Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
File:                     8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa (raw, json)
Hash identifier:          1jy583Hks6b9dr9nuK4JdbQqxaDPi8bAFQuejV4uZMk=
Subject key identifier:   4D:CF:35:FE:BC:C0:8B:5A:73:94:65:9D:7D:A3:49:6A:50:FD:74:C7
Certificate issuer:       /CN=5f6f7623-0788-410a-b9dd-8040879aa924
Certificate serial:       010D0C9F43285848100A7D394F4DC2779ADEC600
Authority key identifier: 6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     19197
IP address blocks:        69.41.41.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:7d:39:4f:4d:c2:77:9a:de:c6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f6f7623-0788-410a-b9dd-8040879aa924
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=2fdbc087-7648-4469-bdb2-80afb9e124c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:fb:8f:0f:0b:35:4e:82:cc:7a:9d:79:5d:
                    54:52:04:27:d2:3e:ed:28:c9:b1:e6:9d:e7:57:30:
                    50:45:c7:d2:ba:e5:52:dc:93:95:aa:ef:f4:46:b3:
                    c8:bd:78:ad:dd:58:25:20:44:4c:9e:d4:ae:0a:a3:
                    92:e2:c9:99:b7:1d:75:f9:84:85:58:28:7c:aa:a1:
                    b1:cb:5e:1c:b6:e2:88:e7:4e:46:2b:bc:4c:b0:f2:
                    a1:7d:f1:03:f6:12:5b:f5:99:00:20:b5:16:75:a4:
                    42:be:ef:8a:62:9b:b5:43:04:91:fb:05:17:a9:ad:
                    f3:cb:3e:7d:8a:70:e0:cd:23:b4:ac:fe:d3:a0:19:
                    cf:dc:a1:64:5b:0d:ed:86:63:ee:bb:93:6f:93:c9:
                    32:e0:f3:f1:72:f5:b9:6e:54:c2:ab:b6:50:bc:b5:
                    59:bd:c0:df:a6:b7:a7:55:c3:f3:ec:ef:a2:8f:e8:
                    75:e9:f6:6b:cc:a6:2e:d0:ac:a4:0f:2d:50:8d:e6:
                    7d:ff:8a:c5:cc:33:34:78:3b:5a:46:ca:54:b4:f5:
                    a4:24:a4:c8:a0:5b:4e:29:0e:ca:b0:62:8b:e4:5e:
                    d7:a9:dc:26:49:cb:6c:61:c2:ac:d3:05:77:92:29:
                    35:3d:ea:81:35:f6:3d:a6:45:ea:cd:a2:7f:06:a0:
                    d0:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CF:35:FE:BC:C0:8B:5A:73:94:65:9D:7D:A3:49:6A:50:FD:74:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/8a6f32c4-dc58-3dc3-82d8-9190199e51ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924/5f6f7623-0788-410a-b9dd-8040879aa924.crl

            X509v3 Authority Key Identifier:
                keyid:6C:F1:38:A9:DC:91:8A:D7:97:D6:E0:2C:FD:36:EA:97:60:B3:CF:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5f6f7623-0788-410a-b9dd-8040879aa924.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.41.41.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:b3:d9:2d:6d:2a:40:fe:1d:d7:1a:4d:e3:fe:15:da:e5:ac:
         53:8b:2a:33:7c:11:a3:ef:0a:2b:72:98:e9:2d:56:84:30:3d:
         ea:e5:b5:5b:9a:a7:46:85:7e:bf:66:2c:b8:a7:e2:63:f1:c6:
         cf:c9:12:f5:91:67:f2:0b:b6:cd:63:55:e0:8e:bf:16:44:de:
         ab:56:37:13:18:c2:fc:39:57:68:66:1d:c3:9c:c8:cf:7a:0e:
         36:a5:0e:cc:ed:2e:87:22:18:ae:5a:12:c8:04:de:30:c7:22:
         86:da:49:da:5f:02:62:1f:75:04:90:7c:82:8b:6c:6c:cb:d5:
         ad:b3:96:d0:a8:9d:54:25:ef:61:7a:18:87:4b:ef:36:6e:23:
         57:0f:b6:84:e5:40:40:62:af:b3:83:6a:c6:62:9d:b2:82:94:
         78:45:52:2b:54:22:2f:35:b9:b2:4c:c5:32:0b:48:82:d4:fb:
         6f:7a:4a:55:6c:a6:f7:41:87:6d:1b:23:84:83:c8:db:9e:bb:
         14:1e:e5:55:50:64:0e:a3:5e:12:6d:4d:d6:f4:82:4b:a8:53:
         0a:97:02:e1:36:0f:ff:75:a0:57:3c:e2:cf:a6:ba:80:e5:49:
         45:15:0a:08:32:c0:48:10:e9:16:aa:61:2d:4a:55:e2:d0:7d:
         63:d3:80:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:30:50 2025 by rpki-client