Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
File:                     34c75caf-5f31-3ddf-b113-d584f51f166e.roa (raw, json)
Hash identifier:          CVfFSiTxCNNpZ9GBQC6AKT9nWv6NcC7vWQW5YNVMQfA=
Subject key identifier:   24:B5:96:87:04:D9:AF:65:A4:55:FD:5E:29:E3:ED:E0:13:EA:8A:08
Certificate issuer:       /CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
Certificate serial:       010D0C9F43285849393E7B3C44347862EB07DCF0
Authority key identifier: 0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     8075
IP address blocks:        204.209.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7b:3c:44:34:78:62:eb:07:dc:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29d35b5d-b56a-49ea-be01-fcbff8e02fcf
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=e19c1705-dc2f-4ab6-9153-7d8ad3f4a0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:33:90:1d:b5:00:cd:e7:48:ee:4f:ef:74:5e:
                    1a:39:a8:30:e5:6c:2a:a0:52:42:47:24:9b:3c:3c:
                    98:bc:cc:04:be:5b:04:0f:2e:e6:06:c7:c5:41:2b:
                    7e:d9:b7:c1:30:c2:6b:61:ab:d8:c5:22:a1:f2:6a:
                    2d:7f:2d:ac:67:04:ad:64:a8:44:df:49:e1:c0:07:
                    c5:4b:af:bd:38:0e:8e:24:ef:3c:da:73:0a:fe:00:
                    cf:aa:fb:d5:39:71:a9:7d:77:57:d7:9a:64:85:85:
                    34:d0:aa:67:44:7a:fd:fe:70:fa:24:33:56:e1:7c:
                    aa:dc:46:ae:31:bd:97:4e:bd:45:f3:a6:35:82:b4:
                    03:97:97:61:99:c2:e9:28:40:9e:cb:90:4c:73:c8:
                    ae:b1:6f:99:97:97:e3:44:68:27:52:2e:c1:67:4b:
                    56:9e:99:c6:5e:19:09:85:58:2b:fc:35:12:6b:b7:
                    e3:05:71:d3:27:76:f7:1f:5d:51:87:43:10:e5:2e:
                    b6:08:45:f7:ed:be:09:91:91:2b:c4:16:af:ae:70:
                    16:ca:e7:91:cd:69:23:91:1b:3a:d7:8f:8d:4d:87:
                    dd:bd:1d:b7:0a:1f:67:df:9f:b4:96:53:95:5b:bd:
                    a3:7f:28:aa:61:fd:3b:c6:e3:90:b3:d3:0d:8a:fc:
                    29:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:B5:96:87:04:D9:AF:65:A4:55:FD:5E:29:E3:ED:E0:13:EA:8A:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/34c75caf-5f31-3ddf-b113-d584f51f166e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.crl

            X509v3 Authority Key Identifier:
                keyid:0A:EB:6D:13:D7:F0:60:7B:8A:D1:00:7B:28:A0:95:8B:45:10:A4:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/29d35b5d-b56a-49ea-be01-fcbff8e02fcf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:29:58:26:6e:81:7e:63:35:3c:91:34:cf:65:70:0e:75:ae:
         9a:0f:dc:94:d3:94:7e:e2:90:b3:f3:5f:2e:b6:fa:bd:3e:31:
         7e:1a:2d:4c:27:2e:ec:ab:93:8a:6b:26:c9:88:00:3e:9f:06:
         5e:5c:2e:21:bd:e0:79:ed:b1:c0:6f:0e:2d:f0:f4:8b:4f:34:
         70:02:ae:84:a8:86:3b:07:57:a7:e8:49:83:e8:c6:98:15:70:
         61:16:2c:53:c6:3d:c0:a2:77:03:d9:55:df:bc:ab:fe:f5:aa:
         d6:93:16:17:2d:ce:59:9d:36:5a:16:42:e8:f8:bb:36:96:40:
         06:88:b2:23:82:78:ec:c8:87:19:38:a7:de:c3:24:20:43:c4:
         59:be:96:0c:ee:54:3e:fd:24:03:eb:b3:b0:94:10:98:c1:b2:
         c7:28:b7:0c:4c:35:90:e3:df:cd:ad:92:ef:16:b2:b8:97:48:
         39:c5:02:ab:50:b8:38:15:77:55:76:e3:f8:6a:d3:53:f8:b7:
         ac:13:9b:37:c1:41:08:a8:8f:14:6f:20:63:e0:11:46:10:eb:
         97:07:cc:06:a1:06:5c:0b:1b:45:0b:c6:ad:46:61:ca:2e:0c:
         c1:a1:96:85:66:31:fb:92:d4:be:33:31:57:6e:8b:fb:2e:61:
         b3:10:5e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:16:36 2025 by rpki-client