Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/6c9a2d81-4908-3637-8e08-e01d418904ad.roa
File:                     6c9a2d81-4908-3637-8e08-e01d418904ad.roa (raw, json)
Hash identifier:          OfZMaOG1yzpS2ehD64Gnm+fJdcNvX4tCG0P3pgi/qlY=
Subject key identifier:   D7:97:B6:33:D5:5D:33:6F:5C:3A:CD:C8:83:83:B2:E5:96:9A:91:B7
Certificate issuer:       /CN=792c57a5-f5f0-4df1-9843-2ea10c8d9dce
Certificate serial:       010D0C9F432858492CB20FD1D4A2B8F058C4F600
Authority key identifier: 00:C0:EF:1A:19:9A:34:B7:82:CC:F7:85:7D:B9:61:BB:A1:CB:2F:85
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/6c9a2d81-4908-3637-8e08-e01d418904ad.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     11260
IP address blocks:        67.22.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:0f:d1:d4:a2:b8:f0:58:c4:f6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c57a5-f5f0-4df1-9843-2ea10c8d9dce
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=dd4e7f46-5c9e-4916-a00b-29ee93785193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:9a:3c:2b:15:e6:30:34:21:d8:6c:ce:d6:0d:
                    c4:90:c0:07:4e:38:6e:0e:e6:cd:35:8d:49:1b:23:
                    5b:12:0b:3d:48:c3:ec:da:59:60:59:4d:06:70:15:
                    bf:71:5d:8e:8d:cf:07:61:81:4d:1a:18:2f:5b:3e:
                    0f:fc:bc:84:ad:ec:6f:2a:34:a7:f9:27:c8:58:cc:
                    16:0d:96:ff:16:9c:94:0c:4a:81:c3:39:a3:75:6d:
                    f1:41:e3:87:03:ee:15:db:bc:cf:7c:a9:21:85:e7:
                    60:6d:df:5f:32:aa:2a:46:9b:ed:e7:f6:28:0b:c4:
                    36:c1:fd:ca:71:3d:36:87:69:af:cb:db:bc:be:8f:
                    0a:af:9a:ac:5a:45:ab:b1:c4:10:39:4b:a9:dc:0b:
                    1d:37:74:e1:93:ea:c3:81:e4:35:d4:d7:2f:f9:91:
                    6c:fb:66:31:09:a4:d1:d6:e7:d1:83:0c:cc:14:11:
                    28:32:7b:64:79:b1:3d:db:38:39:77:b6:65:82:fb:
                    b2:4b:e8:68:4f:b9:aa:41:df:8b:9e:cc:31:69:cc:
                    70:f4:66:37:3b:fa:cc:b8:1a:b4:8c:f5:1b:18:1e:
                    a6:4c:42:05:f2:7f:94:ab:fa:a1:b0:2c:41:e9:a7:
                    e7:3a:ad:21:73:2e:5e:8a:d1:77:b8:c7:07:f3:d4:
                    f4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:97:B6:33:D5:5D:33:6F:5C:3A:CD:C8:83:83:B2:E5:96:9A:91:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/6c9a2d81-4908-3637-8e08-e01d418904ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.crl

            X509v3 Authority Key Identifier:
                keyid:00:C0:EF:1A:19:9A:34:B7:82:CC:F7:85:7D:B9:61:BB:A1:CB:2F:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/792c57a5-f5f0-4df1-9843-2ea10c8d9dce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.22.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:b9:a4:96:6e:50:b9:5e:eb:b9:f4:88:ee:6c:11:fa:62:74:
         42:25:3f:1e:81:43:45:ba:31:d6:68:3b:25:bd:cc:90:34:a4:
         c0:2e:75:4a:06:93:62:f8:71:a2:69:97:09:80:00:bc:e0:21:
         fb:d1:dd:ac:1a:e6:a2:6f:30:66:a3:a0:e3:fb:79:34:5b:be:
         e7:0b:4a:8d:80:9f:a8:cd:9d:9d:e4:48:46:bb:53:14:ac:ed:
         82:97:ab:d7:a8:ff:81:55:c8:29:fa:e6:9e:33:71:03:8f:49:
         22:6c:8b:ef:79:44:99:b6:09:af:df:74:97:3c:bd:55:f9:00:
         53:21:04:15:1b:f6:32:f0:4a:78:38:88:ab:8c:4a:d7:d4:cd:
         3c:55:73:e9:09:47:db:a1:42:80:bc:84:fe:b4:89:fc:38:c8:
         8a:f4:99:e8:82:51:2d:48:42:25:6c:22:6d:d8:a6:2f:8b:2b:
         b7:54:22:a7:9f:0e:53:02:1c:39:ed:ca:73:b0:04:05:3f:2b:
         72:5f:66:e9:68:16:72:02:e5:79:6e:65:4c:2b:69:04:62:f4:
         47:13:74:4c:bb:68:0f:03:cd:40:fc:2d:5b:57:3b:5b:bd:b2:
         ac:f2:9b:eb:f0:f8:6e:c4:44:b2:21:94:0d:ad:69:f9:c2:ea:
         a7:8e:48:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:34 2025 by rpki-client