Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d33e3e2f-12f6-3148-9136-2087b4fdd582.roa
File:                     d33e3e2f-12f6-3148-9136-2087b4fdd582.roa (raw, json)
Hash identifier:          9n9ZHxoA+ZVymXEdifVyOLuI4hGkfRYT+nQ1Z5XWguE=
Subject key identifier:   E6:24:34:DB:BD:32:9B:7C:C6:3D:20:EF:C4:8C:7C:20:25:FC:03:5D
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F432858493C0920300AD8801157589D40
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d33e3e2f-12f6-3148-9136-2087b4fdd582.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     62240
IP address blocks:        216.24.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:20:30:0a:d8:80:11:57:58:9d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=bc1c3194-a3e6-4ab0-87be-c307a94c28ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:23:6c:7c:ec:69:c7:20:a2:f6:21:c5:32:54:
                    38:41:ba:45:41:ee:b1:f0:89:17:2a:b0:e8:c9:26:
                    b3:87:6c:8a:e8:1b:c8:a1:2b:32:56:dc:0f:55:5a:
                    ed:37:ea:e4:16:b2:17:25:7c:20:27:c9:f9:d1:22:
                    b4:eb:57:c0:c9:2c:73:ae:d0:7b:ba:c7:d0:e8:5e:
                    12:1d:82:6a:2f:0d:3c:7d:35:26:31:2d:2e:53:b0:
                    40:23:1d:c3:20:67:8a:82:b2:ad:79:9b:02:bb:09:
                    ed:21:3b:01:9a:8c:c6:ae:b4:d8:06:8c:41:00:4d:
                    60:69:21:d7:dc:4a:a8:ad:5e:3a:65:c9:dd:01:65:
                    44:98:30:87:ef:bd:0c:af:a0:3b:f0:c1:97:c1:25:
                    94:80:e3:08:b7:5b:cd:73:4e:c7:a0:25:d5:9a:f6:
                    7c:49:1f:82:ab:f5:63:27:b6:9b:47:b0:41:f1:f7:
                    28:ee:bc:1c:47:9b:f7:a0:d4:42:50:0e:ba:fe:29:
                    04:d3:17:70:d1:20:6d:cf:42:6d:27:31:5f:f3:e8:
                    ba:47:ce:c0:31:92:11:c0:f2:71:4f:fb:40:fe:21:
                    c1:ef:5f:ae:ad:b0:4c:97:1d:32:61:23:74:99:d7:
                    7c:c5:97:23:1e:6f:10:ba:1b:e3:bc:6f:2d:e0:be:
                    1a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:24:34:DB:BD:32:9B:7C:C6:3D:20:EF:C4:8C:7C:20:25:FC:03:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/d33e3e2f-12f6-3148-9136-2087b4fdd582.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.24.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:62:9b:54:cd:1a:96:34:3d:4f:d5:3e:03:de:77:c9:92:4f:
         b1:ce:53:e8:03:15:53:12:0d:94:5d:f2:87:3b:b2:50:ba:f6:
         49:eb:aa:25:7a:ae:1a:d8:41:5d:0c:b8:c3:95:b3:d1:26:4a:
         b9:a2:bb:6c:70:f0:3f:0a:71:9a:d3:f0:02:6b:64:3e:0e:18:
         22:54:a9:e8:07:db:71:6b:6e:af:98:0a:87:83:a4:35:7f:6c:
         c4:3c:c8:7b:7b:4e:7a:a6:1b:02:15:2e:00:ca:6c:01:9e:f8:
         10:42:65:1a:a7:af:fe:f4:5b:43:54:d6:45:b8:9d:3e:e5:df:
         c5:ef:92:c2:d4:21:e3:ad:e0:95:9a:4f:04:32:23:33:1a:41:
         79:0c:9e:01:c9:3e:7b:21:a4:c3:ef:df:4f:91:c4:0a:b3:30:
         ad:bf:3d:25:db:ec:dd:4f:1f:f4:c5:c3:38:fa:cc:03:0b:ba:
         f7:e1:0c:36:89:23:1b:1f:c5:81:49:45:fb:06:03:e3:93:dc:
         59:2b:08:f6:28:0d:c6:27:27:15:c9:f1:f2:25:37:8a:61:91:
         3a:71:a0:04:97:52:ab:a7:0b:4b:62:e6:aa:47:22:9b:eb:a8:
         c2:38:2b:73:0d:22:2d:58:12:8d:7d:09:5e:5a:26:29:c8:ef:
         35:c0:c1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:16:09 2025 by rpki-client