Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa
File:                     6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa (raw, json)
Hash identifier:          ory9RVFpMv8TUHVTtrP1V98hHGCnWZjewpez+Xa1bZM=
Subject key identifier:   C5:E1:00:D7:19:38:19:B7:0E:B0:A7:F1:96:08:84:85:98:FB:4A:A6
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848B62613FA2BA9E1522167BD00
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     852
IP address blocks:        207.34.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:13:fa:2b:a9:e1:52:21:67:bd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=dc36cf1b-1a46-4299-ba7d-320563aca2b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:97:4e:4a:83:c9:d0:19:a1:55:4a:df:be:36:
                    a7:c3:6c:b9:92:74:47:1f:3e:e6:68:5f:cf:13:4b:
                    57:65:21:c0:f8:5f:4f:78:1d:8a:cb:65:4c:d3:a0:
                    03:06:ef:1f:57:55:85:c2:dd:47:23:ca:c7:00:82:
                    51:bf:b6:34:e9:5c:6c:59:87:15:ce:c9:1a:0f:2b:
                    cb:7e:a1:86:97:54:25:ed:87:1d:81:45:07:36:1c:
                    5f:56:42:01:60:75:1b:37:d1:a9:b4:ad:80:95:ee:
                    e9:3b:4b:40:34:48:42:95:40:54:fa:47:2d:91:0f:
                    ca:e5:76:96:2a:c0:03:2c:ec:11:a7:c0:ea:64:9a:
                    06:1e:1b:18:7c:6d:96:43:16:25:f1:f4:4d:8d:b0:
                    c3:0d:1a:94:a4:a4:de:dd:62:bf:f8:e4:41:7f:e2:
                    2f:48:c8:71:83:03:3f:3f:32:a9:08:f8:18:73:9a:
                    b0:37:96:27:a4:31:69:ec:de:06:a1:6c:87:b3:27:
                    9b:62:17:f3:e8:7b:0d:3b:8c:07:78:44:5c:45:12:
                    eb:77:9d:0f:e7:0e:1c:2e:51:23:9d:93:b3:6f:10:
                    b2:34:bc:40:e0:c9:1f:2a:78:d2:66:45:d6:88:f6:
                    5c:87:5c:eb:47:e8:ca:cf:90:46:8f:20:01:0a:f3:
                    29:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E1:00:D7:19:38:19:B7:0E:B0:A7:F1:96:08:84:85:98:FB:4A:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/6e52cc5e-821f-339e-b6bf-71d9fd27ec34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.34.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:8d:d6:32:61:d1:dd:e6:ea:7b:a8:ea:2e:c4:eb:f6:a7:c9:
         54:69:55:33:63:b3:4e:dc:3e:a8:96:7c:fd:70:ef:98:01:34:
         84:45:af:06:b2:e5:2c:93:0e:3f:3e:87:25:43:6f:c9:76:a1:
         95:36:f6:1b:5d:12:03:20:8b:48:7d:c7:ba:b1:be:13:2a:d6:
         ed:16:6d:7f:af:29:e5:68:10:d1:46:27:ac:f9:c9:04:af:ec:
         39:b0:b6:3c:ac:26:f3:32:d9:cc:0d:c7:c0:d7:17:fa:d2:ef:
         17:e7:69:cd:5c:55:d2:19:db:32:2e:c5:d8:0e:79:55:d2:1c:
         00:06:1c:d6:d8:5b:1e:32:3e:15:be:6c:f9:7a:ae:a0:eb:9a:
         db:76:7a:19:fd:0a:24:15:8e:d5:f3:c9:d5:1b:a8:50:ad:ae:
         ce:0c:09:d1:72:e7:36:a4:7f:3a:66:32:ee:96:d3:7e:66:b6:
         77:17:8a:7e:04:24:31:8b:5c:79:57:a5:db:c7:11:46:42:39:
         0c:72:55:5f:25:7c:49:86:06:e7:ed:a3:da:1e:b1:06:26:76:
         29:8f:4e:b8:7e:f5:9f:68:54:93:78:f7:be:09:ca:55:1f:be:
         a1:c0:81:8e:47:93:b2:45:0e:fb:6c:9a:f5:ca:1f:37:da:93:
         a5:db:f4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:02:10 2025 by rpki-client