Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa
File:                     cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa (raw, json)
Hash identifier:          1ldH6O1i44fFf+hUO11y6eHF/1g/CFc2MO8kHuKKHYc=
Subject key identifier:   BE:68:86:DD:46:B5:BE:CD:43:9C:AF:5E:F8:2F:F6:0C:00:E1:B8:63
Certificate issuer:       /CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
Certificate serial:       010D0C9F4328584961B995694AF507C67A5F4480
Authority key identifier: 1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     10397
IP address blocks:        209.209.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:95:69:4a:f5:07:c6:7a:5f:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3bc6b64-ca83-4525-9f1b-5731b6c68370
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=a85a8f97-ba93-4bd6-98a5-a92212050862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3f:6f:8e:66:5a:fa:35:7d:28:ce:e9:65:4a:
                    fe:4e:fc:1a:9c:9b:ca:36:d1:11:15:99:c4:32:4d:
                    bf:fa:86:5f:2b:f9:4b:c3:50:95:9e:f1:0b:f3:dd:
                    52:48:e1:28:e4:dd:65:15:8a:42:66:5e:27:1d:a6:
                    a4:7c:ef:38:4a:82:ac:d4:65:3f:5f:09:93:b4:db:
                    41:d8:54:dd:55:7a:13:8e:e1:eb:c8:5e:70:09:5f:
                    d8:68:88:7f:f7:36:9d:e4:a3:7c:d0:f8:7e:7a:5c:
                    f9:57:78:e7:1a:72:9c:80:9e:3b:4c:1e:f2:ae:0f:
                    64:c7:da:87:b5:7e:4a:cb:fe:16:cd:a5:76:b6:f4:
                    69:a5:69:d4:52:0a:08:fe:2d:ea:68:bb:73:59:5f:
                    52:72:bb:e2:4f:87:58:3e:98:4e:3a:39:9a:4f:2b:
                    3c:cb:93:03:13:e5:c0:84:e5:fa:97:22:35:fa:5f:
                    a8:6f:fc:9f:48:60:49:1b:99:78:0d:1a:39:2c:0a:
                    36:24:dc:27:1e:32:2f:a1:41:ad:96:28:cd:d5:ea:
                    00:74:b4:d3:67:90:dd:85:d8:49:78:47:6f:69:6e:
                    19:ba:a1:92:46:08:29:7d:2e:73:80:e9:45:83:ff:
                    19:61:2a:d1:26:9c:ef:26:5a:df:88:48:23:95:26:
                    6a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:68:86:DD:46:B5:BE:CD:43:9C:AF:5E:F8:2F:F6:0C:00:E1:B8:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/cc9b5979-00b5-3587-b9a7-0eb57c02bfd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370/f3bc6b64-ca83-4525-9f1b-5731b6c68370.crl

            X509v3 Authority Key Identifier:
                keyid:1A:8A:06:DC:58:69:4B:E7:E0:24:9A:A4:D1:B3:FA:1F:D8:E0:5B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f3bc6b64-ca83-4525-9f1b-5731b6c68370.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:fb:a2:ee:00:f9:cc:d5:a2:b9:a3:0e:23:22:42:2e:e9:
         37:6b:fb:c0:e0:7d:ba:5c:20:c3:d8:a8:1f:2f:81:9d:82:f6:
         9b:da:84:d6:46:72:e2:39:70:f3:d3:74:72:3f:e9:0e:3e:f2:
         97:92:df:69:24:41:8b:5d:8a:1f:1f:82:1b:49:62:22:68:03:
         51:c5:ae:19:fe:da:cf:44:8f:6a:26:ef:19:af:56:05:e4:6f:
         69:39:48:2e:0a:01:30:22:be:cc:19:84:94:33:ca:3a:4f:e3:
         dd:e9:af:1d:e4:08:ac:8f:bb:1b:5d:54:8b:63:44:30:f2:b7:
         1c:93:83:36:72:60:45:c2:39:8e:6d:a2:87:20:40:6d:3f:54:
         eb:62:de:78:04:7b:d5:a0:22:cb:7e:29:25:e1:59:5b:0a:ec:
         10:fa:11:ae:ed:82:52:56:cd:68:a6:d5:31:a2:ae:55:b7:d3:
         e5:fb:fd:45:10:48:4a:41:99:fb:c0:fc:49:0a:38:e2:25:33:
         72:95:78:6d:03:70:50:bc:4b:88:96:d3:35:73:d7:ad:e6:a0:
         8c:f5:69:95:0b:b6:3d:dd:da:cd:81:13:14:78:f0:4a:d7:fc:
         51:bb:41:03:f2:63:ce:67:52:1f:bf:9a:a3:38:3b:56:a9:b5:
         36:79:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:44:26 2025 by rpki-client