Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa
File:                     c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa (raw, json)
Hash identifier:          GODT/nQCf/ZkarP9+fd7Zab2/COWHhLrBANf4Jwtyuw=
Subject key identifier:   77:B9:2F:35:8E:57:6A:01:AD:45:86:F4:5E:81:CF:B1:F7:00:4F:14
Certificate issuer:       /CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
Certificate serial:       010D0C9F432858494B6410DD0AEE235E9BEDF880
Authority key identifier: 1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     14197
IP address blocks:        69.84.182.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:10:dd:0a:ee:23:5e:9b:ed:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fceed53-754a-4a1a-9f77-5921f5f4dad2
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=4c1fb7f3-e56d-42fd-9647-098f2c66fe43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:aa:62:64:61:6d:74:5a:3d:43:7f:80:48:d0:
                    38:47:dc:d0:a9:12:50:96:44:c9:31:88:56:fc:7e:
                    a0:14:39:85:b7:c8:34:d1:f6:82:92:5f:ad:a8:17:
                    68:5f:c8:8e:6a:cd:ad:db:c4:70:e1:3c:09:e9:63:
                    9c:43:44:5b:e0:7a:70:a0:12:2f:68:9d:d1:82:5a:
                    29:df:24:b8:f4:ae:f3:c7:a1:d0:b8:33:14:8e:ff:
                    24:69:e8:ac:6f:4c:ab:4c:4a:d4:02:64:e2:91:b4:
                    38:f3:2d:86:fa:41:89:1c:d0:9e:a7:ab:6d:3c:8d:
                    10:cd:e6:d2:a9:30:9c:3f:51:c1:7b:6b:5e:31:f8:
                    ec:01:32:63:23:60:b4:4e:f6:6e:0e:e6:78:7e:d4:
                    ea:57:74:bb:1d:9c:4d:ab:c4:6a:f8:26:47:1c:f0:
                    b2:60:c2:f1:27:c3:de:45:db:65:d4:a2:c9:68:29:
                    6a:ea:ea:a9:68:a1:9b:41:0c:4c:3b:8f:cd:aa:30:
                    53:e6:5b:f1:29:1e:3e:67:68:35:e2:59:f5:8e:dd:
                    26:18:0c:6c:04:b7:31:11:0a:5d:c5:b5:12:3c:3a:
                    14:63:13:81:88:de:bb:c9:c7:7b:6b:03:3b:62:80:
                    24:99:fd:60:0f:3c:b8:1d:fa:50:bc:39:28:13:1b:
                    b5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:B9:2F:35:8E:57:6A:01:AD:45:86:F4:5E:81:CF:B1:F7:00:4F:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/c0b646e9-5e2a-3452-8ac7-bf4e33b82533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2/6fceed53-754a-4a1a-9f77-5921f5f4dad2.crl

            X509v3 Authority Key Identifier:
                keyid:1C:E3:EB:27:BF:AE:95:55:E8:B5:7B:3C:20:DF:AE:93:9E:17:4D:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6fceed53-754a-4a1a-9f77-5921f5f4dad2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.84.182.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:a5:f1:0a:99:86:e7:ca:52:50:e0:f4:10:ce:46:13:03:4f:
         1a:10:72:78:fa:ed:bd:15:5e:7c:67:3e:00:90:a1:e5:d1:be:
         e0:5f:43:04:21:d4:a1:fc:45:97:92:2f:93:bc:3b:66:12:9c:
         1f:29:64:87:bf:4c:ea:49:1e:3f:66:1c:21:a3:b9:52:81:2a:
         1f:6e:b9:48:fc:ab:62:58:b7:89:62:e1:b5:bd:a2:c7:a1:06:
         80:af:b8:41:e9:cf:35:2b:df:40:7d:48:f6:58:a5:44:53:7c:
         a0:b3:7f:d4:c6:04:bd:0a:e3:8f:b6:7f:b7:f0:fd:00:a6:23:
         72:b4:19:7c:bb:58:f0:1c:f4:c2:31:57:aa:9e:d1:83:de:de:
         22:19:f3:cc:0c:8f:32:11:9e:94:50:52:0e:6d:02:5a:55:bf:
         ec:13:8b:e8:2e:6c:ea:6a:0b:56:8a:43:a4:2d:4f:93:82:ed:
         d7:47:bf:b4:34:b4:72:37:41:19:0b:ed:41:14:e2:24:7b:2f:
         24:13:f0:2e:f3:e0:89:4b:2a:2d:f8:f7:40:4b:8f:16:55:f7:
         44:9c:36:e9:09:c4:10:b7:88:87:c4:8d:47:63:c4:f6:4a:09:
         10:5a:17:10:86:9f:39:ae:f3:ba:1d:da:38:83:f1:3a:50:cb:
         5a:77:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:10:09 2025 by rpki-client