Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/2875eccc-c037-3a4e-a641-cf6d0ad5154c.roa
File:                     2875eccc-c037-3a4e-a641-cf6d0ad5154c.roa (raw, json)
Hash identifier:          29nMfRetLI6ZB1LLm/i3GWqGMFx8JMBm56Auva+9eqI=
Subject key identifier:   46:9A:48:A6:9F:F4:A8:07:DD:F4:32:E9:D2:B9:CB:D3:98:49:9D:F8
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858483B50066F173B9607421D8800
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/2875eccc-c037-3a4e-a641-cf6d0ad5154c.roa
Signing time:             Tue 17 Dec 2024 02:00:38 +0000
ROA not before:           Tue 17 Dec 2024 02:00:38 +0000
ROA not after:            Mon 17 Mar 2025 01:00:38 +0000
asID:                     15290
IP address blocks:        209.146.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3b:50:06:6f:17:3b:96:07:42:1d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Dec 17 02:00:38 2024 GMT
            Not After : Mar 17 01:00:38 2025 GMT
        Subject: CN=6acb80ea-2f06-4fdd-a6d1-fb4ba2e0aaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:cd:88:c1:3d:f1:58:d2:f5:b0:61:8c:06:21:
                    e9:be:d8:f8:59:9f:07:d1:56:13:2a:7f:17:e4:85:
                    18:8d:c3:7e:d7:fd:44:6f:e0:23:98:ad:c2:80:bc:
                    e4:8c:34:07:4f:10:cd:d5:6c:02:c5:88:54:1c:95:
                    bc:63:d9:51:e8:a3:11:e0:9b:7f:98:c1:0f:05:db:
                    11:ce:48:54:dc:d5:63:e5:f1:1f:cd:63:5b:52:10:
                    ce:c4:86:65:d1:6a:b4:46:58:41:37:01:b5:eb:8e:
                    a5:53:e1:74:5d:c8:80:6c:ad:e6:3f:cc:07:d8:ce:
                    d3:0b:2a:25:fb:d4:22:a1:90:61:dd:ee:c9:08:26:
                    c9:35:5d:fd:14:d7:d0:90:63:f7:5e:14:e8:09:cf:
                    84:74:08:6b:e6:22:35:f0:d3:db:71:ae:40:45:33:
                    56:f5:e8:66:70:79:df:ec:16:c0:bb:ef:a6:82:19:
                    8d:e9:5e:56:56:49:2d:0d:97:a6:7a:63:ce:a6:03:
                    73:69:66:e9:31:d6:8d:16:a7:68:1b:d3:35:0a:d0:
                    2b:d3:30:a9:15:f1:b3:47:b6:e1:90:a4:b0:c9:86:
                    ec:8b:7a:f8:21:6d:8f:84:e6:f8:08:0f:ab:f4:42:
                    12:61:66:4e:b6:6c:51:48:a6:23:8d:96:e7:9e:4b:
                    f1:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:48:A6:9F:F4:A8:07:DD:F4:32:E9:D2:B9:CB:D3:98:49:9D:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/2875eccc-c037-3a4e-a641-cf6d0ad5154c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.146.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:f5:ee:2b:89:81:e6:1b:fd:33:b0:9f:94:c7:80:8e:a9:f9:
         fa:bb:fd:28:0c:c0:32:77:9f:fc:9a:1e:b4:37:e7:74:98:30:
         03:d0:e5:a0:14:4b:1e:80:13:dc:7f:70:03:07:90:a0:6f:a4:
         dc:ce:e8:18:ab:19:1f:7e:c8:0b:c4:25:40:77:45:30:06:4c:
         9d:49:d1:45:c4:c0:be:21:8a:53:8a:da:7e:0d:9f:0d:ed:25:
         63:f4:46:12:ae:00:61:04:bd:ae:23:9a:1d:35:52:69:7a:94:
         f5:c6:61:c5:89:96:7b:90:8a:88:e3:dc:ff:70:0f:dc:d3:8f:
         53:44:7d:68:84:cb:dd:04:02:27:ff:2a:2a:ab:f3:bc:f8:4d:
         70:77:05:0a:e4:87:6b:a1:d5:66:10:46:22:ea:47:3a:9f:2d:
         52:ac:d7:bd:fc:a8:99:25:8e:51:e5:c3:cb:63:c7:a7:8d:4f:
         f8:81:6b:6e:2c:d8:65:5e:e0:46:76:ce:95:83:37:62:eb:d9:
         3f:f0:54:89:3d:a2:bb:ac:89:75:e1:c2:a3:a4:f0:a6:e1:ae:
         81:57:55:d7:00:f7:4f:e5:54:6e:58:de:96:4c:8e:d4:66:b8:
         18:d4:e9:91:de:4b:d3:db:ef:a9:3b:ba:e5:23:f2:74:64:db:
         e2:cf:aa:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:16 2025 by rpki-client