Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/670d0b8e-301b-354a-bcb6-b98e97860ea8.roa
File:                     670d0b8e-301b-354a-bcb6-b98e97860ea8.roa (raw, json)
Hash identifier:          16/0wZdx6XiMxIMVDozTuwsHKs7n4E/rfJT90lRYypI=
Subject key identifier:   57:A6:95:A1:E7:81:49:10:DE:8E:3D:95:A5:8C:A3:5D:93:D9:BB:FC
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F432858487CEB2B6FB6E97573F2ED1240
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/670d0b8e-301b-354a-bcb6-b98e97860ea8.roa
Signing time:             Thu 09 Jan 2025 14:00:52 +0000
ROA not before:           Thu 09 Jan 2025 14:00:52 +0000
ROA not after:            Wed 09 Apr 2025 13:00:52 +0000
asID:                     5769
IP address blocks:        69.12.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7c:eb:2b:6f:b6:e9:75:73:f2:ed:12:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Jan  9 14:00:52 2025 GMT
            Not After : Apr  9 13:00:52 2025 GMT
        Subject: CN=8aa96c90-c411-4721-8990-35a59a37e784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:2e:d9:89:c0:8f:3a:09:9e:1e:34:8c:11:2e:
                    6c:46:3d:ff:7b:49:df:03:94:53:7d:c1:dd:a5:8f:
                    19:fc:34:0c:13:46:4b:3d:97:2c:69:de:dd:8a:7e:
                    7c:0e:d8:37:02:00:63:d9:4d:47:e4:d9:44:81:bc:
                    77:5d:30:07:e3:55:19:61:25:80:19:19:f1:9e:d7:
                    c6:77:12:99:d6:ca:27:c9:2a:bd:e6:f9:ba:40:b3:
                    3d:3b:e2:c8:bf:0a:66:95:77:62:45:4f:77:25:ef:
                    64:29:f8:c2:ec:2e:8a:d2:53:49:69:1a:ed:03:58:
                    58:0e:fa:eb:a1:ee:c8:a6:a0:19:05:c3:59:2a:35:
                    ec:46:a1:f9:b1:ac:19:71:c0:fb:9d:96:c9:99:3e:
                    f1:01:f2:c2:cb:01:b6:04:21:24:e0:51:37:12:4a:
                    e0:70:11:a9:dd:49:85:df:97:33:68:a9:95:9d:b8:
                    db:62:f2:68:a3:96:56:d9:2d:4c:87:6b:b8:43:55:
                    27:b7:c0:08:1c:30:d5:c1:2f:31:05:62:3b:1e:96:
                    ac:4c:6f:19:ee:30:57:62:d7:f2:84:fb:fb:0f:85:
                    7f:db:8f:e5:76:54:49:cc:97:fd:f9:12:28:6d:ca:
                    06:5f:9f:34:ac:01:8f:59:7e:fc:5e:6e:d0:3e:2c:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:A6:95:A1:E7:81:49:10:DE:8E:3D:95:A5:8C:A3:5D:93:D9:BB:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/670d0b8e-301b-354a-bcb6-b98e97860ea8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.12.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:72:c3:e9:75:eb:d6:37:6d:e9:6e:80:85:86:a5:12:95:bc:
         73:de:61:0c:95:fd:a2:fc:96:0a:a6:63:6b:50:14:5f:37:cd:
         40:0c:9a:65:9e:1f:be:b6:81:63:39:ec:a5:eb:f6:c3:a4:76:
         b1:56:9d:e8:15:9a:90:4c:3c:45:15:a7:3d:f5:67:65:21:13:
         28:b6:ef:47:0d:55:b7:4e:3c:d8:ac:43:c8:01:49:d5:bc:d9:
         e4:47:d2:f5:ff:86:4f:a4:b7:85:82:b4:5e:75:4b:0c:23:fb:
         87:5d:df:cd:e5:ae:e9:d6:52:01:2e:5c:4a:c0:ec:2b:85:62:
         2d:59:ac:f1:d3:09:52:15:8d:42:f7:be:26:29:d3:bb:ea:e0:
         33:30:e4:64:59:04:bd:71:bc:6c:25:cf:a4:7a:f8:e9:bb:81:
         58:08:cf:05:25:85:50:91:c1:bf:df:a0:59:a8:f8:51:0f:bf:
         9d:66:39:93:c8:49:9a:d3:10:1c:c0:8a:b3:a2:7a:b2:6c:07:
         06:e0:85:7a:2b:b9:2a:cc:0b:0b:ea:34:07:6c:a3:e0:8d:c5:
         b8:15:1e:6f:56:a1:17:e8:23:c4:9f:42:2d:2b:c8:4d:f9:42:
         a1:5c:df:2d:31:d4:5d:78:e9:82:27:cd:41:69:c8:b6:31:4f:
         95:fe:de:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:17:29 2025 by rpki-client