Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa
File:                     94526494-d78b-3acf-880d-ce05e06124c2.roa (raw, json)
Hash identifier:          WqrHYPnz3ZmLjGJwhvKbfAptzCQ+pTrMb9bNC11nh8o=
Subject key identifier:   D4:DF:7C:46:39:DE:11:2F:EF:92:C7:6B:3C:3D:33:AD:D6:BF:96:40
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858491D7182696063AE4D04F8D900
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        216.234.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:82:69:60:63:ae:4d:04:f8:d9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=6f606459-324c-40e2-8be6-1bd33e7e0075
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7c:8b:10:90:4a:92:06:2d:f5:61:93:d3:96:
                    7a:d9:b0:6f:b8:cb:35:de:a4:5a:04:9a:5b:e4:15:
                    aa:3e:63:dc:22:6f:9a:7c:5f:ac:aa:5c:05:69:89:
                    33:ab:8d:19:28:3e:c8:90:5a:0a:f7:5a:41:71:2d:
                    1d:b5:65:0f:40:06:80:da:83:19:2f:40:a7:51:28:
                    4f:01:ea:db:ee:5f:37:28:45:77:37:21:d9:be:58:
                    51:10:a4:61:37:d6:2b:ca:65:4e:78:0e:23:1e:2c:
                    18:87:69:9c:c0:f7:94:f5:45:ce:93:5d:b0:d0:b7:
                    8d:ec:ce:3d:ae:08:87:f4:e2:4f:6c:d2:2c:3b:21:
                    c0:c3:8c:11:bf:c1:26:62:dd:fe:fd:27:e1:f8:d5:
                    45:b2:f6:5b:11:42:bc:0d:bc:bf:c4:0c:80:85:aa:
                    a2:af:ae:e2:c7:a7:70:17:f3:54:81:41:04:1f:e4:
                    a2:4d:28:aa:4c:7b:f7:c3:c0:e6:c1:85:d9:69:21:
                    86:87:53:df:41:83:8b:0a:c8:83:62:83:df:87:42:
                    7e:bd:84:9e:0d:ee:d7:e3:e1:6e:8c:fa:8d:80:f5:
                    79:26:76:26:15:1b:d2:d8:e4:c3:7f:31:28:e1:ed:
                    06:e3:85:9c:ac:f3:f7:c0:95:51:9d:36:f6:27:c8:
                    d2:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DF:7C:46:39:DE:11:2F:EF:92:C7:6B:3C:3D:33:AD:D6:BF:96:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/94526494-d78b-3acf-880d-ce05e06124c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:18:fc:82:54:db:9d:8f:55:11:c7:73:30:2f:dc:b2:ae:da:
         58:37:dc:57:e7:b9:33:67:ec:8b:65:af:dd:7f:7a:87:ba:f1:
         96:4e:c1:50:c1:47:d9:35:d1:d7:34:e8:41:ce:6a:e1:15:aa:
         73:9a:80:8d:24:29:cf:c1:6d:09:f2:d0:d8:1f:60:12:76:c0:
         8c:18:37:b5:ea:ad:22:0d:8b:19:6d:b2:2a:44:2b:27:4a:5a:
         2d:42:4b:e6:9c:09:27:05:36:13:11:1e:1d:12:c1:2c:55:cd:
         24:06:dc:fb:a8:10:c0:e3:0d:64:76:d7:f3:20:bc:ad:ff:e2:
         d3:ee:f6:34:2c:db:11:a5:d3:42:9b:21:3e:f5:45:be:94:a9:
         b0:51:64:90:85:e1:97:57:4e:0d:85:78:08:bb:bd:e7:34:f6:
         36:26:e9:a4:7a:1a:15:9d:7b:c0:ff:fd:b2:ab:4b:af:30:6e:
         00:f8:48:43:b0:97:41:6c:ed:4f:31:14:e7:e9:78:7c:e8:bc:
         2a:db:fa:61:d7:b4:9a:b0:0d:bd:bb:54:12:8f:14:20:15:9b:
         bc:e6:e7:f7:9b:ef:50:7f:1a:9b:f3:c1:26:dc:f6:20:9d:90:
         9b:f4:d8:69:57:af:18:3d:e0:8b:52:95:b8:c1:f1:f9:48:81:
         dd:29:ed:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:50 2025 by rpki-client