Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa
File:                     cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa (raw, json)
Hash identifier:          pSsU/yfFhWalePcyLRYMWQADNOvdM2zko/63BshXKjQ=
Subject key identifier:   DB:97:5D:D9:71:20:CA:F4:34:92:38:3A:6B:7F:2C:6B:05:EE:CB:BF
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285848EF61724418BE4411A29A9420
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     63949
IP address blocks:        172.235.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:72:44:18:be:44:11:a2:9a:94:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=4df24175-e255-4ec5-87cf-edb6cd4fbaf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:50:28:41:ea:8d:d1:4e:7a:d1:36:60:a0:9c:
                    62:d2:b5:46:f0:e1:7a:8a:28:58:5e:9d:46:40:4d:
                    c6:11:a2:b0:e4:cf:97:d6:d4:33:c0:ee:68:53:72:
                    bb:66:e8:fd:57:22:03:ed:83:7d:4a:5f:27:f8:5a:
                    9e:67:32:9a:da:f6:f6:a7:47:2e:50:31:88:c5:44:
                    ae:58:0b:f6:4a:4e:11:ed:f2:40:c8:8f:af:da:42:
                    31:b2:f7:7a:9b:d9:85:0f:7a:81:e7:6f:55:73:4f:
                    83:39:f6:c3:08:34:87:61:41:e5:b2:a8:7c:f0:71:
                    6b:39:c2:db:b4:4e:50:31:72:3d:9a:8d:dd:bd:77:
                    0e:86:c3:2d:49:25:f7:a2:66:42:9a:aa:42:17:8b:
                    34:67:ea:47:2e:e3:58:c7:16:c5:67:a8:a2:f7:73:
                    1e:35:dd:1d:eb:82:6b:79:87:fb:88:99:d2:95:81:
                    0d:6f:1c:b6:76:c5:50:2b:94:d3:cf:5d:fc:62:a2:
                    8b:35:b4:e2:46:90:51:93:f5:b9:dc:3c:61:06:a1:
                    6a:7b:d2:ee:cd:64:e2:8a:46:2b:75:6f:d5:2b:42:
                    bc:cc:1d:45:aa:d1:b2:a8:4d:85:6d:0e:0c:db:f4:
                    85:d8:dc:42:9e:8d:e9:a8:ec:e6:c0:a5:04:e3:f0:
                    a1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:97:5D:D9:71:20:CA:F4:34:92:38:3A:6B:7F:2C:6B:05:EE:CB:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/cfad3b01-5f06-3069-a7bf-c5d279d1cf81.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.235.111.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:bb:e3:6d:bd:72:8e:d3:61:b9:c1:25:41:05:5c:e4:f4:59:
         bd:f6:16:ab:73:c9:ea:e0:bb:04:fd:b5:f8:57:bc:b5:16:45:
         8d:0c:31:84:60:32:3e:22:4a:2a:71:de:72:7b:e2:fb:3e:e4:
         34:53:ad:a4:80:86:b6:44:fa:ae:ea:31:fc:58:6c:58:a9:32:
         2e:bb:ef:0f:e1:0d:04:82:f2:59:e4:ca:2b:76:9a:7d:ca:89:
         87:b8:84:5b:07:29:ea:cb:aa:c6:b9:db:a4:fd:0f:0e:8e:79:
         4d:7d:13:94:57:2c:c4:1f:e4:5a:22:e9:fe:d7:60:5d:a9:cd:
         a5:e3:36:45:f1:17:a6:24:21:73:ec:28:81:c9:aa:1a:e3:ad:
         84:9c:e3:f7:e1:66:50:fd:81:61:2e:42:cd:d7:8a:e3:80:dd:
         88:c7:43:8f:8d:30:09:2d:25:83:59:be:87:17:37:91:fc:38:
         0a:bb:42:46:fe:f0:34:41:48:cd:d1:c7:0b:fd:4e:c0:a3:b7:
         b9:be:2a:d0:da:6c:71:de:8a:21:fb:75:6d:ab:18:59:7b:52:
         c6:71:8c:37:2f:27:a5:cf:5c:57:15:4a:82:a9:c9:59:5c:05:
         96:e3:ed:c8:25:39:90:d4:6a:45:62:49:48:0f:d3:54:9f:c7:
         41:5a:c5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:51 2025 by rpki-client