Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa
File:                     d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa (raw, json)
Hash identifier:          f5G3oIiQV1sd0LmM9SjkV1mbml4StgcA7Mk+mabv8Ks=
Subject key identifier:   AA:F2:56:5D:05:7D:83:DF:36:D7:E5:42:54:9E:22:9D:D2:CE:48:42
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848D6410E252134488B8D482F00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa
Signing time:             Mon 10 Feb 2025 14:00:52 +0000
ROA not before:           Mon 10 Feb 2025 14:00:52 +0000
ROA not after:            Sun 11 May 2025 13:00:52 +0000
asID:                     55246
IP address blocks:        69.1.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d6:41:0e:25:21:34:48:8b:8d:48:2f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 10 14:00:52 2025 GMT
            Not After : May 11 13:00:52 2025 GMT
        Subject: CN=2d228480-270c-4bf1-a4d2-d60da5fe643e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ad:33:01:42:b5:28:44:27:14:9e:45:28:75:
                    d2:57:9a:d2:2a:59:67:06:f3:7f:31:a8:01:4c:7a:
                    3d:61:68:ab:a6:af:33:28:a4:f1:2f:cc:53:2c:95:
                    c9:fd:29:39:4c:8e:6c:eb:ce:05:b2:8c:c8:b9:b8:
                    af:cd:48:33:8b:e7:39:0a:28:94:99:76:25:64:7b:
                    7d:f6:9d:a7:fd:95:34:ef:fc:13:5b:63:db:03:69:
                    31:22:0d:b1:a2:54:f2:53:0f:eb:cf:a7:03:1b:b8:
                    86:08:5b:ee:2b:e5:12:4d:65:4e:b0:db:8d:ae:1f:
                    34:7b:04:86:3b:09:81:12:ed:7c:51:68:0a:82:cd:
                    da:67:c7:6a:d8:ff:84:33:8f:01:85:c6:b5:7c:81:
                    16:10:17:e5:20:b8:9d:b0:d9:0c:82:84:4d:ec:80:
                    ed:6c:10:86:9a:d9:fc:9b:1f:be:22:0f:df:46:c9:
                    ea:7b:ce:d3:fd:48:ca:73:00:2a:c5:6f:46:15:ea:
                    90:36:1a:8c:b4:dc:72:24:f7:df:55:cd:5f:a0:ad:
                    5f:c1:c3:ed:4c:d8:26:a2:0b:ec:21:31:77:b7:b6:
                    ca:52:23:09:f9:d2:68:0d:a1:5e:b8:ee:c2:90:de:
                    ec:4e:83:cc:81:89:bc:70:89:03:74:47:c7:b9:5c:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:F2:56:5D:05:7D:83:DF:36:D7:E5:42:54:9E:22:9D:D2:CE:48:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d6e0607e-4e8c-3fed-95f0-82a11a869a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.1.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:2b:ac:f3:bf:c6:d3:70:99:95:35:66:70:ec:44:d3:d6:89:
         04:02:09:de:e6:2e:10:c3:1c:77:b2:fa:b3:86:23:69:00:2f:
         92:f7:99:cf:3a:65:77:4c:e5:0d:6e:3d:0a:4c:cf:53:52:04:
         07:db:a6:ad:dd:3d:ff:fe:82:d5:06:1f:a7:d3:77:4f:58:c5:
         c4:ae:38:b8:28:74:c5:a4:7c:41:7b:2a:10:dc:54:6d:62:4b:
         d3:65:29:65:a8:7d:dd:e5:25:1f:0e:0d:12:e7:73:11:c6:b0:
         c4:89:19:82:36:19:0d:c0:31:41:d0:91:6c:c9:45:7e:a7:f0:
         6f:da:dc:df:7d:4c:b5:e3:00:0a:ad:6b:ab:4c:c2:23:62:1d:
         8a:2b:2a:47:73:78:b5:0f:e8:d8:29:0b:86:08:e0:49:a6:7c:
         86:1d:66:ae:17:39:30:1e:3f:63:3c:93:92:51:7d:14:d5:13:
         f7:3d:4b:d6:fa:8a:37:f4:da:69:2a:a7:41:03:a6:48:ca:bf:
         f3:a1:39:f0:4d:83:80:aa:c7:c0:4b:eb:e4:65:a0:d7:d2:38:
         30:46:46:62:76:15:75:cf:50:7c:15:ba:8f:08:33:14:27:ce:
         58:48:1e:fe:52:ce:8c:33:5c:51:53:de:59:da:8b:4d:2b:02:
         57:ee:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:08:57 2025 by rpki-client