Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa
File:                     765a21fb-b2dd-3039-9cc5-6d977ec67539.roa (raw, json)
Hash identifier:          yBOQR7rDXUQcQw7COZN+NPonpmOCUO8D3e/ecSE+fSc=
Subject key identifier:   03:0D:C7:F7:8A:DF:3F:09:E3:31:F2:60:7C:66:4C:55:9B:54:FA:7F
Certificate issuer:       /CN=e94dafbf-328e-40f2-ab0d-4718f1177861
Certificate serial:       010D0C9F43285848DBD67001FB528C2D21A506C0
Authority key identifier: 1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa
Signing time:             Wed 12 Feb 2025 14:00:53 +0000
ROA not before:           Wed 12 Feb 2025 14:00:53 +0000
ROA not after:            Tue 13 May 2025 13:00:53 +0000
asID:                     63264
IP address blocks:        142.214.232.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:d6:70:01:fb:52:8c:2d:21:a5:06:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94dafbf-328e-40f2-ab0d-4718f1177861
        Validity
            Not Before: Feb 12 14:00:53 2025 GMT
            Not After : May 13 13:00:53 2025 GMT
        Subject: CN=6fd4b39d-3dd4-43d8-ba0f-6d328644ee74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:aa:6b:e5:a9:d3:4e:21:fc:05:5a:36:8e:df:
                    51:57:c7:56:98:5c:30:11:8c:80:94:f7:0e:9b:4c:
                    92:08:6a:dd:5f:05:ca:06:a5:01:79:94:5b:cd:26:
                    48:71:35:56:86:6d:a6:d8:20:e5:28:5e:f7:bf:e4:
                    59:b5:06:bb:98:06:ac:ef:f3:4e:b4:94:64:76:ec:
                    67:81:c6:ae:bc:f8:7e:8d:4c:88:f5:b2:a3:48:41:
                    fd:52:4a:a6:e1:0c:b7:fd:ed:cb:61:97:a8:51:51:
                    af:cc:a3:be:21:31:fa:b2:86:d1:cb:bb:d4:22:94:
                    df:15:42:1d:f9:ff:76:b4:b8:b7:31:7d:75:1e:f8:
                    e3:e7:a1:ff:b5:8c:61:ba:88:2f:d9:12:4a:ab:08:
                    8c:b7:a0:38:0c:49:29:7f:ff:97:75:e7:56:aa:a9:
                    17:e7:4c:63:07:39:ea:ab:3f:06:6d:d5:1b:15:0f:
                    88:42:52:ce:72:68:e0:36:0f:87:44:98:91:59:e7:
                    ad:7b:fb:a9:b3:a1:29:38:1d:98:b3:47:9e:e5:52:
                    77:21:06:0c:6e:72:59:99:a0:77:b9:44:5f:b4:f0:
                    6c:ca:85:52:0d:da:66:4c:53:8a:2d:17:08:c4:44:
                    cb:fa:8e:4b:f0:11:12:0e:9b:07:a0:9f:93:68:fb:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:0D:C7:F7:8A:DF:3F:09:E3:31:F2:60:7C:66:4C:55:9B:54:FA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/765a21fb-b2dd-3039-9cc5-6d977ec67539.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861/e94dafbf-328e-40f2-ab0d-4718f1177861.crl

            X509v3 Authority Key Identifier:
                keyid:1E:96:D6:F8:C0:56:49:E1:16:BE:D3:C2:99:84:68:A0:BC:78:E7:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/e94dafbf-328e-40f2-ab0d-4718f1177861.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.214.232.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:4d:ed:8b:b9:f9:f5:62:84:73:5d:a2:b6:8a:c3:29:2d:76:
         c5:9d:c1:56:90:ae:3b:d9:69:b7:8c:30:7b:b1:53:e2:6d:ae:
         ed:27:89:a6:63:28:43:04:bf:75:4f:66:5e:59:98:29:7c:f8:
         3f:e6:44:56:d8:aa:25:4c:b0:3d:67:5b:26:11:0c:3c:f2:fa:
         3c:42:40:44:19:20:ac:40:f3:a3:ab:09:4a:1c:fe:f6:23:37:
         93:53:13:fb:71:75:e1:6f:29:c4:94:4a:6a:19:d7:bb:64:8f:
         72:0c:6d:21:3f:64:20:14:dc:2f:4c:74:ba:43:ae:03:20:ef:
         17:cf:ab:c8:bd:c6:59:97:72:67:80:2e:fd:d6:fb:f4:37:b5:
         14:f3:e3:f9:fb:3f:23:75:ef:59:b9:6b:0f:6d:dc:8e:b1:48:
         1e:51:df:3f:8e:3d:49:3a:b8:86:03:1f:50:f0:f4:1c:c5:73:
         a9:58:09:e5:4a:3a:eb:47:c0:ac:d4:6c:ef:91:1c:c3:61:34:
         f3:c7:e8:0d:6a:d5:87:ce:e2:b5:45:63:31:e2:2c:e0:d9:3b:
         db:2a:0a:75:c1:fe:ee:0c:2c:51:35:b3:de:0c:07:d8:a2:d9:
         f1:a8:d4:b0:7f:90:39:4a:b7:02:b9:f8:c0:c6:79:a4:da:04:
         28:09:97:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:15 2025 by rpki-client