Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25925cbb-ebaf-3717-ab2e-9a01c91c30f8.roa
File:                     25925cbb-ebaf-3717-ab2e-9a01c91c30f8.roa (raw, json)
Hash identifier:          A3mUYqL1w4azDd9ZBYu44glw7JTqyxi4acI0/LWEd/U=
Subject key identifier:   41:6E:A9:0E:32:80:63:F7:A2:7B:8D:3E:A8:75:1B:D9:64:D9:FD:35
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584832F01E79EB6084A8DBFE9220
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25925cbb-ebaf-3717-ab2e-9a01c91c30f8.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     3356
IP address blocks:        192.85.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:f0:1e:79:eb:60:84:a8:db:fe:92:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=a99561ca-82e4-487f-9c0e-e2b44ea41443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:9a:7e:eb:f2:4e:8b:e8:49:e2:7f:f8:0f:39:
                    94:3b:41:fe:25:45:47:21:65:0d:a1:45:b0:f6:9a:
                    54:d0:6e:c1:41:d5:30:e8:05:8c:c9:64:b9:ba:7c:
                    27:f2:1c:d0:86:17:cc:d6:13:70:34:fb:a8:a9:a1:
                    6f:6a:9f:08:d2:6c:e1:74:8c:14:c0:5d:ad:9a:09:
                    37:ce:b7:0c:94:7f:f0:60:bc:b3:8e:f8:ad:d7:b5:
                    07:93:d0:09:d8:f2:85:24:0e:83:a6:27:b4:93:09:
                    d0:10:f8:8e:6e:e4:f3:d5:8e:db:a4:b5:c9:fa:a1:
                    bc:39:9a:74:bb:1c:cf:18:03:09:3f:7a:61:b9:fd:
                    a9:f7:97:27:cc:c9:9b:2d:e4:a2:c5:20:cc:bf:61:
                    df:25:e8:af:20:94:1a:80:d9:d0:3e:7b:c7:0c:17:
                    6d:06:98:94:a7:5c:8c:5a:48:12:27:ea:25:41:5f:
                    72:0b:76:bc:44:eb:7b:ea:06:0a:a9:4a:4f:c7:4e:
                    92:a7:a8:6f:8a:e5:91:3e:55:0e:bf:ea:9c:42:81:
                    fd:e6:cb:06:d3:ad:f1:e6:4f:84:35:54:12:61:7c:
                    73:3c:4d:9d:24:36:44:2d:59:cc:94:8a:97:c8:8c:
                    5a:22:7e:01:76:1f:3e:d8:7f:b3:22:43:53:94:c9:
                    1c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:6E:A9:0E:32:80:63:F7:A2:7B:8D:3E:A8:75:1B:D9:64:D9:FD:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/25925cbb-ebaf-3717-ab2e-9a01c91c30f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.85.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:f2:d8:2c:64:89:b2:4d:4c:d0:e7:e2:4a:d5:5f:39:af:47:
         a3:dd:67:4c:fa:4e:90:75:a5:31:1d:60:1f:09:81:98:cb:e9:
         72:4a:94:75:8b:68:1b:ae:90:8e:75:ff:6d:3b:4d:65:d3:5b:
         dd:c6:e4:e3:2c:90:db:b5:b2:e5:e7:da:f5:23:3f:2c:3e:26:
         ce:0d:ea:02:c6:15:98:81:b3:d0:21:f8:3e:c6:31:fd:e6:dc:
         83:93:f4:d1:eb:a5:3f:98:e8:d7:b2:5b:67:78:ee:b0:ce:b4:
         a9:1d:8c:17:ee:79:34:01:2e:ff:86:7b:06:c0:9f:01:71:c7:
         ac:58:bd:76:df:f0:2d:db:6b:84:04:77:84:d2:69:ec:0d:cd:
         68:c6:a4:ae:5a:15:81:b4:29:2b:b4:71:f5:d3:f2:c1:3a:09:
         a8:5e:e2:ca:01:93:8d:17:31:39:3c:1e:91:ab:df:e9:17:33:
         84:bf:2c:ad:55:b4:22:ae:b8:0d:b2:52:8f:09:88:31:fe:39:
         ec:c4:8a:19:9d:71:30:a3:98:5c:16:86:36:7b:35:54:6b:84:
         1b:47:79:1a:07:d4:b4:49:17:ba:e1:9a:91:c3:56:fb:ac:0d:
         0b:da:2f:a0:3d:9d:0a:46:56:4b:be:aa:99:18:25:b9:fb:d6:
         b0:f0:a4:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:27 2025 by rpki-client