Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa
File:                     c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa (raw, json)
Hash identifier:          c3TpTDS0rOtb3yL6f1JBXCubT8ukU2+/BPcMPGWSxhI=
Subject key identifier:   B8:A1:B6:A2:59:C0:B7:1B:BA:6F:F9:EB:91:48:06:75:2B:1B:07:4D
Certificate issuer:       /CN=6a5786d8-68bf-4c69-b086-11587b550447
Certificate serial:       010D0C9F4328584819CFD35C9EDDEA566870BF00
Authority key identifier: 0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     10935
IP address blocks:        216.197.73.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d3:5c:9e:dd:ea:56:68:70:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6a5786d8-68bf-4c69-b086-11587b550447
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=7f066ace-b8c0-4843-9058-cf8b9a4b9280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:03:0a:f9:2d:76:8a:8a:1c:ed:6f:96:7f:3b:
                    3f:79:f6:97:4b:c5:ea:48:d1:e0:a0:a4:5a:fd:48:
                    89:5e:a0:c6:86:83:b4:6e:fe:8e:2b:b0:ee:d9:d8:
                    b4:72:28:b2:4e:38:c0:25:a6:44:03:ee:fa:f5:30:
                    62:ed:3e:3d:a9:10:28:ce:66:e0:fb:1f:7a:9f:77:
                    e1:f4:5c:84:a2:b3:7b:b5:71:7d:ca:7d:7a:2e:1a:
                    13:0a:c6:8b:6f:1a:85:60:45:6f:56:6a:15:65:fc:
                    2b:8c:d2:49:99:64:ea:bf:55:94:05:0f:e3:d7:79:
                    53:b5:55:44:f0:79:b0:b6:19:5e:28:0d:b2:59:bf:
                    2f:57:4f:0a:48:1a:4f:b9:a5:63:3c:c7:09:81:21:
                    00:9d:9f:dc:ef:7c:0d:18:b7:4a:2c:3b:10:e6:b8:
                    37:a0:29:ba:03:4f:39:1a:18:84:ba:01:ba:ca:ac:
                    5b:5a:0b:88:cf:02:97:26:77:45:e3:81:12:cb:e0:
                    79:de:db:66:06:bd:53:c9:af:e7:b1:94:9f:9b:a1:
                    70:54:88:c4:ad:5a:4d:74:da:fd:e6:41:92:49:7b:
                    96:e3:be:9b:6f:df:5a:7e:bf:4e:7b:cf:ae:5b:c1:
                    64:62:7a:39:cd:05:1d:27:1f:53:91:77:17:cc:54:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:A1:B6:A2:59:C0:B7:1B:BA:6F:F9:EB:91:48:06:75:2B:1B:07:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/c76e1e1d-9c04-3d87-9468-0c23ca6c0bc0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447/6a5786d8-68bf-4c69-b086-11587b550447.crl

            X509v3 Authority Key Identifier:
                keyid:0C:CA:4A:6B:90:74:B8:91:F7:8D:75:32:2F:72:EF:48:B7:81:A9:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a5786d8-68bf-4c69-b086-11587b550447.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.197.73.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:c1:b8:86:41:7c:88:fe:f3:50:82:17:6b:d3:ac:a5:3f:e1:
         48:b9:a2:7c:92:44:8a:e6:e6:12:0e:67:69:e8:3b:74:ce:e5:
         6f:83:b0:d8:1b:f1:5f:6a:ba:3a:91:0b:4e:70:98:ea:48:ee:
         1f:7b:90:a2:6e:e8:52:88:f6:c9:53:7d:8c:96:3a:45:4b:c5:
         47:ec:81:49:95:cf:1b:0b:a0:e1:f8:ad:63:eb:95:c4:2e:80:
         09:c3:0e:29:1b:04:a1:cf:42:e7:e3:d2:32:8d:a6:50:54:fb:
         cb:df:2e:74:30:ca:f5:2f:05:04:32:a8:27:09:bd:9f:20:9d:
         15:0b:c5:5e:42:25:53:4e:28:30:e2:f2:b5:ff:f7:54:ba:4b:
         d2:ac:5d:f6:6c:b3:f0:c6:43:43:ac:06:0d:81:86:26:4c:10:
         5b:28:6b:50:8a:5f:7b:43:42:a6:45:24:b9:1b:fa:5f:54:6a:
         db:66:66:43:8a:97:74:91:47:33:f0:fb:40:3b:24:32:76:c6:
         20:25:c4:7a:a0:39:db:b8:2a:15:5c:26:07:31:ea:a9:2a:f6:
         33:86:f7:e0:7c:9e:61:12:b2:00:ab:e8:df:be:7c:d1:21:69:
         4b:63:3a:35:40:ff:59:69:e4:10:7a:99:2b:f2:84:c8:2e:63:
         ce:66:7c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:29 2025 by rpki-client