:d7:d2:d8:6f:0a:a4:b7:
         52:51:39:98:1d:b6:83:c3:f4:d3:3d:03:82:53:7f:5b:32:1c:
         8d:d4:e2:c5:87:e6:40:ca:44:10:07:db:46:cd:59:70:71:fd:
         09:eb:a8:3e:a4:ba:19:a7:0c:ae:d7:61:5b:89:81:6b:a2:a1:
         c0:e4:0e:c6:cc:9b:8e:e6:c5:a5:18:71:23:fc:a2:ca:b1:68:
         a8:8b:78:ff:6e:a7:4e:1e:a3:c8:37:3d:71:82:00:15:b8:10:
         e3:19:a3:57:a4:a3:43:06:b2:87:4e:50:5e:bc:7c:dd:b4:ae:
         8a:07:a1:97:02:33:b7:6b:35:98:e6:76:d5:90:7b:5e:fc:26:
         97:93:2e:df:84:c6:30:45:4b:5e:ef:a0:f2:7c:0a:f3:4a:56:
         45:26:00:6a:7b:f7:fa:82:21:8c:ad:92:a4:fd:22:67:89:0c:
         e3:b2:8d:66:6d:f0:3a:aa:c8:a3:23:42:b8:d2:7e:57:17:9a:
         08:8f:ad:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:10 2025 by rpki-client