Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa
File:                     c14db791-f048-3a1f-a855-8856d142305a.roa (raw, json)
Hash identifier:          QLwhWlpbppaHdc7Bs9omNwITouDbRaeQP5UitfQGP3M=
Subject key identifier:   20:16:E0:E2:0C:98:1B:71:0C:29:7F:1F:44:35:D7:FC:62:0C:D5:84
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F43285848FD56CD2207C950E920C48300
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     22504
IP address blocks:        67.218.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:cd:22:07:c9:50:e9:20:c4:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=b6a207da-25db-4445-8199-8aac714d09cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:8e:b0:3b:1f:a8:dc:50:34:31:67:28:bc:80:
                    73:f0:93:f3:a6:6b:b7:ea:06:42:78:2f:ff:ea:4c:
                    a3:e2:37:85:d3:fa:38:a1:14:94:fa:34:12:78:dd:
                    86:ed:bb:a8:57:58:65:b9:df:64:6d:ae:77:8c:bd:
                    53:6d:36:ce:de:19:b2:55:85:ab:4a:55:ab:f4:70:
                    9a:d0:96:ce:68:2a:12:ba:90:f0:3b:68:34:c8:e0:
                    80:22:f8:55:ed:db:16:06:74:eb:c4:67:75:ae:a0:
                    5b:d9:04:76:03:f6:69:3d:18:11:e6:c5:b2:a8:3a:
                    a0:e5:77:55:4a:15:dc:df:2f:63:8b:9b:7f:08:89:
                    b4:c9:23:5f:24:0a:d9:0a:52:c9:5f:84:1a:7f:d6:
                    40:ac:fa:e2:39:9b:e5:76:15:55:fe:bc:05:34:3d:
                    2f:89:2f:b9:39:39:35:1d:c3:65:e2:cd:ca:c8:0a:
                    6d:35:65:96:c0:a8:05:dd:87:c8:cf:4b:75:9e:bd:
                    20:2a:59:57:32:08:32:a3:9c:10:bb:53:1b:06:fe:
                    44:b9:8b:d9:62:fc:77:ad:8a:84:be:7f:5d:7e:84:
                    94:6f:0c:5d:89:8a:c1:f9:45:99:58:74:ba:19:34:
                    5f:af:50:f1:71:ee:8f:6a:84:fa:6d:3e:f0:b3:d4:
                    0f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:16:E0:E2:0C:98:1B:71:0C:29:7F:1F:44:35:D7:FC:62:0C:D5:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/c14db791-f048-3a1f-a855-8856d142305a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.218.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:f0:b5:92:7c:8c:82:02:9c:8e:e0:56:03:c6:3d:4e:d5:7b:
         ab:61:d2:d7:91:d3:40:8d:bc:07:d8:f8:86:6b:c5:52:85:bf:
         1b:0b:92:84:95:91:28:1e:19:41:fa:42:81:ec:2f:71:8a:f3:
         cf:20:ed:67:c8:4c:fb:49:6b:52:70:ce:9b:ea:be:6d:55:66:
         7f:c1:0f:05:18:28:ec:d7:f7:e6:56:39:fd:66:0e:b9:93:a1:
         32:f0:5c:07:f5:9b:d5:9a:ef:c4:cb:2a:7d:40:34:7c:d0:c7:
         6e:8f:54:f6:ee:82:e0:8f:46:d5:33:f1:6f:4d:da:8b:cb:bc:
         5f:de:55:0b:d0:ff:64:a0:ba:96:12:13:47:94:26:66:a0:af:
         49:6b:17:76:1f:25:c9:39:41:af:37:3c:c8:97:fd:37:fb:cd:
         69:1b:44:86:99:00:f5:83:a0:b7:b9:63:c5:98:38:ea:c6:13:
         77:8e:d5:fa:d7:a9:90:95:35:34:87:85:c0:c3:18:26:b4:c0:
         40:19:4b:6d:e0:32:cf:ed:d8:c1:32:3e:d3:b9:61:87:01:9a:
         25:f5:3c:3c:84:2c:66:fd:57:61:fd:3b:f9:27:58:12:c9:ca:
         63:29:c7:36:9c:b8:61:3a:8b:fa:86:64:77:7a:bb:59:fa:00:
         ed:7c:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:34 2025 by rpki-client