Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa
File:                     6d20267f-b471-33fc-86e3-cb95622fe20e.roa (raw, json)
Hash identifier:          n2wAoHatwgZWLLtcg3nv/AYs4WKTtAWiS3bW6cDh1QY=
Subject key identifier:   57:11:D4:9A:E8:CF:7C:78:38:80:22:A9:2B:AA:D1:D1:DE:7C:1E:4C
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C5817035874825DCB837B080
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.178.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:70:35:87:48:25:dc:b8:37:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=0da45c73-6913-41c3-9951-7ce057040d1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a6:02:5d:cc:f9:fc:d9:56:c1:c2:0c:04:8f:
                    0d:14:94:3a:a1:79:a4:dd:6f:69:93:c3:ea:3d:91:
                    db:f3:d8:63:a1:b7:0c:8f:fe:24:f2:03:e2:4b:50:
                    22:ad:bf:0c:e0:59:aa:96:3e:f0:61:8d:99:d4:bc:
                    2f:6e:f4:a2:26:78:80:bf:0a:4d:87:3e:b2:7d:28:
                    86:99:f7:5d:8e:0d:76:05:91:2a:21:f8:e3:af:a7:
                    0b:65:41:15:48:8d:14:7d:3e:33:46:08:97:94:1f:
                    4a:a3:be:e2:7b:32:a6:36:dc:fc:f8:e4:ac:ba:da:
                    88:fb:da:28:60:9a:4d:00:77:37:78:f6:85:bb:e7:
                    d3:c7:67:19:76:51:c6:ff:2a:21:07:04:a9:84:8b:
                    cd:8c:3f:9a:d2:d8:76:25:b1:b9:90:b1:7b:88:55:
                    4c:fb:3d:07:b2:7d:f5:34:3e:f9:54:90:9f:86:d6:
                    e2:b6:41:93:34:33:95:17:76:9f:4e:3e:f5:cd:aa:
                    9e:5b:4d:2b:2e:1e:b9:68:e5:3b:7f:8d:e3:63:ab:
                    85:13:90:a2:3c:0f:17:00:eb:54:ae:08:1b:26:af:
                    7d:10:d2:74:09:87:73:37:66:79:08:b0:78:11:26:
                    27:e6:84:3f:5c:bd:1e:37:5f:4e:2e:6e:bf:59:41:
                    f6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:11:D4:9A:E8:CF:7C:78:38:80:22:A9:2B:AA:D1:D1:DE:7C:1E:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6d20267f-b471-33fc-86e3-cb95622fe20e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.178.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:d7:d2:74:fc:9f:b2:78:1a:a3:c4:39:87:f3:e2:55:eb:b1:
         8a:92:25:c9:81:8b:fe:23:df:08:f7:b5:c8:14:38:61:40:86:
         da:6d:53:43:7d:3a:21:b4:ae:41:fd:b8:40:3d:bc:9e:5a:56:
         67:16:ef:4c:63:55:c7:14:86:53:82:27:61:a1:67:85:bf:29:
         07:e8:7e:d4:0c:cc:55:22:80:7b:a1:79:6c:38:ba:8b:83:22:
         30:ad:bc:89:9a:a7:51:f1:b4:9f:db:9d:f5:f3:35:c0:e1:9b:
         5a:8e:c9:b4:3f:59:2a:21:30:d8:6e:89:4f:32:a5:a2:89:a5:
         81:14:39:14:f5:ca:90:2a:37:c0:ae:bd:0b:77:3b:14:25:e4:
         87:60:80:66:03:83:55:e0:20:84:08:e8:1a:9f:fb:5e:02:a6:
         05:b4:a0:99:3c:e7:8c:bd:44:0e:07:f2:65:82:12:8e:32:f6:
         cb:04:83:95:8d:e7:ec:8d:18:8c:e8:87:c7:ff:97:d1:0e:f8:
         d9:75:41:f3:b2:c1:bc:d7:e3:c9:2d:27:32:8c:b3:5f:ff:9c:
         9e:76:f6:6c:7a:b4:31:4a:57:ee:cd:45:0b:e4:63:e8:79:73:
         ab:bf:2c:9e:0b:82:65:2e:14:db:8c:55:a6:28:a0:72:53:f0:
         1a:3d:30:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:54:46 2025 by rpki-client