Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
File:                     17a26018-a488-3d5d-9caa-dc7921400898.roa (raw, json)
Hash identifier:          aKTEi8Ql525yWc3fg5VV7/g37cxitutNxOwXrnXcBTs=
Subject key identifier:   EF:75:D1:BC:05:33:C0:AB:81:A0:CA:A3:F9:CE:E3:06:53:C1:6B:40
Certificate issuer:       /CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
Certificate serial:       010D0C9F4328584894A5EF33FEFEC7E33E1E8480
Authority key identifier: 0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa
Signing time:             Sat 18 Jan 2025 02:00:38 +0000
ROA not before:           Sat 18 Jan 2025 02:00:38 +0000
ROA not after:            Fri 18 Apr 2025 01:00:38 +0000
asID:                     36184
IP address blocks:        209.191.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:94:a5:ef:33:fe:fe:c7:e3:3e:1e:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e60884f4-fa14-4a13-ac3b-efb7c9412082
        Validity
            Not Before: Jan 18 02:00:38 2025 GMT
            Not After : Apr 18 01:00:38 2025 GMT
        Subject: CN=35bc5006-a4a7-4bd5-93b1-84cdeb9f84f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:5c:c6:02:50:38:3a:bb:fd:bc:5e:8b:5d:
                    5a:14:d2:aa:1b:ea:b3:2c:08:c2:cd:af:09:d6:70:
                    90:67:ef:4c:41:df:79:b8:eb:ad:52:9d:e4:c8:34:
                    44:11:c9:a7:f8:81:53:d9:b4:33:bf:fe:5e:08:8f:
                    34:53:92:ac:41:a8:e2:c9:41:67:bc:5d:cd:c4:29:
                    79:08:77:30:02:87:94:f3:48:83:72:81:91:2e:30:
                    cf:98:44:56:8c:e5:bb:bc:e1:4d:2a:29:28:31:e1:
                    2e:29:9f:a4:92:74:a7:45:cf:ea:d6:fe:f7:94:79:
                    88:37:fc:0b:b1:8e:b2:b3:69:e9:6a:d7:cb:a9:7a:
                    41:21:5a:ed:85:f6:02:64:98:64:f2:df:12:17:95:
                    2b:85:e7:9e:06:36:fe:bf:87:eb:a9:22:bc:2e:8e:
                    01:d7:c4:1e:25:79:77:64:68:b2:c8:76:ef:7c:0b:
                    fd:71:72:b8:2d:21:71:b9:ed:92:59:93:e8:1b:a1:
                    68:f7:8d:8f:97:de:51:8d:4b:a2:25:fb:b2:23:3c:
                    d7:cb:da:63:ad:b7:ba:cb:74:95:96:09:2f:01:9b:
                    95:f7:de:3a:de:8f:ca:63:52:3b:2c:a2:49:03:a9:
                    c6:3d:b8:e2:98:44:52:18:69:27:7a:9f:b7:b5:3e:
                    58:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:75:D1:BC:05:33:C0:AB:81:A0:CA:A3:F9:CE:E3:06:53:C1:6B:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/17a26018-a488-3d5d-9caa-dc7921400898.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082/e60884f4-fa14-4a13-ac3b-efb7c9412082.crl

            X509v3 Authority Key Identifier:
                keyid:0C:9A:7C:E9:6D:8C:38:48:9A:F3:3B:CA:41:66:F3:89:47:7D:49:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e60884f4-fa14-4a13-ac3b-efb7c9412082.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.191.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:5b:6e:ba:a1:73:62:15:3b:2b:30:b4:b7:78:8e:a0:d4:e2:
         a3:a8:87:1e:ff:8d:48:52:1a:cc:42:d0:4c:11:1a:fc:d9:97:
         ae:42:4f:bd:32:0a:9a:53:cd:00:07:3b:0b:00:89:f3:65:3d:
         7e:84:50:35:c2:82:0f:73:27:02:b0:a3:e8:b8:26:51:67:f1:
         9c:21:e7:40:57:ab:2f:c6:6a:1d:8e:d1:5e:6c:1a:5d:fb:90:
         34:48:ea:bb:2c:eb:3d:01:7f:da:1c:17:57:24:70:4e:82:9a:
         f1:c0:de:59:56:75:12:89:12:5f:8c:78:92:1a:a4:2f:91:e6:
         6b:9a:d8:ab:07:4b:6f:95:d8:01:26:f7:66:e8:df:a5:02:6a:
         b8:0b:2f:59:7e:e2:3d:d8:75:8a:eb:63:14:60:07:67:14:5a:
         5f:b6:af:c0:2a:6b:da:d0:51:2b:ce:83:78:02:48:05:28:e8:
         23:ca:d7:d5:b5:04:94:39:54:11:c0:11:c7:e5:cb:d0:9e:7b:
         10:1e:32:61:4f:b0:93:c7:87:49:9d:07:03:a5:64:be:3e:1e:
         18:b4:35:9b:a5:01:46:d9:b2:de:92:91:71:2c:7a:1e:0a:d4:
         f5:ca:49:0f:d3:13:ae:16:44:6c:a7:7d:b1:2d:da:29:ff:d4:
         3c:db:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:12:58 2025 by rpki-client