Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d126490-c12c-3fe1-ab44-4da74c7f2525.roa
File:                     5d126490-c12c-3fe1-ab44-4da74c7f2525.roa (raw, json)
Hash identifier:          cbqg4hsHzZvJEqiDoicXJYFcZf7DirHV2eIEPVE9EtY=
Subject key identifier:   DC:E6:C7:F2:F2:8F:DF:A7:4D:46:36:62:20:24:41:4F:5F:07:32:9F
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584971142A2DFBDED1DF13211BC0
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d126490-c12c-3fe1-ab44-4da74c7f2525.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     4766
IP address blocks:        216.24.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2a:2d:fb:de:d1:df:13:21:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=5943c7d7-627f-42f0-a666-75c6d997eb29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ba:1d:23:6d:62:3d:73:b6:f1:3c:80:79:fa:
                    0c:0c:88:9d:0f:8a:29:a5:2f:84:f5:2f:98:f2:15:
                    90:a9:6f:75:11:78:93:32:81:70:cb:f1:59:65:99:
                    6d:45:32:84:ea:eb:60:5e:d6:86:ad:2b:22:33:b4:
                    16:cb:f0:d4:c3:70:c2:8e:d9:c4:81:ba:71:92:3d:
                    ae:3f:6c:a5:a4:0c:f9:d4:c0:0c:18:64:cc:bd:98:
                    2a:46:b0:c6:12:48:a2:5b:ef:77:85:10:8b:f7:23:
                    cc:88:06:49:75:d0:ba:6a:b7:f6:19:ba:e4:b8:61:
                    43:f7:07:e3:2e:15:a6:df:03:91:d0:21:76:36:ed:
                    db:46:79:ae:f9:6c:3a:b3:1b:70:bc:64:7f:ad:43:
                    d4:96:be:b0:ba:59:37:01:37:c8:93:fb:4a:95:e7:
                    c7:ed:2d:1c:8a:e8:f4:07:78:76:45:99:a0:48:9d:
                    25:e6:a4:57:bc:e0:0f:63:14:07:b4:25:aa:ef:88:
                    d1:e2:63:c9:1b:b7:5a:77:49:c3:ac:31:62:8f:7e:
                    40:87:a3:17:fb:f9:a5:35:af:9d:0f:dd:ae:ad:e4:
                    ae:aa:b0:08:d0:53:ac:88:fc:2f:be:6e:44:90:1f:
                    93:0a:65:99:1d:4f:11:87:61:ff:99:f7:bb:4e:4e:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E6:C7:F2:F2:8F:DF:A7:4D:46:36:62:20:24:41:4F:5F:07:32:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/5d126490-c12c-3fe1-ab44-4da74c7f2525.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:95:71:f6:19:4a:86:cf:11:ca:7d:f9:f0:28:98:b7:fa:0e:
         44:cb:ac:75:75:40:70:f4:89:10:44:18:38:ec:94:d9:23:9b:
         ba:97:32:42:e2:c1:5c:28:93:a1:c3:ac:71:e2:f4:00:1c:ac:
         1f:98:86:c4:ce:52:f2:03:5f:95:b8:0d:28:1d:f9:3d:c0:db:
         a0:2d:96:ca:b7:3b:0a:64:a2:09:de:d4:0f:df:eb:06:5d:63:
         8d:36:85:0c:32:02:b2:b0:80:ad:b1:49:b7:36:77:2f:69:02:
         87:ee:6a:da:6a:02:27:df:24:8b:ff:47:52:96:cf:77:69:e2:
         f6:03:78:22:ec:6f:d6:f0:d9:db:c0:8d:c8:fa:a2:b5:76:ec:
         f3:31:82:61:17:66:e1:60:ae:8e:8c:c2:2b:48:fd:e6:3e:0b:
         e7:02:1e:4d:df:01:f3:00:b7:29:41:fc:1a:fd:12:23:b5:8d:
         4e:a0:cb:e9:38:fa:ad:d2:a5:e6:db:0d:f7:96:dc:e7:5d:55:
         76:b1:89:1f:5c:e2:2b:08:4c:f4:64:84:68:51:e3:ec:9a:86:
         8e:17:9c:da:35:51:73:c9:74:b7:ba:72:73:6f:99:39:44:2b:
         3b:f8:75:43:1e:9f:c1:e4:f1:74:fd:e4:b9:8d:4a:3b:7d:49:
         f9:5e:21:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 04:46:07 2025 by rpki-client