Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa
File:                     de5b00f2-cadd-3f54-97b7-032b7ca57259.roa (raw, json)
Hash identifier:          O+Ulimht5AHtIqKgD3Rb8+IdOtdDT8PGywvcknQSj78=
Subject key identifier:   9D:78:B6:59:D2:A8:CF:1C:9F:91:11:C1:08:0C:F5:D5:88:77:01:2A
Certificate issuer:       /CN=237e8029-86f4-41b0-ab75-535531b02fb3
Certificate serial:       010D0C9F43285848B8F0C41385D0AA685F4734A0
Authority key identifier: F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     30713
IP address blocks:        209.221.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c4:13:85:d0:aa:68:5f:47:34:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=237e8029-86f4-41b0-ab75-535531b02fb3
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=43c9ff03-1d74-4ca4-a9d7-211e67e7d025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:6f:b8:6b:f6:cd:2e:26:79:88:ef:0c:3b:
                    90:c8:c4:76:42:43:12:4d:97:c3:01:c6:db:f6:d7:
                    da:00:a3:9e:33:30:8d:6a:61:25:b2:7f:4f:a1:14:
                    66:83:dc:39:33:cd:41:fe:45:e2:97:fc:30:90:c5:
                    25:ba:aa:d2:4f:a9:e3:63:f8:08:67:93:2e:7b:05:
                    5e:ad:0d:e4:60:05:f7:01:61:f4:b0:a6:ed:98:c6:
                    cd:e7:58:3d:f5:f9:ba:34:4a:3b:86:b0:51:ef:df:
                    2d:3a:b7:5a:88:7c:96:65:7d:3a:eb:7d:00:12:db:
                    29:db:f9:3b:f5:3f:5b:c6:20:b3:6f:35:7b:64:30:
                    6c:92:3c:09:34:81:a9:c6:31:b7:af:90:24:6c:29:
                    45:82:46:36:75:32:10:77:b3:1f:f9:d0:72:e7:3e:
                    3a:4f:9a:6f:ba:b7:16:b6:eb:1e:82:ee:89:78:72:
                    70:ab:63:a4:95:0a:b6:0d:0b:38:9d:9e:02:c5:0b:
                    f7:07:c3:ab:02:b2:d6:50:44:80:f0:66:d4:92:bc:
                    bb:70:78:68:08:67:89:9c:5f:ea:3d:12:77:3a:8d:
                    11:6b:02:c4:30:ba:0d:d8:c2:77:6d:15:a1:6f:f1:
                    44:87:5c:77:cf:0d:bc:8d:4c:59:f0:62:ea:af:b9:
                    1c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:78:B6:59:D2:A8:CF:1C:9F:91:11:C1:08:0C:F5:D5:88:77:01:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/de5b00f2-cadd-3f54-97b7-032b7ca57259.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3/237e8029-86f4-41b0-ab75-535531b02fb3.crl

            X509v3 Authority Key Identifier:
                keyid:F8:32:2A:B4:B0:35:C2:D6:A3:D4:EC:A3:B3:76:1C:14:AE:AB:6B:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/237e8029-86f4-41b0-ab75-535531b02fb3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.221.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:b8:66:8c:7f:ad:08:43:d3:2b:4f:b9:40:8d:72:ad:c0:26:
         d5:4f:a4:7f:90:d2:29:f1:dc:3b:9d:50:cb:24:dc:7f:17:77:
         1e:62:35:d2:42:72:0a:d6:d2:e3:be:17:6a:81:f4:13:83:46:
         08:18:90:40:f0:17:89:c1:a8:d4:f5:66:a1:36:42:6a:da:1f:
         d0:14:9b:62:56:68:00:fd:52:5b:9a:54:8c:d9:fa:f6:f5:5b:
         35:c9:f2:b8:09:a6:7d:22:12:01:60:4b:bc:f2:4e:d4:58:9a:
         82:dc:9a:9b:0b:e6:e2:f4:88:11:a0:56:ac:0b:fc:1d:5e:32:
         98:27:db:79:7a:0e:a0:88:59:df:53:28:09:5a:bd:5a:3a:31:
         1f:8b:df:2d:0b:53:c3:b7:c0:6b:ad:d2:33:ca:66:62:24:5c:
         b5:17:3e:67:01:f2:73:c9:5f:03:47:d9:cc:1d:4f:81:6a:f0:
         79:0a:53:68:c1:77:f0:eb:84:f6:5d:83:a1:69:ce:a8:5e:7a:
         93:8a:fc:ff:c9:4e:d8:bb:7b:f1:be:fe:06:5a:87:14:9e:bc:
         fd:cf:55:41:1d:21:09:da:77:07:79:38:93:b3:fd:22:3f:a8:
         2f:fc:ea:f7:d9:dc:d3:5f:6a:a9:0e:bd:66:87:75:48:fa:aa:
         ed:1f:1d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:54:31 2025 by rpki-client