Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa
File:                     de791f6f-55b0-308e-b01a-7d78aff6921b.roa (raw, json)
Hash identifier:          FKaW6Nik6mmJiZa8i6AYmyEh2Sq5L06A4n3U8xqmXSo=
Subject key identifier:   A6:05:81:8B:DE:D4:C6:7D:E3:1E:94:B0:50:75:26:D7:6F:64:70:DC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584930DE5E39E644078030BD9BC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     7861
IP address blocks:        209.29.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:5e:39:e6:44:07:80:30:bd:9b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=b3b197c5-621f-46ae-a8a2-3b87913ea0dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:c5:cc:9c:cd:68:56:fc:d8:2c:9f:8c:02:
                    17:34:5b:46:0f:d6:14:18:35:1e:5f:fa:fc:f3:13:
                    55:69:7e:3c:ec:dd:58:1c:67:eb:50:3d:ac:c2:02:
                    60:b6:3b:e1:cb:f1:fe:7b:43:c7:a0:6e:81:36:f7:
                    ec:b4:3b:e0:94:80:a4:23:b4:70:0a:53:51:0a:f6:
                    7b:4a:1f:c7:b3:c1:4e:7c:3e:75:ed:4e:82:19:79:
                    ff:bd:c0:aa:75:d8:b9:2b:ed:73:5f:a9:3c:25:26:
                    aa:06:e4:1b:0a:db:ff:56:64:cb:15:1c:5a:64:ba:
                    75:5a:2b:c9:2f:3a:65:38:4d:57:2e:45:dc:9f:a4:
                    18:06:28:78:19:e4:b7:73:97:64:78:01:a1:5c:c6:
                    c3:6d:28:3b:dd:58:e2:38:86:aa:fa:00:db:6f:0d:
                    eb:7a:7b:5e:db:f9:a4:86:90:06:cc:c1:33:ae:7c:
                    03:e7:06:e4:0e:ca:97:d3:6f:88:3c:26:79:19:c4:
                    2e:79:77:35:10:bb:8e:5b:bb:15:3b:06:27:59:5a:
                    1b:5d:1e:95:65:b3:65:4e:18:76:fb:82:08:03:08:
                    46:a8:6a:cc:ac:8d:ab:93:d1:5e:a6:46:27:da:a5:
                    5f:47:53:7c:54:59:af:e3:28:eb:cd:a6:58:b7:de:
                    6d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:81:8B:DE:D4:C6:7D:E3:1E:94:B0:50:75:26:D7:6F:64:70:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/de791f6f-55b0-308e-b01a-7d78aff6921b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:c8:a0:9a:bb:f9:75:82:ad:40:d0:96:77:87:61:16:9f:b9:
         3e:42:12:8f:a6:62:c8:9d:11:92:7f:6b:a8:a4:63:4d:f3:00:
         5e:0d:f4:9e:33:af:94:d0:9f:db:ec:69:17:8a:e4:6e:b1:b5:
         f6:f3:44:4d:b1:4d:97:a3:9e:17:5b:c0:f8:27:e0:3a:eb:ae:
         12:1d:4f:4c:22:21:30:b5:97:c9:c6:fd:69:38:c8:bd:69:21:
         4f:99:a0:d0:6a:67:45:d0:92:5b:a7:a1:2b:bc:9e:3b:d4:b2:
         7b:f0:2c:4f:81:b7:4f:06:c8:53:f8:bc:2a:87:47:33:c0:e3:
         4f:04:4c:eb:e4:96:3f:01:ec:00:8a:71:13:86:a1:1b:ca:03:
         6e:18:a4:e6:a4:96:ed:34:c1:10:59:7d:e0:48:f1:d0:c6:b6:
         87:1d:2f:eb:33:3f:ce:3d:30:a4:8c:d9:7f:b2:40:48:77:89:
         d9:f2:38:d8:bf:9b:e5:9d:cb:81:ba:4b:2b:96:37:ea:aa:3b:
         20:fe:c6:ed:dc:55:18:9a:6b:59:48:f3:4a:c7:34:0c:ee:c8:
         e7:73:df:99:3e:46:b2:a0:a7:9b:a0:9b:1f:84:98:e7:fb:96:
         67:68:8d:8a:f2:26:b3:3f:e9:b9:83:50:3d:fb:c7:e8:b6:e2:
         6d:18:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 05:35:53 2025 by rpki-client