Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
File:                     76dc3b99-7478-3f95-b13d-ededcd4836ca.roa (raw, json)
Hash identifier:          9GMAsS0dcYqNI0ljSo+t9vPf4AK2QZe327cJ2irgBlA=
Subject key identifier:   15:A3:ED:72:28:B8:2A:07:D5:F9:D2:95:DB:EC:73:85:48:30:4A:25
Certificate issuer:       /CN=b031f288-aa10-4c6d-b640-6749f212c6b7
Certificate serial:       010D0C9F432858492CAE8E3DF3A5CCE244993280
Authority key identifier: A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33234
IP address blocks:        24.225.112.0/20 maxlen: 24
                          216.172.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:8e:3d:f3:a5:cc:e2:44:99:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b031f288-aa10-4c6d-b640-6749f212c6b7
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=2806db77-9214-4ac3-9967-f5e2a86cd9d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:90:77:ec:a3:36:28:34:7c:6d:f9:99:0a:
                    e3:2f:2d:62:31:fb:b2:c3:35:ae:4a:66:a3:03:a6:
                    05:77:42:85:ad:1f:5e:19:af:56:58:5b:fc:6f:ce:
                    7a:ee:11:3f:09:b6:56:49:12:60:34:7c:b8:21:4d:
                    c3:1e:89:db:8a:77:10:ab:a7:4e:37:ee:c6:6b:2c:
                    62:96:c7:b3:96:8f:3a:a7:58:58:8e:06:9c:5d:7f:
                    52:3c:1d:42:13:c6:c2:0c:3c:5a:0b:50:bf:ee:56:
                    98:7c:33:d7:60:8a:8b:c1:5e:98:78:a6:6d:9d:e5:
                    45:da:27:52:74:2d:01:b2:e8:b8:ee:8e:06:a2:b0:
                    21:62:4a:bc:71:65:c9:1c:11:ff:8d:5d:82:34:2a:
                    3d:14:cf:34:b4:eb:c7:23:bb:1b:3f:41:36:8d:9a:
                    74:a6:f8:5d:6a:9f:5f:89:43:d1:e4:f7:72:a0:ab:
                    2c:b9:47:d9:60:e8:83:25:81:6b:2d:4e:bd:a2:ea:
                    62:ea:cf:8a:45:19:36:9c:ae:c7:ca:5c:7c:20:4e:
                    06:69:0f:19:93:31:16:49:68:16:5a:07:2b:58:f0:
                    91:89:5b:c7:bf:dc:82:ce:b6:82:b8:9b:66:e7:2c:
                    47:45:f8:00:73:8f:0e:2c:36:5d:66:2b:87:fb:2f:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A3:ED:72:28:B8:2A:07:D5:F9:D2:95:DB:EC:73:85:48:30:4A:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/76dc3b99-7478-3f95-b13d-ededcd4836ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7/b031f288-aa10-4c6d-b640-6749f212c6b7.crl

            X509v3 Authority Key Identifier:
                keyid:A7:28:DE:7B:DB:D3:74:3B:97:C7:D9:08:68:12:83:7C:A7:31:E7:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b031f288-aa10-4c6d-b640-6749f212c6b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.225.112.0/20
                  216.172.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:7d:9e:3e:9d:e8:b0:78:cf:51:08:50:1a:5f:9c:eb:f9:11:
         ea:2e:08:de:00:45:8b:d5:19:5f:24:34:ac:2a:19:83:34:f4:
         66:e8:9e:dc:14:e8:53:a8:2f:6a:d0:51:1d:97:36:98:ea:1a:
         70:fe:81:7a:39:05:0e:9f:39:9c:f6:fd:05:59:e3:fb:6b:a4:
         51:90:57:70:df:ea:73:5f:00:6a:64:6c:43:4b:93:da:77:4c:
         da:43:69:2b:f2:0f:ca:67:bd:09:c2:ad:21:f3:3d:1c:73:83:
         5d:6e:ab:8f:f2:bf:16:00:09:00:d8:94:c1:4f:b9:36:e3:f3:
         c1:9d:01:ee:eb:a0:96:e9:0f:20:a6:7f:90:11:bf:08:06:83:
         7c:41:d6:ee:ac:77:66:92:b0:29:0c:a3:fa:77:e2:22:c4:2d:
         bd:c5:0d:a8:53:6f:60:9c:c2:aa:28:83:b9:1e:44:fa:76:d8:
         0f:3e:e0:5a:f7:c8:99:7d:a9:0d:e1:6d:8c:65:d1:84:b7:0d:
         eb:d7:04:8d:3a:d7:6e:23:f9:9a:ca:8e:d0:75:2e:87:96:72:
         25:57:77:5b:13:07:65:c6:af:f5:c2:0b:30:e5:e0:96:68:fe:
         50:9d:a9:b7:4c:7e:b2:06:c7:62:21:17:3e:be:cf:57:16:3f:
         52:4d:39:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:58:28 2025 by rpki-client