Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/101f8a21-3233-30de-8c21-fbce1c5448eb.roa
File:                     101f8a21-3233-30de-8c21-fbce1c5448eb.roa (raw, json)
Hash identifier:          s5yMDZVKYKaBu2g/UOtorSX1QiiJBe45qRWTktY3YmM=
Subject key identifier:   F3:ED:59:C3:27:09:65:89:07:18:10:9A:AC:2E:12:C0:11:1D:B1:D9
Certificate issuer:       /CN=c91a680c-10f9-4064-bc75-a0790274df80
Certificate serial:       010D0C9F43285848BE86259B4A53EC2809AA0DC0
Authority key identifier: 72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/101f8a21-3233-30de-8c21-fbce1c5448eb.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     263702
IP address blocks:        207.210.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:25:9b:4a:53:ec:28:09:aa:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c91a680c-10f9-4064-bc75-a0790274df80
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=12ca28c5-c275-4591-b639-c2b6383e2b93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:32:30:f6:44:3e:ff:fd:06:d0:c7:b3:21:8b:
                    0c:a3:44:b0:3f:47:c9:e7:29:f1:1f:7e:0b:da:b5:
                    fb:55:ab:65:78:f1:24:94:42:12:25:b7:94:5e:5d:
                    fa:74:06:3a:06:50:65:5e:a0:12:18:29:2f:56:fa:
                    a2:64:02:0f:4f:7a:d1:75:24:b5:3b:ca:36:cb:59:
                    24:d3:cc:5e:23:ee:67:54:6a:64:a4:53:3d:30:31:
                    9d:ce:78:70:a8:9d:51:63:0b:ae:a3:de:ef:17:28:
                    02:a6:6b:b8:82:c6:fa:cd:51:59:3d:47:1b:60:c9:
                    dc:9d:d4:3e:99:c3:96:69:c5:54:da:c4:20:b2:b8:
                    3c:b1:20:71:0e:5f:25:e5:74:68:87:6f:70:5a:be:
                    61:1f:56:f5:28:54:89:53:56:83:a1:78:a8:1f:05:
                    06:5e:67:46:9a:c8:7a:a0:a2:5a:42:3a:97:79:88:
                    f6:86:f9:c1:85:03:97:cb:86:95:6b:56:e0:e8:60:
                    ed:8f:4e:01:e2:f4:d2:84:15:8c:2a:15:12:96:00:
                    69:71:5f:0d:6c:f8:60:3d:10:1d:bf:6f:70:4b:26:
                    02:f8:70:85:d0:5e:11:9a:15:69:e9:7a:ee:c0:a1:
                    07:a2:29:cb:02:1a:81:5f:4f:d9:6f:0e:bb:5f:a2:
                    7a:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:ED:59:C3:27:09:65:89:07:18:10:9A:AC:2E:12:C0:11:1D:B1:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/101f8a21-3233-30de-8c21-fbce1c5448eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80/c91a680c-10f9-4064-bc75-a0790274df80.crl

            X509v3 Authority Key Identifier:
                keyid:72:D0:5A:6C:61:A1:F7:5E:F3:5F:7B:6C:A8:85:ED:E3:A4:AE:A3:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c91a680c-10f9-4064-bc75-a0790274df80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.210.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:c1:ef:87:e3:e2:8d:7c:cc:e6:cd:33:aa:01:fd:2e:18:
         f3:95:1c:d3:55:ad:1e:c9:c1:76:91:f8:9c:8a:75:b1:e9:25:
         c2:84:c7:7c:b9:3b:45:02:e5:17:2d:00:18:06:5e:a2:07:1e:
         30:13:bc:18:da:93:7e:34:f7:14:62:a1:d8:ee:9b:91:a5:c5:
         ca:76:c0:2c:f8:2f:07:ce:01:9c:b5:98:cc:ed:82:48:6e:ad:
         f0:03:c2:85:3a:46:ad:10:cc:b5:ab:d4:7d:73:62:8e:a8:1b:
         f9:8b:ae:50:49:1c:b9:07:e6:c1:24:dc:c9:00:28:92:50:b4:
         7b:9e:a8:0f:b8:85:6d:e4:fe:6b:2e:e4:ce:f3:ff:1e:0e:f8:
         81:0f:52:51:73:41:06:20:82:d4:60:fe:a1:97:c8:80:d3:49:
         2e:fd:62:72:e1:19:ee:65:b9:7b:52:e7:0f:dd:00:4c:1e:05:
         f5:84:c3:36:60:64:6a:ec:7e:fd:ce:bd:5f:32:42:39:00:2a:
         a6:09:8f:d2:f8:24:3c:5f:57:d8:76:5e:eb:7a:03:1b:81:c0:
         36:33:0c:c2:b6:cd:42:61:67:63:96:f8:dc:1d:d9:7b:d1:5c:
         d1:18:5c:c3:fb:26:b0:df:bc:8c:a5:4c:d4:2e:ca:a8:0b:89:
         98:17:d0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:46:35 2025 by rpki-client