Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa
File:                     0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa (raw, json)
Hash identifier:          HdRbHI7Q0DgcKHO5jZ2+RdaQPxyn3RgqqYOJl1O0ddk=
Subject key identifier:   D6:12:A7:5C:31:AF:7F:08:FF:2E:D7:AC:C6:85:08:AD:9E:16:76:C5
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848F926AF017B95A131145F2180
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        209.237.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:af:01:7b:95:a1:31:14:5f:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=5e4c3e09-a7a1-45eb-9865-16495857e076
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:46:82:03:f5:8f:79:ca:a6:fe:d5:2f:17:d4:
                    de:80:7d:13:86:d9:6e:92:70:db:9e:84:c4:53:09:
                    e3:33:6d:55:74:67:f7:a6:92:33:1b:c5:4d:dc:21:
                    a8:6b:16:17:de:a7:11:63:7d:ac:2c:e9:4e:c4:77:
                    b8:73:9d:81:c5:b1:78:74:bf:31:5e:73:e6:38:ae:
                    fd:c6:03:3b:c6:49:d5:7a:0b:a3:e8:5a:18:dd:29:
                    bd:87:7c:a1:cf:95:76:9a:b8:ff:ce:81:89:6f:67:
                    dc:be:4d:26:61:93:48:c5:45:ac:d2:7a:7c:91:31:
                    ac:82:19:4a:7d:f7:25:3c:05:2c:9c:5e:ce:38:75:
                    02:12:3b:af:ea:e6:2a:59:0c:ff:7e:4e:32:d2:b0:
                    7d:cc:41:58:9b:bd:2a:fc:ed:b3:ee:b6:8b:b7:f3:
                    10:ab:4a:27:31:d2:52:17:31:4a:b1:d0:59:be:0c:
                    3e:c2:74:6c:58:4c:2e:1d:b6:43:19:05:d6:26:d7:
                    57:a7:f2:0e:8b:2c:43:3f:ed:8d:07:72:b9:ec:38:
                    17:b0:98:51:6a:9c:be:9b:94:b6:8a:71:9d:e4:85:
                    06:60:b0:9e:22:11:91:25:13:f0:3b:4d:34:0b:89:
                    88:13:c6:6d:40:69:24:20:07:2d:c7:fb:0e:c5:aa:
                    45:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:12:A7:5C:31:AF:7F:08:FF:2E:D7:AC:C6:85:08:AD:9E:16:76:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/0abad359-2d69-34bd-9d8c-ac8100d5cd35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:ea:21:1f:a0:6a:06:9e:25:fc:c9:47:bf:14:23:2e:fe:42:
         9f:d0:da:91:04:89:3b:1c:c0:58:9b:a3:05:d8:1c:dd:88:b7:
         05:7f:36:25:89:02:1d:a9:93:85:48:69:31:24:a0:5f:58:5a:
         08:d9:71:19:e1:12:3c:13:d1:11:fa:50:60:24:c1:0a:0e:41:
         36:84:b5:ac:e2:90:81:a3:96:5e:7a:7f:12:b7:63:b4:66:fd:
         b8:e3:a5:03:35:1c:1a:c4:b4:24:35:c2:37:4f:11:7f:e8:5b:
         a3:a6:6b:a9:eb:44:75:ff:5f:06:cd:44:02:31:72:3f:d5:98:
         33:60:65:ac:64:25:71:e8:98:c1:9c:bc:b7:45:9a:35:06:8a:
         a7:21:67:5f:19:e3:e1:73:b7:71:29:a1:51:fd:a0:46:97:4e:
         06:14:2f:ae:0e:e8:fd:43:ca:0e:19:22:61:bc:e6:dd:06:c1:
         a8:e5:e6:d5:f9:c6:41:dd:13:cf:28:f4:b8:43:6d:87:d5:10:
         be:af:80:03:ae:c0:7d:21:fb:bf:3f:bc:42:05:bc:7e:17:90:
         9d:1e:cd:c5:ba:3e:d4:09:6b:b4:ad:6b:b9:8a:a5:00:a2:87:
         02:83:6b:b0:3f:44:45:b2:66:95:3d:c3:7e:d6:b8:cb:1a:15:
         6f:10:3d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:13:20 2025 by rpki-client