Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa
File:                     1802470a-c29c-35f1-a149-883ec3509bb2.roa (raw, json)
Hash identifier:          WX+mWjAE9JhUbAQqzhpXaeMO7W8LvA8yRs6M67+NX8w=
Subject key identifier:   72:BD:E8:8C:FF:07:F1:3F:9D:4C:19:BB:97:E7:2B:49:97:58:A2:3A
Certificate issuer:       /CN=c9172e12-dbd3-4048-a60b-ef696451c4c7
Certificate serial:       010D0C9F432858481F6529B35A9CE571078E8680
Authority key identifier: A8:0E:AC:67:5B:CB:BA:D2:74:55:AD:92:05:C3:17:39:67:9E:83:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa
Signing time:             Sat 07 Dec 2024 02:00:39 +0000
ROA not before:           Sat 07 Dec 2024 02:00:39 +0000
ROA not after:            Fri 07 Mar 2025 02:00:39 +0000
asID:                     399205
IP address blocks:        204.225.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1f:65:29:b3:5a:9c:e5:71:07:8e:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9172e12-dbd3-4048-a60b-ef696451c4c7
        Validity
            Not Before: Dec  7 02:00:39 2024 GMT
            Not After : Mar  7 02:00:39 2025 GMT
        Subject: CN=84716df8-5f9a-473c-8bc0-729e51d3f5df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:bc:02:a4:86:76:83:28:53:15:40:d5:8d:cb:
                    21:4f:52:05:f2:6b:31:b4:00:6c:d7:e9:51:1b:1b:
                    76:41:3b:b6:b3:52:3c:7c:b8:cd:d7:f6:6a:e3:11:
                    1d:07:b0:75:34:0e:ab:2e:63:a6:09:e7:8d:4b:2f:
                    d8:13:c6:23:68:2e:01:68:1a:36:3f:0d:a0:a6:39:
                    65:3e:57:9a:6f:70:65:ea:1d:67:fb:fd:92:22:5c:
                    03:ec:9f:1f:d3:2c:64:55:08:c0:78:be:0b:c0:06:
                    2a:54:7a:a8:b0:7c:44:08:52:22:ed:ad:81:fa:e0:
                    b1:04:71:16:65:fa:ef:11:0c:87:87:d3:40:26:c8:
                    2c:35:f0:cd:2e:ec:ef:58:98:e0:c0:75:ec:74:c5:
                    86:6b:cf:b8:90:35:fd:e8:9c:0e:5e:42:1e:51:b7:
                    5b:e6:f5:31:71:b4:fc:03:0d:98:a8:29:7f:4c:37:
                    0e:e7:f1:92:a9:c5:15:4b:1b:65:10:39:60:cc:63:
                    62:c6:27:6b:e6:3b:95:e2:b7:29:e0:fc:e6:c0:07:
                    e2:b9:e1:bd:73:50:ee:45:fc:0c:0d:22:8c:2b:81:
                    81:30:62:94:3f:1b:67:8b:32:da:28:5c:91:91:57:
                    f2:e6:56:b9:61:d8:b6:95:d1:35:09:76:9f:33:49:
                    42:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:BD:E8:8C:FF:07:F1:3F:9D:4C:19:BB:97:E7:2B:49:97:58:A2:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/1802470a-c29c-35f1-a149-883ec3509bb2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7/c9172e12-dbd3-4048-a60b-ef696451c4c7.crl

            X509v3 Authority Key Identifier:
                keyid:A8:0E:AC:67:5B:CB:BA:D2:74:55:AD:92:05:C3:17:39:67:9E:83:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c9172e12-dbd3-4048-a60b-ef696451c4c7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.225.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:dc:74:44:d5:22:7c:8a:33:d0:f5:a9:91:4a:65:5d:0c:52:
         48:c5:21:d8:33:48:f9:61:ad:50:b1:de:fe:5f:13:73:1b:51:
         6d:3e:83:c5:da:d0:41:aa:86:33:fe:46:ce:29:da:c9:b0:6a:
         14:5d:61:9f:51:be:1d:ed:f1:8b:b5:ab:81:ee:4b:75:b1:e8:
         14:dc:ec:54:8f:22:c1:6c:89:58:9b:da:c8:be:58:38:fe:2c:
         1e:fb:f8:f9:b5:c8:de:ae:88:92:6f:9c:79:11:66:25:8e:7d:
         24:02:cd:9b:6c:40:52:ed:bf:a0:65:a7:28:ba:b5:c4:2e:5d:
         89:c5:51:90:3b:19:9e:43:ae:07:b0:05:9a:c0:4f:69:a4:d7:
         11:61:1f:9a:66:ad:d6:37:1a:05:40:3b:b8:1f:14:8d:93:d9:
         a7:22:42:81:98:19:b9:1c:9d:fc:65:6b:c3:1e:9f:cc:db:c2:
         f9:96:91:5f:4e:be:12:ae:44:56:55:9c:76:c4:6d:6d:f2:4c:
         bc:41:79:18:03:89:b6:cb:fc:b1:22:b4:3a:5e:d9:93:d2:9c:
         8c:84:a0:eb:41:fa:83:68:0d:23:3d:04:87:8e:b6:6f:72:d3:
         c2:2a:8d:17:c8:7d:1d:ea:1f:ee:f5:85:5a:7a:22:7f:bc:5b:
         da:d0:e7:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:39:25 2025 by rpki-client