Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
File:                     b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa (raw, json)
Hash identifier:          58XI3cARA1jz1Heu/vKRROKJYbbbEcXe6fNJD2x0Ob8=
Subject key identifier:   58:11:B7:B5:D4:F1:DB:53:C4:1A:74:39:A7:1C:1C:49:DC:B9:58:38
Certificate issuer:       /CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
Certificate serial:       010D0C9F43285848EF613DA345598D0C28A91FC0
Authority key identifier: B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     2734
IP address blocks:        67.212.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:3d:a3:45:59:8d:0c:28:a9:1f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29f5e496-8ff8-401f-ad27-a1b624f9014a
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=c247bb62-505c-411c-bd97-9bbc8e6848c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6c:ae:00:e7:44:b1:2e:95:78:3c:4c:85:3d:
                    b5:4f:91:ee:ba:b2:83:08:45:e0:eb:20:e7:8e:50:
                    f8:71:8f:cd:f1:95:c4:f5:12:8c:9a:29:54:01:4b:
                    34:3c:0a:d3:95:36:1e:91:20:66:f1:66:00:2e:79:
                    46:35:0c:44:59:a5:66:35:98:2c:3f:72:5a:7c:a1:
                    10:86:0b:88:1f:2f:e6:3d:2e:83:a1:87:2b:1f:f7:
                    7f:22:1b:9a:38:f0:ca:6c:53:b0:c3:8d:4d:07:4a:
                    85:37:ee:28:98:99:b5:3a:12:2b:ec:b3:76:c9:12:
                    73:44:40:99:b3:54:ec:8c:2c:43:12:e2:32:44:78:
                    69:a1:29:4c:da:80:5d:e9:b0:60:4f:8c:54:e5:34:
                    84:49:db:22:59:6f:5a:c5:44:cd:58:04:11:7a:24:
                    29:38:ab:60:09:b0:34:c6:c5:fa:27:63:41:d3:d9:
                    c3:ed:05:ce:bb:69:40:9a:91:0c:41:ad:67:dd:4c:
                    0c:fd:3e:e8:57:b6:0b:d5:0b:50:29:e8:ca:6e:b8:
                    8f:21:30:32:5a:fb:14:25:5c:20:6a:96:e6:88:dc:
                    e6:a2:58:ed:c4:38:e1:c7:4c:3c:b9:e8:d9:a8:f7:
                    31:a3:9a:9d:34:43:be:36:f2:b2:03:81:8f:0c:95:
                    55:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:B7:B5:D4:F1:DB:53:C4:1A:74:39:A7:1C:1C:49:DC:B9:58:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/b4f5ac7f-8d57-39c9-b06e-edd04077010b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a/29f5e496-8ff8-401f-ad27-a1b624f9014a.crl

            X509v3 Authority Key Identifier:
                keyid:B0:74:BC:BA:01:4C:C8:F7:6F:F7:F8:CA:96:94:7F:2E:29:AC:DB:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/29f5e496-8ff8-401f-ad27-a1b624f9014a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.212.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:95:ed:6f:44:e5:83:93:7c:53:d9:1a:6c:7c:7e:be:bf:34:
         e0:ec:90:95:6d:60:40:ac:03:85:c7:d8:8a:16:f8:04:42:bc:
         96:f5:fe:6f:20:af:9f:b5:7f:7e:f2:be:fb:de:8b:90:b0:b8:
         42:13:f2:05:2a:54:46:76:4b:2d:ae:c1:fa:ab:a8:51:d7:41:
         db:2a:0a:3f:79:78:95:91:5b:02:0c:e8:1c:16:9b:49:7b:85:
         b6:0f:1d:a7:d7:89:d2:69:0d:3b:fd:5c:78:ce:81:ee:33:c8:
         2c:aa:42:aa:4c:f0:c7:ac:17:54:4b:5e:47:97:d2:16:12:8c:
         b5:8c:8f:5c:fa:a6:08:50:44:a3:cf:e1:46:fc:22:57:db:ac:
         10:b0:5f:a4:70:0e:e0:5a:0c:be:a2:a0:13:66:d5:f8:12:c6:
         dc:ad:16:88:98:f5:42:97:8b:49:ee:74:b3:9b:ad:bb:7a:7b:
         e0:ff:be:44:3e:40:df:28:37:ab:7d:33:09:83:c1:09:53:2e:
         49:d3:ab:8a:b6:03:b9:c7:18:c1:83:14:cd:b3:6d:79:f0:5f:
         30:8d:ce:66:46:89:55:6f:a9:e1:31:30:d7:2d:ec:c9:60:ae:
         d3:cf:13:ab:b5:a9:76:28:1b:3e:19:2d:6c:99:05:58:ef:b1:
         67:63:01:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 14:03:39 2025 by rpki-client