Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa
File:                     d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa (raw, json)
Hash identifier:          AQHrTqKryiA+jd+CHk2OkFta4d64JmR/WHY38hMjcyg=
Subject key identifier:   EC:17:A7:07:83:72:9D:0E:6A:98:56:CD:74:8D:DF:29:58:9C:59:81
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584944694C61DFC781AB8B887000
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa
Signing time:             Sat 22 Mar 2025 01:00:40 +0000
ROA not before:           Sat 22 Mar 2025 01:00:40 +0000
ROA not after:            Fri 20 Jun 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        70.32.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:44:69:4c:61:df:c7:81:ab:8b:88:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Mar 22 01:00:40 2025 GMT
            Not After : Jun 20 01:00:40 2025 GMT
        Subject: CN=67e31bae-b3ef-4efb-aa7b-43655e7d512e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:28:da:46:84:3a:1e:01:14:fb:d7:14:eb:ed:
                    cd:71:b9:bb:02:4e:40:ed:21:a5:ca:b8:14:71:38:
                    1c:14:d8:60:b9:c9:7a:b9:05:3d:05:b3:0f:94:cc:
                    78:06:1d:03:76:e6:24:ff:54:87:1b:10:6a:90:29:
                    18:a1:50:1f:e2:84:45:d9:85:17:12:eb:4c:58:6b:
                    d7:1e:5a:2f:c4:b5:d4:a8:ba:ba:33:44:a6:b3:e7:
                    f9:8b:39:72:46:cb:74:12:da:7d:e5:93:a7:44:a5:
                    d4:49:30:1e:ba:42:cf:59:29:de:da:e1:30:ba:7a:
                    4b:87:a4:ac:29:49:43:09:02:04:90:e9:79:34:2a:
                    18:e4:96:85:b3:e3:5b:42:f8:01:1d:0f:98:b6:d9:
                    c0:0d:76:0e:50:50:59:55:88:a0:8b:96:ef:42:2b:
                    7d:b3:a5:3b:0e:8a:8f:68:44:5b:1c:4d:fd:dd:2f:
                    e0:a2:59:d9:f1:08:97:08:93:08:72:3d:f5:e2:88:
                    d4:7f:db:60:42:d3:fd:5f:98:8f:1a:46:70:87:60:
                    0f:d2:69:7e:48:cb:84:0d:4d:9a:a2:12:49:5a:a9:
                    9a:74:bc:e6:24:f4:62:cc:21:ba:0f:fc:17:2e:67:
                    74:07:a8:76:8b:3e:b1:bb:eb:54:d3:e6:cd:2d:b5:
                    17:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:17:A7:07:83:72:9D:0E:6A:98:56:CD:74:8D:DF:29:58:9C:59:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/d179b7f7-9cd3-3975-b459-8f0c4ca28ea9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  70.32.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:13:14:e3:da:1b:b2:1b:61:ea:cd:7b:8e:15:93:bd:06:0f:
         2d:da:4a:06:aa:c6:11:86:96:05:a4:1d:6c:b9:a3:42:85:a5:
         fe:50:5e:36:ff:e0:da:60:24:b2:42:7b:2a:06:81:b4:ee:26:
         97:11:1b:07:6e:f3:68:81:2e:2f:d6:19:2d:42:b2:44:64:fe:
         b0:b5:45:40:3d:a9:8f:ac:66:dc:8a:14:f0:62:5a:63:60:c1:
         49:05:01:6e:11:31:9a:ed:d9:33:ba:2d:c4:18:3f:88:46:2a:
         1c:e9:70:2d:00:5c:ec:bb:3c:72:87:f4:29:e4:4f:93:6f:ce:
         7b:c5:a4:e5:30:a2:61:5e:e1:e8:48:13:96:5e:a0:89:fc:01:
         ee:78:4b:09:16:7c:53:dd:15:b5:1b:34:39:fc:11:bf:a1:ff:
         7f:e3:8a:77:97:ab:0f:ba:58:f0:7a:cf:b1:42:ac:73:dc:70:
         83:2e:30:73:fa:cf:e4:2e:87:9f:ef:5d:08:55:45:85:8d:53:
         b1:be:c3:83:26:cc:15:6b:c5:cc:41:9e:a6:1c:12:fd:8d:70:
         8c:f5:5c:72:09:e3:47:a8:bb:68:53:7a:37:d9:e3:0e:56:c9:
         17:9a:a7:d9:09:ef:56:ec:2c:8f:50:35:1a:1d:dc:55:50:b6:
         a1:04:3b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:03 2025 by rpki-client