Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa
File:                     fd2b756d-dca9-320f-a24d-589725851877.roa (raw, json)
Hash identifier:          MuwfcDGolXk90yCo+TnvY2TZLDXIkRBlVq6Ovm/81ZA=
Subject key identifier:   13:73:CC:33:C9:1A:5B:41:FE:FA:B1:44:6F:27:D0:4F:ED:DC:E4:C2
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A9964977F363DFCA514C6300
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397228
IP address blocks:        199.7.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:49:77:f3:63:df:ca:51:4c:63:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=f384c3d4-ec68-475d-affb-451d84623860
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:ca:0c:a1:0e:d4:8d:71:36:43:c8:4f:b2:
                    cd:48:af:5a:88:fe:1b:88:07:9c:fb:7e:db:ab:ec:
                    5f:7d:8f:c6:2d:df:ec:b6:67:43:e0:5a:fa:78:56:
                    54:a4:92:4e:da:cf:68:1c:60:50:f0:1d:e5:42:42:
                    08:be:9a:04:2e:b6:da:26:88:7b:55:2f:26:e2:8b:
                    60:56:1f:0f:7f:d1:c9:7f:ab:6b:20:4b:62:c4:0c:
                    cb:c3:00:7c:75:7b:62:4e:75:9d:51:bb:6a:af:f2:
                    23:8b:7a:3a:94:e8:cb:a8:8a:78:2b:d4:52:ca:64:
                    bc:d8:af:d7:28:17:c7:4b:9b:c4:04:bc:ce:e1:27:
                    74:6a:36:aa:2b:6d:39:9d:89:9e:87:31:fe:57:fa:
                    e7:cf:32:dd:e4:30:63:8b:67:f5:99:a7:4e:55:eb:
                    f8:f5:65:3d:27:20:ef:06:0e:1f:02:56:a9:b2:91:
                    71:e8:1c:f0:31:0c:85:79:dc:65:fd:68:8d:07:1f:
                    0b:ec:d7:ce:bc:3f:f8:7e:61:1e:a8:1b:28:e9:75:
                    6c:46:12:3c:e1:3c:b2:8b:1e:08:91:f1:d0:2d:b2:
                    45:36:3c:6e:05:9b:64:d0:37:d4:06:4b:5e:a3:f4:
                    6c:89:d2:dc:b7:13:f4:5a:5a:4b:d8:d3:b5:da:d9:
                    ec:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:73:CC:33:C9:1A:5B:41:FE:FA:B1:44:6F:27:D0:4F:ED:DC:E4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/fd2b756d-dca9-320f-a24d-589725851877.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.7.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:a5:36:f1:9e:c8:b5:f8:fc:90:88:cb:07:7d:de:c1:ac:98:
         c0:2f:45:94:b0:65:5b:ef:56:73:4f:3b:22:d5:b5:98:54:47:
         3d:5b:7c:cb:3e:d0:32:13:06:15:b3:0c:9b:95:29:35:d8:0a:
         6e:a8:cc:6e:39:6a:50:af:4f:8f:6a:95:63:1b:63:f3:8d:88:
         e2:44:91:4f:32:8b:3e:91:0e:b2:a1:de:99:e8:9c:b5:f1:14:
         f0:be:c4:c6:ee:97:af:de:0d:13:46:d9:f6:af:7d:72:ad:17:
         09:42:89:24:2d:eb:cc:6a:20:f2:e4:4f:be:2a:2f:1b:7c:16:
         ae:34:ce:17:47:4c:36:2e:ab:02:e3:2e:70:47:9c:52:54:c2:
         f4:33:b6:fb:ac:73:41:4d:a1:44:20:35:e3:ae:2e:a1:05:26:
         65:c9:70:dd:82:fa:4f:09:2b:c3:a3:84:d2:e8:44:7b:d9:2f:
         83:32:87:80:e9:f3:20:46:b9:9e:02:a1:28:42:85:e4:0b:7d:
         8b:8a:d5:00:7f:2a:9d:6f:15:45:f3:e0:1e:d4:18:0d:cc:b9:
         da:0f:17:9e:84:a4:ed:f6:e8:46:37:75:72:7b:b9:e1:fd:77:
         7f:94:6a:22:ba:55:c8:74:6d:1b:95:a5:ab:2c:78:91:27:d6:
         e0:cd:3f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:54:27 2025 by rpki-client