Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db25468-5cab-3435-973a-f5b07e776f22.roa
File:                     9db25468-5cab-3435-973a-f5b07e776f22.roa (raw, json)
Hash identifier:          eQ3uI5wEhJRqDpzIFQaO19CSc8PeyTvqzdIhx7ckhq4=
Subject key identifier:   61:C8:97:5E:B1:CC:11:FA:7B:34:8D:FE:F1:E8:A9:57:BC:9B:A6:21
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAFDF7D889C645DDE5F3880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db25468-5cab-3435-973a-f5b07e776f22.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33651
IP address blocks:        24.6.16.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:df:7d:88:9c:64:5d:de:5f:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=62933631-cfd1-40f2-88bc-781405ac20b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d1:fd:ff:9a:df:9f:db:4d:e8:82:6a:5e:eb:
                    12:de:ce:43:70:37:11:6e:ab:67:c7:27:8a:61:73:
                    39:23:57:2c:36:bb:f9:f5:14:1e:be:cb:dc:ea:c6:
                    3b:49:cf:6b:39:32:d0:6d:5c:11:c1:c9:2b:48:e9:
                    4a:13:92:f3:83:25:0c:b2:0f:eb:ae:d1:c0:ab:0f:
                    91:a2:48:12:e1:6e:98:d0:4f:cb:36:06:d1:d8:ba:
                    17:d7:bb:b1:e9:02:9d:5e:89:67:ae:52:d4:37:d6:
                    aa:2d:1c:63:8f:3a:f1:53:a0:f3:20:d6:45:73:35:
                    6d:c7:56:47:67:d9:9f:c2:39:ef:28:64:4f:72:cf:
                    7c:43:1f:7a:11:31:7f:83:a5:a9:08:ac:db:ab:b6:
                    8d:a6:09:ec:66:c6:27:a8:93:d9:e7:6b:93:d4:49:
                    7b:96:4b:0a:ae:fd:74:c3:1c:cf:9e:7f:b3:82:64:
                    77:14:e7:0c:e2:69:62:5a:87:0f:e8:f0:77:1e:5d:
                    14:98:5c:1b:20:94:ae:82:cf:1a:94:64:6b:9b:de:
                    b0:af:09:b5:4f:db:6b:c5:ab:fc:1b:67:a8:f1:bb:
                    0b:6f:83:30:0c:39:57:83:87:18:6a:72:e9:67:47:
                    3d:51:08:04:60:9e:8c:6f:c4:e8:0c:e4:f8:a5:6c:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:C8:97:5E:B1:CC:11:FA:7B:34:8D:FE:F1:E8:A9:57:BC:9B:A6:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9db25468-5cab-3435-973a-f5b07e776f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.6.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:40:aa:78:9d:b1:95:a8:4f:6f:11:cb:6f:61:c5:f0:47:2a:
         cd:19:ed:ab:5f:ef:d0:2b:6b:84:03:2b:e8:c4:b2:4d:31:9a:
         ba:18:3c:dd:3e:b2:69:43:50:41:2a:49:2b:05:db:87:00:b2:
         01:af:f0:18:f2:31:6a:2d:b0:ba:88:54:5f:80:d3:d9:3b:d4:
         5e:2f:8f:0c:13:8a:4f:c3:6a:81:44:2b:bb:95:9f:40:73:f1:
         da:43:4b:12:1e:6e:4b:10:e3:f6:8e:de:15:7e:12:08:84:cc:
         74:3d:97:a8:3f:e0:13:9b:c6:4a:34:51:34:be:0b:eb:70:cc:
         d0:a9:0a:20:1c:57:d2:52:1e:86:86:bd:3f:ae:fc:2e:70:1f:
         7e:13:23:9a:0a:ea:09:9e:6a:ac:69:9e:7c:cf:bb:ff:2f:5f:
         a7:e9:8d:50:01:a0:91:ea:9a:0f:78:6f:43:ff:0f:1c:05:ed:
         d8:6c:a8:a9:1c:8c:06:ab:18:b7:36:18:aa:7b:d4:27:77:f2:
         b2:c6:31:d8:17:de:28:b1:b9:e6:1b:98:aa:94:53:44:39:00:
         98:6a:63:39:90:c9:92:06:b6:2a:2e:02:f4:11:ea:60:34:93:
         28:05:26:fa:a7:53:b0:47:22:e8:0a:bd:d4:82:13:19:67:63:
         37:6f:2d:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:08:24 2025 by rpki-client