Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
File:                     95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa (raw, json)
Hash identifier:          Hu5KOFa5I7ZL4n8Ay8N0yOH+OjoRI/amJY9J2b9ewpQ=
Subject key identifier:   B0:DB:27:BE:26:E9:E0:EB:25:88:F4:2F:A9:4C:E6:2C:89:11:67:FF
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285848BE86271D40172340A7590140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     852
IP address blocks:        209.29.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:27:1d:40:17:23:40:a7:59:01:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=77f8a121-d511-4060-836d-1605e529bf93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:40:2e:82:8e:16:e5:76:6e:db:cf:86:0e:
                    08:27:9a:61:39:58:f1:bf:fb:62:79:21:13:dd:f9:
                    47:ba:38:c5:e6:db:a3:63:13:d7:c0:81:b4:ba:92:
                    87:5e:2b:10:82:b7:f5:5e:8a:ce:dd:ec:b5:5f:93:
                    ec:bb:89:d4:00:59:5c:d3:de:02:c3:4e:f8:f2:0c:
                    3e:c7:3d:c1:21:68:3a:b8:cb:aa:f5:b5:ae:c8:86:
                    65:7d:0e:b1:70:21:90:72:95:74:3e:33:ff:b2:06:
                    53:a5:ad:6f:38:93:80:e7:33:83:10:3a:dd:40:8b:
                    12:2b:57:a0:31:84:6a:0f:eb:db:fd:fb:26:1e:1f:
                    ea:f1:6d:cd:38:a5:0f:04:d0:88:b5:78:65:bf:37:
                    05:e8:7f:33:a3:7b:9a:af:bd:6b:dc:d1:7d:db:c2:
                    0e:56:9f:b0:76:65:04:d1:e3:e5:2f:fb:f2:05:be:
                    7b:79:b3:c8:71:88:ef:9b:4a:e8:83:ac:7f:50:b7:
                    40:9c:a0:48:94:2d:89:dd:93:c6:30:8d:b7:42:0b:
                    34:f3:b8:d1:bb:d3:e1:b6:6e:2a:71:a0:2a:55:c5:
                    7c:d5:65:4b:ed:e6:7b:b7:e2:62:0e:5c:62:b0:1d:
                    bd:a2:fd:41:0f:8a:75:14:11:a8:80:52:2e:7e:de:
                    91:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DB:27:BE:26:E9:E0:EB:25:88:F4:2F:A9:4C:E6:2C:89:11:67:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ea:d6:b9:dc:0b:a8:02:18:fe:f5:89:e8:51:d2:4e:6d:ab:d5:
         f6:bf:c1:df:e4:46:47:19:00:45:ac:9b:ad:d2:9c:7d:ac:11:
         9d:fd:23:81:88:ff:46:2a:08:d7:ad:bf:19:53:e7:b6:9a:bd:
         00:63:b1:45:c0:65:22:8e:44:4a:3c:d9:4e:20:0c:81:c7:2b:
         9d:04:97:29:8d:d8:3e:a2:e2:b7:0a:fb:2a:e2:af:28:2f:04:
         38:95:44:99:49:69:9c:37:fb:af:d6:ea:20:c8:8c:5e:c0:f2:
         97:f1:75:55:11:98:38:57:fc:97:44:2b:8a:6c:d0:d6:49:37:
         91:81:d5:35:18:ea:81:d2:be:1b:a3:af:c4:05:72:6e:d9:a2:
         b5:ac:73:cd:b1:7e:3c:01:c7:ff:95:45:1f:a3:a4:aa:35:50:
         42:7d:36:12:6d:cb:f1:fe:df:99:52:2f:9e:aa:2a:c8:e1:b5:
         62:21:1c:7a:ca:cc:61:6d:cb:c2:bf:3b:de:43:85:a9:9c:dd:
         cb:cc:e5:8a:25:f8:65:08:ce:19:32:0e:56:84:1c:66:62:a4:
         c1:d3:1a:6a:52:a3:53:bb:58:c1:43:aa:e1:12:a3:b9:c6:10:
         0a:58:de:50:1d:f0:3e:97:82:1f:e9:19:fb:ee:bd:25:17:1b:
         ed:5c:57:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:07:20 2025 by rpki-client