Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa
File:                     3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa (raw, json)
Hash identifier:          IyWVPTUaylnkd5AJr1dFDdwieCYsrKamVEMxTWmt/fM=
Subject key identifier:   B9:93:57:BF:68:B4:2E:5A:48:23:53:D2:16:F4:B2:D1:20:7B:4F:EA
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584865222D21B2CF4866CF556AC0
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa
Signing time:             Wed 01 Jan 2025 01:32:23 +0000
ROA not before:           Wed 01 Jan 2025 01:32:23 +0000
ROA not after:            Tue 01 Apr 2025 00:32:23 +0000
asID:                     834
IP address blocks:        199.255.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:22:2d:21:b2:cf:48:66:cf:55:6a:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jan  1 01:32:23 2025 GMT
            Not After : Apr  1 00:32:23 2025 GMT
        Subject: CN=9d17c60e-595b-4fc2-8be2-877c0255bfda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:94:c9:47:7d:ad:4b:83:92:ee:71:c0:b0:25:
                    d6:73:f1:5c:c7:37:95:69:0f:2a:81:ad:b7:03:16:
                    1c:f4:79:32:07:fb:2a:b2:5b:57:6f:5c:49:49:69:
                    62:7c:14:a2:d7:9a:bf:7b:e2:f7:59:4a:f7:b4:ba:
                    67:03:68:a0:c3:40:cb:36:30:75:c3:83:c8:09:7e:
                    e6:88:37:fc:8f:1c:28:95:3d:bf:22:47:b6:65:84:
                    d9:f6:3e:24:6d:fb:98:bd:8a:a8:f7:92:cd:da:a5:
                    5f:9e:6c:e0:67:b1:30:92:b5:e6:5b:74:8f:b5:d6:
                    a8:0b:26:87:1f:c3:62:2f:88:b9:8e:21:66:d8:41:
                    f2:b1:d1:e9:9f:41:38:22:1e:a9:82:9c:3b:08:6b:
                    13:ba:f6:15:c0:c2:be:a1:db:83:3b:6d:b9:76:73:
                    9a:c5:35:5a:8d:3b:c2:27:f9:5e:b2:7b:f4:47:bd:
                    90:04:6a:f9:d5:e8:65:8b:62:20:0e:87:cb:86:38:
                    f6:cd:8a:66:30:ea:6f:cf:89:e3:96:3d:b7:ad:da:
                    17:24:a9:4f:7d:06:af:60:87:40:63:b3:99:a9:9f:
                    64:b5:17:de:28:90:6d:35:fd:cb:bf:9e:2b:bc:ed:
                    09:5b:14:b0:1c:d0:53:f9:b3:4c:e7:30:0b:83:54:
                    ad:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:93:57:BF:68:B4:2E:5A:48:23:53:D2:16:F4:B2:D1:20:7B:4F:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/3a683a7a-34dc-3325-a19c-d9f991fbe5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:d1:56:42:15:ef:15:42:8b:ee:7c:e8:d5:64:3f:41:ab:54:
         c5:04:3d:49:d1:2c:f2:32:be:8b:e1:75:0e:e5:ac:57:52:47:
         12:06:f3:69:88:3d:6a:c6:1e:e4:bf:ad:4b:de:cc:8c:16:0d:
         36:40:45:ae:7d:3e:51:de:e7:31:46:1a:21:75:46:7d:42:2e:
         53:62:dd:a8:05:fa:39:71:77:3d:bd:21:0a:13:b4:d4:7c:50:
         a0:4c:9f:66:11:7d:f7:55:51:3d:4f:2f:8b:77:c5:93:5d:26:
         e4:72:ee:18:d1:48:41:9c:78:63:ce:22:3f:a3:cf:28:b1:05:
         4c:5b:03:03:b8:e8:75:59:3a:bc:39:97:03:a1:24:12:3e:e3:
         c5:13:34:1b:f0:7e:51:b5:f7:78:70:fe:51:49:2c:7a:88:e2:
         8b:b3:a9:61:42:f7:5d:b2:fc:e6:20:28:da:c1:07:6e:3d:33:
         8d:c2:06:11:03:1c:43:94:ab:b1:cd:f0:c6:d5:43:fc:3d:f9:
         84:b1:a1:0f:b7:5a:2c:a4:2d:24:10:a6:b0:51:f5:4c:1a:bd:
         24:7e:66:08:8d:7f:c6:a5:54:dd:96:e2:c7:5d:90:d6:9e:4b:
         b6:b4:bd:1b:b5:fe:c9:43:66:ec:0b:2e:cd:6a:f7:49:b4:17:
         69:ea:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:35:29 2025 by rpki-client