Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/7ba7761f-a57e-367c-9e42-0dd3952fc104.roa
File:                     7ba7761f-a57e-367c-9e42-0dd3952fc104.roa (raw, json)
Hash identifier:          ZdY2vttfFPrRAg6vDVfKQrnNzDFBInzF/cJZ467nKb0=
Subject key identifier:   B0:F4:0A:BA:B6:A6:D9:51:2D:C8:39:6E:B3:11:9F:73:01:C2:DC:37
Certificate issuer:       /CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
Certificate serial:       010D0C9F43285848F22C6F22D1D6EC1AF877B820
Authority key identifier: 1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/7ba7761f-a57e-367c-9e42-0dd3952fc104.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     35874
IP address blocks:        69.58.36.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6f:22:d1:d6:ec:1a:f8:77:b8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dff9539e-a68c-4eed-ad98-26f67ff446ff
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=3cf8c482-a2ce-4da8-b5be-713fd7a7f1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9f:19:db:9c:3f:19:ae:c8:c6:53:6d:b9:0d:
                    27:fb:5b:8e:e4:f8:20:ad:e2:af:97:f7:05:fc:35:
                    af:5e:10:1d:3a:e4:3e:e7:70:24:ff:b4:a9:04:5c:
                    e9:31:38:ff:41:5b:4f:1b:eb:6f:11:d6:29:21:15:
                    8f:a8:48:1f:dc:e9:c2:cb:b0:98:6e:98:b4:fa:cb:
                    1d:01:95:9d:44:5f:82:2a:ce:c8:64:d5:d9:ea:fc:
                    15:09:44:d1:3b:eb:43:f2:e9:59:9e:0b:53:02:d4:
                    20:9e:cb:46:e2:51:32:10:2b:e3:c4:d4:f6:c5:6f:
                    af:bc:75:24:5d:ca:b6:ff:0b:a3:48:a6:62:00:fa:
                    09:76:9e:55:2b:37:30:0f:47:ba:65:22:99:65:24:
                    34:40:99:9a:0d:f2:fe:b3:da:a4:9c:cd:1f:61:0a:
                    ba:a3:48:cd:a2:75:aa:5a:c0:e7:79:06:fc:0c:02:
                    6d:c8:7e:89:81:81:1e:87:1d:11:06:4c:b7:0f:9b:
                    7d:9e:42:17:3d:35:cd:b5:50:2c:41:52:82:eb:99:
                    24:cc:c8:be:62:35:7d:88:d5:5d:a6:83:1c:c4:10:
                    df:17:9c:c9:3a:c2:b5:1c:cb:4a:7e:a4:87:e6:02:
                    77:3e:ce:7f:4d:19:4d:d8:b2:9f:c9:dd:e3:2e:f0:
                    45:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:F4:0A:BA:B6:A6:D9:51:2D:C8:39:6E:B3:11:9F:73:01:C2:DC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/7ba7761f-a57e-367c-9e42-0dd3952fc104.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff/dff9539e-a68c-4eed-ad98-26f67ff446ff.crl

            X509v3 Authority Key Identifier:
                keyid:1C:01:4D:4D:CF:6F:FE:97:DA:2C:22:49:83:6A:44:5C:24:74:6A:36

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dff9539e-a68c-4eed-ad98-26f67ff446ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.58.36.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:ee:b9:49:9e:73:b8:4d:d2:31:b1:66:48:85:f9:8b:fd:6b:
         1a:e3:1e:11:dd:b3:35:2f:a1:d8:98:de:6c:44:2e:5a:68:a3:
         d8:c8:60:68:37:c9:b8:ed:30:ad:72:56:f6:92:d6:17:23:42:
         f4:7e:58:bc:38:4b:7b:ea:9a:37:12:a4:d8:0e:cb:5b:e9:14:
         db:9e:49:9e:99:b5:2d:06:ff:15:45:8e:31:12:c0:14:08:79:
         37:17:99:b9:7c:34:f7:b3:d3:c1:3a:17:71:67:46:55:f4:7a:
         e0:16:35:ef:b0:dd:49:6e:00:93:ce:d4:45:28:fa:ae:b4:d0:
         cd:8c:c1:5e:cb:0b:38:60:f0:0c:7a:43:38:ce:5a:b2:9c:74:
         44:dd:60:c8:c9:60:78:e2:b6:cb:ed:b7:61:f5:9d:d6:e4:f4:
         d6:70:94:8f:2d:56:81:aa:29:6f:41:f0:93:15:c4:6e:6a:fd:
         e9:ac:d7:b6:ef:11:47:c7:54:a7:d7:54:21:7c:ca:ad:6b:1e:
         48:4d:48:fd:65:b7:31:bf:60:d6:62:c3:43:98:8b:40:45:c2:
         20:ea:a0:a4:06:f6:4f:ea:e1:8f:78:9d:8d:a8:dd:76:fe:7d:
         51:76:8f:4b:50:6d:cb:c1:69:23:76:c4:ef:37:4d:cc:b8:e6:
         4e:40:5d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 01:51:41 2025 by rpki-client