Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
File:                     0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa (raw, json)
Hash identifier:          nOyDLhveZPYOgheiM0q1OVCvH5ZGNMOcCn/dT2waGko=
Subject key identifier:   15:78:DA:21:F2:AB:3C:3C:31:22:09:EB:45:84:A3:C5:E9:20:99:DA
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584944694C4A06B1280A5FFE4400
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        70.32.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4c:4a:06:b1:28:0a:5f:fe:44:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=ebc8b38d-8b13-4620-8973-81067ed7a5c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:8f:ff:d4:f2:b2:22:e3:de:a3:bf:67:b6:b1:
                    3d:c8:87:f3:b6:c1:87:8e:0a:56:40:21:fd:ad:cc:
                    03:e9:70:11:5d:0e:3f:1f:2e:8b:3a:b8:59:f4:af:
                    88:ea:6a:ba:52:14:d7:e4:8c:32:f1:4a:fe:f8:4a:
                    dd:a1:01:db:e2:b0:b0:2a:9f:7c:bf:2e:a6:00:f5:
                    a3:3e:21:51:2d:c3:c3:17:11:2a:71:a4:01:a7:db:
                    d4:25:a5:16:f9:80:4d:26:46:ff:3f:a3:a2:93:77:
                    fc:6a:ae:10:37:74:a0:4a:2b:83:b7:9a:75:ab:7c:
                    a4:36:09:f0:a9:a2:32:07:9e:96:d1:e8:f9:cd:bf:
                    cc:d3:1e:5e:2e:96:07:e7:4c:f0:6a:2b:6f:8e:a1:
                    cf:8f:3e:e2:4f:1f:c0:65:f0:46:5d:ec:98:bb:f6:
                    2a:f9:e4:a9:08:de:d6:60:59:28:c4:a0:a7:27:33:
                    0c:bb:06:bc:dd:45:2e:b1:79:d3:d6:de:43:08:27:
                    40:9d:9b:b5:cf:a5:de:eb:f2:cd:00:6a:92:5b:7c:
                    c6:20:82:3d:e3:51:f0:0a:b4:f4:4e:09:ba:9c:b2:
                    d0:00:b3:cb:e9:4c:df:01:5d:65:46:8d:02:46:6c:
                    25:a3:86:9c:42:f6:56:95:4a:56:50:85:31:22:92:
                    7c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:78:DA:21:F2:AB:3C:3C:31:22:09:EB:45:84:A3:C5:E9:20:99:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/0c1a8ee7-cd9a-3a10-ab9a-dfc94d89062f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:bf:97:de:95:80:13:af:59:8d:3b:25:a0:04:16:5d:3d:79:
         2f:08:38:fb:55:90:2b:41:1a:b4:17:2f:0a:0e:87:e9:b5:2b:
         ed:d7:2b:9f:88:49:c9:67:2d:0a:79:c1:20:89:9b:4c:44:57:
         14:76:c6:2c:f7:9e:91:7a:fd:23:69:b5:33:8f:75:ac:50:68:
         1a:31:a4:54:74:b3:6c:c3:da:26:a0:7c:94:8f:4f:26:6b:9d:
         5c:f8:f4:d0:ff:b8:ed:2a:a0:68:5d:22:4e:99:ba:86:1f:ab:
         29:52:35:2f:ba:b3:d3:26:30:2d:d8:9a:e0:3a:40:16:63:18:
         df:19:92:9f:a3:40:7b:f0:81:52:dd:b3:54:5a:f5:99:ce:fa:
         c4:a2:49:21:fa:de:99:4d:8d:5a:93:6d:75:0b:8c:8e:76:ce:
         d8:12:8f:fb:65:c3:52:a8:b0:6e:fc:fd:ad:1f:27:3f:86:2d:
         be:c1:03:51:8a:db:9c:cc:cc:a5:ce:53:54:53:e1:aa:1a:66:
         c6:b8:a0:48:16:36:9c:49:0a:1f:55:70:fe:32:ac:2c:74:ca:
         23:e5:63:cf:1a:6a:5f:c6:fa:f9:e2:b3:2b:39:2d:50:04:d1:
         ff:c7:71:24:ab:4a:dc:f5:60:ee:da:a5:11:a2:9c:16:6f:b7:
         b0:fd:4c:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:42:16 2025 by rpki-client