Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/46911460-774d-35c1-9804-588f39c97c31.roa
File:                     46911460-774d-35c1-9804-588f39c97c31.roa (raw, json)
Hash identifier:          oSTHkUHbf2+hX6BvwP1tryHnU4l/xc4kTTZmdgq9EVE=
Subject key identifier:   BB:A0:FB:4C:AD:91:AD:D6:55:99:57:D9:89:8C:91:E5:3D:16:7D:3B
Certificate issuer:       /CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
Certificate serial:       010D0C9F432858493AA3DE28A54ED6A58264FEF8
Authority key identifier: A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/46911460-774d-35c1-9804-588f39c97c31.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     36344
IP address blocks:        69.168.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:de:28:a5:4e:d6:a5:82:64:fe:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ec11d358-69b9-4c96-bf47-e3edd5cff218
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=75b82e0d-32c4-474a-9ee3-b60987870f67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:68:74:93:46:aa:a3:fb:f8:78:37:3c:1d:ed:
                    f7:7f:80:50:7d:ad:04:45:46:fa:af:0c:fa:9c:ca:
                    ae:94:18:fa:69:8f:2b:72:ba:81:0b:bf:9d:ba:4f:
                    8c:d0:64:57:9d:d2:3d:64:ae:74:c7:61:19:ee:14:
                    56:94:1d:8d:fe:69:92:76:f4:31:17:bc:68:ea:2c:
                    df:15:7e:6b:9d:bc:79:10:33:51:ca:f0:dd:b6:f3:
                    26:83:88:78:81:62:35:78:63:1a:b3:28:18:37:f1:
                    74:8d:f4:bd:11:57:d0:48:9e:a8:22:c9:56:50:b6:
                    24:79:92:43:b4:38:4b:d9:3d:ba:2a:6b:f3:a2:b1:
                    ae:f9:70:e2:77:6f:61:e0:88:4d:94:df:54:8f:6b:
                    ef:63:a9:b1:22:f2:6b:31:b0:af:cd:22:fd:a7:34:
                    37:f4:93:7c:84:b9:22:72:ee:44:36:da:f2:5c:2d:
                    94:30:f1:b0:d1:65:e2:44:71:3b:8c:ae:09:53:fb:
                    0e:f2:ce:53:2c:9b:79:47:77:47:a6:a3:2d:15:11:
                    b4:f3:d8:58:d6:69:6b:aa:5d:63:fa:d1:6c:f7:ba:
                    2f:1d:5e:46:53:b7:ce:c6:2f:27:e6:71:c2:90:01:
                    c5:f6:fc:03:30:2f:f5:94:f8:d9:03:39:45:e0:bd:
                    80:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:A0:FB:4C:AD:91:AD:D6:55:99:57:D9:89:8C:91:E5:3D:16:7D:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/46911460-774d-35c1-9804-588f39c97c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218/ec11d358-69b9-4c96-bf47-e3edd5cff218.crl

            X509v3 Authority Key Identifier:
                keyid:A1:40:1C:0B:55:4E:33:0B:BE:3D:53:B6:1D:DF:1A:70:9A:F1:01:B6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ec11d358-69b9-4c96-bf47-e3edd5cff218.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.168.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:83:ef:89:9c:10:23:5d:13:e3:77:51:88:23:bc:2f:c6:3b:
         01:35:7a:98:a6:c3:36:02:fc:57:fb:c8:cc:b1:92:e3:6e:74:
         04:ea:35:91:85:e3:99:fd:24:41:4f:9a:c5:ea:9a:46:38:ab:
         9d:8b:f9:41:a0:22:33:3e:0e:2e:a9:61:a6:e7:4f:16:ce:9d:
         d4:21:50:48:83:70:b2:66:2f:8b:b3:3d:79:54:42:91:a9:21:
         b1:ed:79:05:bb:2d:4a:c9:19:26:32:94:55:1b:0d:ed:37:f7:
         06:7f:0a:bc:af:82:96:b5:0a:51:62:fd:98:13:e9:b9:54:20:
         4a:49:03:8c:8b:68:58:67:93:a0:3f:5b:12:5d:ba:5b:5e:bb:
         5e:31:28:99:45:04:d6:a7:18:53:1a:bd:6e:c9:68:49:01:1f:
         ac:96:11:f6:54:cf:7e:d3:e2:11:b6:69:92:7d:47:a0:b2:cf:
         ef:b1:5b:3a:1c:ea:28:99:c7:84:d7:b6:59:4b:54:e2:73:b6:
         ce:61:a2:88:46:0e:66:ff:67:1e:85:49:8e:79:9b:4b:fb:93:
         05:85:cf:7e:1e:27:af:31:1f:bb:95:70:78:88:0c:b4:e9:ba:
         cf:71:68:4b:c2:79:ef:80:98:37:bd:a1:dd:75:ff:2e:08:ad:
         e3:92:20:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:21:03 2025 by rpki-client