Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
File:                     6e84b623-e3a3-3f1f-88da-e527e9861998.roa (raw, json)
Hash identifier:          GaPw90+HdyacXhqTpdCzGdu0+DXSNZn8xThmH5ume2E=
Subject key identifier:   93:F5:DD:E4:70:C2:6B:E2:7F:73:93:8E:D0:2D:1F:B2:95:42:1F:0A
Certificate issuer:       /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
Certificate serial:       010D0C9F43285848C5817A0D36360630E427C8C0
Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36492
IP address blocks:        209.107.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:7a:0d:36:36:06:30:e4:27:c8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=05f49fb4-de43-4751-ab25-6310a602a702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d3:12:c9:1b:0b:99:4e:6a:a8:4d:ee:31:88:
                    06:f4:80:f7:e0:65:46:12:2d:30:be:9a:94:cf:15:
                    c2:55:7d:f0:6c:2c:3e:1a:95:7a:1a:76:8d:c3:15:
                    ad:cb:5d:3f:fa:c7:8b:17:50:8d:c1:54:0f:0c:de:
                    d3:32:dc:ae:20:30:c3:dc:48:c3:df:c2:c3:fd:2c:
                    1c:97:0a:25:e5:63:f7:f9:56:b4:32:86:f1:46:95:
                    ec:d8:02:ea:b6:4a:70:65:f8:bb:4c:88:eb:5b:f1:
                    85:f9:60:7b:f1:a9:da:6b:98:e8:d2:69:33:63:73:
                    60:cd:57:e2:96:1f:29:1e:d7:fb:6f:8c:7a:ca:0e:
                    93:ce:42:b4:c9:79:26:a8:e8:fe:98:6a:d0:3f:8e:
                    de:3e:6d:af:65:0b:bc:70:a9:bb:d7:07:31:ce:fe:
                    40:53:e4:b4:42:cf:5f:b9:6f:f6:d6:bc:9a:79:1f:
                    71:f9:c0:26:86:2c:a4:af:85:ba:49:22:54:d6:0b:
                    d0:0b:c6:a3:82:91:b9:67:56:4e:93:c5:39:82:69:
                    e3:e0:c8:08:78:36:d6:2a:93:86:fc:dc:e8:41:8e:
                    7f:c5:7d:3c:51:0e:b4:8b:a9:92:a1:dc:c1:76:04:
                    ca:b9:8e:8d:3d:31:95:9a:68:a7:cd:9f:18:e2:fa:
                    88:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F5:DD:E4:70:C2:6B:E2:7F:73:93:8E:D0:2D:1F:B2:95:42:1F:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/6e84b623-e3a3-3f1f-88da-e527e9861998.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl

            X509v3 Authority Key Identifier:
                keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.107.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c3:c6:27:8e:e3:6c:9c:8c:eb:a7:1b:2c:04:e8:6f:a2:65:
         f9:9f:99:0d:ff:d7:77:61:43:6f:36:75:df:47:d8:77:0c:1d:
         4c:e7:41:00:78:b0:01:28:a7:cc:f3:9a:85:50:fa:d5:33:71:
         96:db:62:3c:d8:a3:b5:8d:01:0a:4f:23:03:ca:7d:e6:bb:90:
         a0:44:e0:df:54:a6:7c:2c:03:c2:43:84:d3:8f:42:20:a6:ba:
         c3:67:89:09:92:7c:c1:59:d8:cd:56:d7:96:68:27:0a:c8:03:
         60:b7:5c:a4:c8:0e:15:09:dc:c9:88:71:24:2c:d2:9d:2c:19:
         9f:4e:c6:3e:a7:fe:03:22:2f:64:f3:4b:db:5c:13:a4:8d:7a:
         72:8d:07:5d:c1:f5:5b:ba:15:d8:16:ca:c5:77:53:9f:e8:6e:
         ce:80:24:c4:b3:43:c6:1d:e1:85:85:c5:ce:04:e8:2a:5b:45:
         d7:ae:05:ed:bf:14:41:68:d9:9a:ef:0a:32:2a:18:4d:7c:8c:
         a7:11:12:7d:b5:be:cf:e3:70:74:f6:30:30:c3:70:66:1b:a1:
         c7:b5:c6:41:fc:4c:c4:71:83:5f:b3:c5:a1:4e:6d:24:a8:f5:
         ce:01:a7:36:14:1b:1d:6b:85:68:33:6a:21:f3:2d:c8:3c:d8:
         86:9b:ba:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:59 2025 by rpki-client