Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/6e3728ae-114b-330b-9c45-4669f51c55a3.roa
File:                     6e3728ae-114b-330b-9c45-4669f51c55a3.roa (raw, json)
Hash identifier:          iNZw0wDgOONIFuply7j9lSaB81KCXVMAa9thnm60dRo=
Subject key identifier:   51:98:11:C5:11:93:6A:56:72:A8:8D:84:2E:E0:78:DC:5A:11:B2:47
Certificate issuer:       /CN=2b43351f-c719-4221-9a96-519406f8433c
Certificate serial:       010D0C9F4328584832F041EEDF3CFD1A20AD0200
Authority key identifier: 57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/6e3728ae-114b-330b-9c45-4669f51c55a3.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        204.15.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:41:ee:df:3c:fd:1a:20:ad:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b43351f-c719-4221-9a96-519406f8433c
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=95cdbb08-9572-47c0-9150-e420775e9d5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:6e:8a:be:fe:ce:57:31:f5:03:dc:45:16:7b:
                    78:09:ed:4e:35:95:bf:8d:2b:59:0f:1f:7f:7c:f5:
                    0a:7f:ba:a9:3e:94:60:50:68:5d:0e:b5:54:be:26:
                    cf:8c:e1:6c:92:58:3d:0f:1d:af:ee:bf:e8:cc:38:
                    f8:50:ba:69:ff:df:30:10:df:07:49:8f:99:01:14:
                    dd:ae:46:88:6b:8a:4b:cd:d8:d6:1c:23:b4:2f:6b:
                    c5:a5:1b:ac:1b:f3:2d:33:71:f2:2f:e7:c2:bd:c6:
                    32:79:23:70:db:55:5b:08:ca:a7:00:4b:4b:fc:da:
                    60:28:fc:a6:8f:fc:a9:57:d0:2c:d2:df:20:5f:43:
                    9f:9f:ed:93:5b:c4:25:d8:00:02:ce:a1:56:61:00:
                    94:41:0c:1e:ed:a4:ca:ed:c0:2d:f6:5a:53:12:43:
                    3d:1c:4d:f3:13:57:9e:7e:cc:88:b8:7d:d2:c3:0b:
                    88:03:48:3e:20:f8:c1:c6:c4:75:e0:4f:3e:fc:72:
                    9d:b1:8d:ef:57:8d:fd:95:f1:a1:0f:17:0c:c7:80:
                    69:90:72:14:bb:5f:fe:5d:9d:a6:d7:62:55:97:2c:
                    1c:ae:8b:ea:43:a6:3b:ea:2c:7e:73:03:5d:9d:4f:
                    5b:8d:66:2f:ac:cd:49:07:b1:5a:b7:32:3c:3c:ac:
                    3d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:98:11:C5:11:93:6A:56:72:A8:8D:84:2E:E0:78:DC:5A:11:B2:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/6e3728ae-114b-330b-9c45-4669f51c55a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c/2b43351f-c719-4221-9a96-519406f8433c.crl

            X509v3 Authority Key Identifier:
                keyid:57:C3:3D:1F:5B:46:16:7B:99:5D:B5:BE:A8:09:1B:FB:CF:C2:6A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2b43351f-c719-4221-9a96-519406f8433c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:b6:63:82:d5:35:e3:f7:f4:ca:10:f3:76:20:0c:60:63:fa:
         e4:31:08:37:ef:50:0a:f3:12:86:11:88:46:bb:ef:bc:02:2a:
         9f:a1:83:8f:ea:0e:d6:8c:0d:cc:42:a0:d6:2f:5d:c9:0d:9a:
         a5:29:de:aa:02:07:f5:de:72:65:4e:51:9e:af:d7:f3:dc:11:
         ec:5b:d5:99:8e:9e:62:4a:d9:36:87:4d:6b:38:e8:77:f1:d8:
         fc:d4:2f:3b:a6:32:01:3c:4b:37:0b:d9:e8:22:34:b3:8e:b4:
         11:cf:ad:90:3b:44:9a:7f:84:c7:9b:8c:48:06:6e:d0:dc:6c:
         62:df:6f:a3:39:cd:56:74:90:f2:12:8e:ef:df:13:d1:d3:a7:
         f9:75:f0:0f:9b:e1:bd:ef:32:91:85:79:77:5f:c6:e8:5f:43:
         ba:d3:4d:89:ce:96:54:c4:16:19:8e:19:9a:20:14:f1:55:45:
         bb:08:0c:96:cf:29:e3:86:b2:bf:41:32:09:1c:e4:20:1e:fc:
         6f:f2:ff:0d:0b:63:f0:36:8d:dc:eb:85:af:eb:a4:9d:68:79:
         b7:3b:14:ac:10:34:c0:c9:0d:02:20:4e:27:61:f2:b3:5a:f5:
         9d:98:fe:f8:9c:4f:99:47:54:cb:30:0a:03:18:fb:45:dd:07:
         58:7d:7b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:37 2025 by rpki-client