Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa
File:                     27f67c2e-5343-3665-869e-5961a293bd0e.roa (raw, json)
Hash identifier:          PPIPUKEsNQ2hSYRR6JGlKxLvuQkDzynZhkPXOA0PCvw=
Subject key identifier:   C3:EA:E4:70:BC:44:91:24:4F:91:E3:A9:0D:E9:C5:4B:F5:24:AF:6B
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858486D905C8824C2C66C4A6E8D60
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     49367
IP address blocks:        108.61.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5c:88:24:c2:c6:6c:4a:6e:8d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=34ddf76a-ac32-4687-8426-e9ab9ee672ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:70:6d:54:a7:ea:27:06:e0:e6:0f:dc:f7:9a:
                    6e:85:48:53:18:e1:e7:4a:bf:9b:fe:44:08:04:0d:
                    7f:47:77:53:21:a4:c9:d9:83:db:b7:1d:80:95:ef:
                    11:e2:05:04:11:1f:71:e3:5c:93:af:ae:86:8c:d6:
                    b2:c5:f2:34:d1:49:b0:f9:43:a4:ff:9b:9d:dc:65:
                    d9:e6:e1:2b:69:64:fb:0e:7a:a0:fb:c7:ff:17:c0:
                    12:35:38:68:49:90:6c:7a:e9:70:a2:94:da:43:96:
                    a5:11:4a:64:d3:32:2d:6e:0f:e7:53:21:37:dc:72:
                    45:c4:0f:99:cd:3d:12:e2:07:22:d6:98:5f:9d:25:
                    b6:1c:54:d1:72:5f:93:fe:f8:2d:0e:25:93:87:69:
                    6f:2d:53:b5:db:b0:a6:3c:62:cd:d9:36:bb:ce:6a:
                    55:d3:5e:20:87:8c:c5:35:fe:28:fa:e2:90:b6:93:
                    2e:b2:d3:2a:56:21:67:f4:dd:88:62:ac:3a:d8:bb:
                    3c:f1:e3:7e:84:44:f1:3b:48:5f:63:25:9f:a6:9b:
                    20:a5:db:11:18:55:bb:3a:21:55:3b:61:41:e5:cd:
                    cd:84:66:38:b4:de:27:5b:4e:41:8a:97:5f:45:b9:
                    73:8c:66:d7:45:bc:7e:ab:5a:3e:21:4c:31:a9:33:
                    4e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EA:E4:70:BC:44:91:24:4F:91:E3:A9:0D:E9:C5:4B:F5:24:AF:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.61.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:78:b0:31:bc:96:69:03:92:f4:b5:05:4f:de:ad:7d:51:d2:
         fd:28:05:45:81:0c:f8:51:a5:1f:72:8a:9b:67:df:2d:0f:7e:
         0a:a4:85:b2:c4:a6:42:bb:32:d6:21:36:01:5f:f7:ee:c0:38:
         6d:eb:ae:17:c4:41:eb:b8:42:07:75:a1:6f:87:7b:d6:5d:3c:
         1b:ae:3e:b0:83:c0:0f:c7:45:9d:23:9e:e8:b2:1e:26:a3:df:
         f5:af:ac:25:d6:23:fd:54:88:57:a9:b0:b3:dc:99:b1:ad:14:
         00:65:64:5d:10:21:f2:57:b7:60:c3:40:ae:27:89:64:eb:b5:
         cd:0d:6e:95:c7:d5:d9:55:6f:9b:66:97:62:cb:70:4d:2a:60:
         58:a8:75:e4:9e:52:60:b0:bf:65:e1:0d:b5:a8:ab:e9:3e:f6:
         95:c4:0c:be:52:ef:fe:cd:d7:64:a8:49:bc:48:4e:60:a9:da:
         df:d9:19:d6:d3:3a:c7:e3:c8:7a:e3:06:f7:b6:ba:e2:bf:7e:
         28:e5:a8:ee:9e:7b:9a:b5:0b:f5:29:0f:e4:4e:d2:3d:e1:7c:
         c0:df:b7:86:88:3b:88:2e:a2:e4:7c:a9:b6:ce:ba:24:7b:cd:
         6e:2d:61:4f:f6:f6:de:6a:a9:e2:e1:1e:00:34:32:00:4d:66:
         ef:48:aa:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:06 2025 by rpki-client