Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e69b2fdf-68c0-3d6e-91e9-2a43ceced8ba.roa
File:                     e69b2fdf-68c0-3d6e-91e9-2a43ceced8ba.roa (raw, json)
Hash identifier:          DpDDjRrjLcIWFS74cdnRoF8wrpsXk4ts+5JxhN5aYSA=
Subject key identifier:   96:16:93:59:15:EE:3C:58:93:14:9E:80:B3:3F:8D:71:F2:83:59:D8
Certificate issuer:       /CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
Certificate serial:       010D0C9F43285848CC5AC1BB3B3308CBA32490A0
Authority key identifier: 50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e69b2fdf-68c0-3d6e-91e9-2a43ceced8ba.roa
Signing time:             Fri 07 Feb 2025 00:54:39 +0000
ROA not before:           Fri 07 Feb 2025 00:54:39 +0000
ROA not after:            Wed 07 May 2025 23:54:39 +0000
asID:                     10753
IP address blocks:        209.142.68.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:5a:c1:bb:3b:33:08:cb:a3:24:90:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b9cb8e-7a77-408e-81d9-075f8ef7200e
        Validity
            Not Before: Feb  7 00:54:39 2025 GMT
            Not After : May  7 23:54:39 2025 GMT
        Subject: CN=7eb68679-57f6-44e7-884a-6ed2f82df824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:82:10:2c:db:99:61:90:94:8f:66:9d:66:d9:
                    08:32:52:b9:bd:56:48:57:13:b7:c9:4b:3a:eb:0e:
                    25:d6:f4:be:a5:2b:50:02:d2:0e:83:6b:98:cf:e8:
                    08:4c:bc:01:f1:39:0e:86:b6:84:2d:eb:da:31:66:
                    ad:37:73:25:a7:47:44:e4:55:75:03:27:0b:5c:0e:
                    fd:3f:82:fb:51:a0:35:74:41:15:40:e5:aa:2a:bd:
                    e4:cb:46:0c:a2:86:63:9e:21:58:1c:40:6b:84:6c:
                    43:d6:b3:aa:99:3e:8e:27:73:f2:a6:e1:87:28:f2:
                    40:53:88:8e:39:ad:70:ab:eb:04:6b:a8:af:62:fd:
                    2c:ee:de:c2:d0:3a:1e:02:e2:6c:e9:17:0f:04:f3:
                    78:26:29:a4:8c:d8:61:2d:63:ae:3a:a6:5d:02:77:
                    30:30:d3:b0:47:e3:c0:74:33:44:b6:18:9e:e1:b1:
                    f0:a3:3f:3a:d2:ba:f4:b5:54:ad:ce:a5:e9:58:b1:
                    31:90:3b:2e:6c:5d:f5:9b:32:83:05:dd:59:4d:5f:
                    d7:9d:a1:c9:c2:1f:7f:f2:a0:b3:90:9d:33:bb:7a:
                    e2:33:f1:f5:f0:d1:80:f9:02:5c:1c:34:36:2e:c6:
                    ee:9d:9c:b5:b8:f4:6d:99:af:fb:08:4c:9d:ac:ab:
                    fa:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:16:93:59:15:EE:3C:58:93:14:9E:80:B3:3F:8D:71:F2:83:59:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/e69b2fdf-68c0-3d6e-91e9-2a43ceced8ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e/75b9cb8e-7a77-408e-81d9-075f8ef7200e.crl

            X509v3 Authority Key Identifier:
                keyid:50:25:C9:E2:B0:7C:7B:65:5A:AA:42:E2:43:D8:EE:A0:FC:58:E4:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/75b9cb8e-7a77-408e-81d9-075f8ef7200e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.142.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         29:17:55:b0:59:ff:de:4b:64:d1:e1:bb:8b:ec:fd:d8:c8:43:
         11:e6:e2:13:18:1f:1f:ba:82:d1:67:b8:77:35:c3:31:41:46:
         75:7f:a1:76:94:d5:90:34:51:28:2b:b2:70:47:81:22:99:51:
         02:e3:60:8b:f4:e5:93:d5:ac:d6:a1:9e:2a:c1:b6:c3:fe:7d:
         2c:51:66:76:ac:5b:79:6a:34:70:8a:a0:68:ee:3b:d6:62:4b:
         6f:51:a6:18:19:61:a0:70:9d:6d:c1:77:00:70:06:f3:66:00:
         d1:ac:9a:f7:25:2a:81:83:f3:8a:01:25:61:1a:08:1f:a6:3d:
         7f:a5:5d:fd:53:65:56:f3:6f:60:38:5d:7a:1c:5d:a8:74:5e:
         6e:d8:06:8f:20:45:5c:f2:9e:b1:51:48:93:7e:80:b1:fe:20:
         16:8e:67:ab:42:41:22:77:35:6d:bd:a0:94:1d:72:6e:39:ea:
         a9:d5:7f:8d:dd:4b:7e:0e:80:a1:91:60:1e:3e:83:dd:ff:f8:
         6a:2e:65:94:c0:73:00:56:cb:a8:aa:c2:ff:24:5d:aa:c0:98:
         68:2b:ed:64:c5:87:37:04:ea:8b:92:78:53:0f:77:b7:ec:74:
         f6:ef:a1:e9:a6:9e:43:c6:7f:cc:28:24:8a:5e:3c:62:d4:5c:
         23:cb:01:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:15:03 2025 by rpki-client