Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa
File:                     f83a1185-9bbd-341e-96d1-df7756f22434.roa (raw, json)
Hash identifier:          ZkDr12gGD+p3PvelYf8yEeZIK08LZVMdGIRlbh/ScaU=
Subject key identifier:   85:AF:FF:7C:B5:38:6D:DC:8A:84:11:59:1F:B8:16:F5:18:E9:2A:9C
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C42C104812CDD1A3BAB6BB80
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa
Signing time:             Tue 04 Feb 2025 02:34:06 +0000
ROA not before:           Tue 04 Feb 2025 02:34:06 +0000
ROA not after:            Mon 05 May 2025 01:34:06 +0000
asID:                     14813
IP address blocks:        69.73.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:2c:10:48:12:cd:d1:a3:ba:b6:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 02:34:06 2025 GMT
            Not After : May  5 01:34:06 2025 GMT
        Subject: CN=36a39254-bcb6-4937-80a1-21c28138e097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f4:fd:21:c0:b2:1d:35:a6:67:28:fe:2b:6f:
                    98:37:7f:f2:77:3b:df:c0:12:e9:63:78:85:fc:53:
                    2a:d5:6a:a8:8b:fe:10:fe:64:77:6c:28:a2:8b:7a:
                    f2:66:1a:49:a0:ee:e8:a4:c7:72:18:56:95:ef:fc:
                    c2:44:e6:91:dd:e5:c8:ca:ec:ac:e2:9c:ee:7c:e6:
                    01:90:8b:8f:23:70:17:27:96:48:03:5b:e9:f4:ae:
                    76:98:f3:42:4f:c5:30:9c:da:34:ac:03:41:13:19:
                    a9:a5:5c:93:30:77:ef:2e:9e:a9:8e:4c:4d:9d:81:
                    1e:82:c3:ae:85:44:7f:fa:56:42:25:6b:e3:23:81:
                    60:22:33:d3:c0:92:a1:6a:04:0c:21:d3:60:1e:2e:
                    cf:cb:7a:f9:b5:06:15:b1:6e:7b:48:5b:d7:22:3f:
                    8c:86:b8:46:21:f3:57:ba:80:46:e6:d3:56:2d:d1:
                    70:0b:15:28:2e:83:67:ec:f3:32:88:53:7c:4e:08:
                    ae:f9:17:82:9a:02:8f:a3:dd:16:d2:db:ce:4d:aa:
                    28:60:ac:78:71:46:b6:f3:e0:06:f7:db:0c:c1:9e:
                    19:83:dd:ac:5e:f1:1e:91:d8:95:24:20:c0:a2:e9:
                    37:f1:3f:44:3f:3b:67:16:b1:4d:0a:58:13:a1:b2:
                    c0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AF:FF:7C:B5:38:6D:DC:8A:84:11:59:1F:B8:16:F5:18:E9:2A:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/f83a1185-9bbd-341e-96d1-df7756f22434.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:d6:04:07:be:a8:96:e6:21:6f:b8:6c:21:bf:c3:ae:2b:b7:
         08:62:bb:92:99:17:ab:fc:c6:29:91:ea:af:3f:77:81:f4:62:
         d7:ff:7b:46:88:ce:d7:ea:a7:d6:19:5e:f7:47:cf:8e:44:1c:
         34:ad:fb:48:74:e6:87:7c:ed:3f:fc:eb:dd:f2:23:ce:0c:c3:
         5e:8c:12:65:94:e3:3e:5c:d4:a5:19:c0:ef:e3:06:3a:13:ef:
         76:d5:73:d9:8a:f0:a8:0a:e6:32:c4:fc:b2:a0:3e:12:15:e3:
         5b:8b:a9:1a:85:30:ae:7b:b3:b4:ed:8d:7c:6a:99:a8:5e:3c:
         ab:e2:d4:62:1b:24:6f:e1:ec:97:79:2c:24:78:ac:48:93:5d:
         72:36:bf:c4:1b:d1:53:e5:6c:c3:9c:68:93:89:8c:5f:b6:30:
         58:aa:bd:a1:0c:a9:ee:30:a6:dd:f8:bb:6e:67:fc:ef:cd:0d:
         e5:02:34:d5:01:ee:0f:3d:a0:43:ae:33:d6:d5:dd:60:bd:37:
         eb:fe:5d:5a:2a:e2:2d:65:22:04:c5:9e:e4:bd:c5:70:b3:77:
         f1:f9:f7:86:fb:cc:a0:9e:60:76:76:a1:36:c9:6e:73:11:7f:
         d3:94:07:8d:49:0a:9a:7b:19:ed:11:9a:3d:82:dc:5e:10:06:
         25:1c:a2:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:14:02 2025 by rpki-client