Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8a69245f-ade6-3b40-ac11-fca605adf4c0.roa
File:                     8a69245f-ade6-3b40-ac11-fca605adf4c0.roa (raw, json)
Hash identifier:          Ky9T8B8zinmyekhKCHGwDdX8eMcitMGEdKiyEH84ckM=
Subject key identifier:   00:AC:5B:93:C2:AE:42:7C:37:D2:19:EF:29:1C:05:94:91:B1:EE:C1
Certificate issuer:       /CN=9de5b47f-bd49-4614-b658-9980cfd17769
Certificate serial:       010D0C9F432858491D715DC4D771F2A0EEB185C0
Authority key identifier: 8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8a69245f-ade6-3b40-ac11-fca605adf4c0.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        67.219.240.0/24 maxlen: 24
                          67.219.241.0/24 maxlen: 24
                          67.219.242.0/24 maxlen: 24
                          67.219.243.0/24 maxlen: 24
                          67.219.244.0/24 maxlen: 24
                          67.219.245.0/24 maxlen: 24
                          67.219.246.0/24 maxlen: 24
                          67.219.247.0/24 maxlen: 24
                          67.219.248.0/24 maxlen: 24
                          67.219.249.0/24 maxlen: 24
                          67.219.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:5d:c4:d7:71:f2:a0:ee:b1:85:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9de5b47f-bd49-4614-b658-9980cfd17769
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=69b76d0f-e0ed-470b-bad3-875dd6b59276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7c:34:83:3a:82:76:60:64:c2:ab:bd:a4:01:
                    79:10:74:bf:be:82:2c:4c:9f:03:15:57:22:84:08:
                    10:49:90:86:ef:eb:6d:22:cc:09:78:6a:7b:20:31:
                    5a:f8:55:25:e3:f8:79:42:5c:37:37:8f:4d:f8:c2:
                    3b:4c:bc:b4:15:42:a4:ca:0a:7c:24:e4:1d:35:10:
                    99:35:1e:a7:cc:20:93:a9:f9:8b:c7:a5:9b:66:b3:
                    d4:f3:be:93:1f:f8:3c:6e:3f:f2:e2:4d:0b:76:7f:
                    06:64:60:de:47:8a:82:78:34:4d:23:4e:63:8d:bc:
                    72:e7:75:6e:2b:e4:65:a4:ba:22:fa:d7:3c:74:f7:
                    9c:dc:11:a1:c0:6a:97:cf:38:ee:5a:45:b5:0b:ef:
                    59:21:79:8f:5e:07:18:c4:3b:fc:d0:a0:60:78:1a:
                    a1:e0:78:63:36:70:91:41:87:c5:70:9d:81:28:08:
                    e4:5b:49:88:35:11:74:4e:64:9c:e4:15:81:24:c3:
                    42:2a:8b:cc:1b:31:f6:98:d1:7b:3b:a3:6d:b0:a5:
                    0f:19:98:29:0c:c7:72:f5:1c:41:28:42:35:28:16:
                    72:8a:39:8d:c5:09:d7:b7:20:16:83:e1:c8:4f:1c:
                    1d:44:15:31:45:b5:4f:dd:fa:fa:f8:18:29:5c:8c:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:AC:5B:93:C2:AE:42:7C:37:D2:19:EF:29:1C:05:94:91:B1:EE:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/8a69245f-ade6-3b40-ac11-fca605adf4c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769/9de5b47f-bd49-4614-b658-9980cfd17769.crl

            X509v3 Authority Key Identifier:
                keyid:8F:18:8B:18:ED:B5:79:23:55:FB:B9:BF:06:56:0A:D3:E2:01:A4:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9de5b47f-bd49-4614-b658-9980cfd17769.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.219.240.0-67.219.250.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:55:73:3d:5f:4b:70:c8:fb:e7:bf:28:c7:a1:ac:d1:93:3e:
         94:3e:ac:92:a8:c9:0c:bd:0f:51:8e:a1:90:29:9f:cd:2e:2f:
         de:3c:f3:27:16:5d:ad:c8:46:ec:15:94:ca:03:42:0d:5a:28:
         86:26:3e:9b:ed:ed:d6:3a:3a:03:9f:da:db:9d:17:4c:60:ad:
         15:34:5a:db:69:b7:fa:92:50:ef:8e:6f:19:d0:91:2a:7e:bc:
         0f:6b:e9:f9:d9:2d:e3:c1:37:e8:f4:0c:49:0e:3c:c1:41:14:
         18:16:ed:c3:2a:44:b5:a1:55:b7:f0:d1:1c:33:dd:ff:1c:6b:
         9b:c8:0c:dc:32:cd:d3:f9:7f:0a:9e:07:99:43:16:77:de:3f:
         88:60:c8:40:18:29:c6:b7:a5:e1:b8:a5:f0:97:b2:30:c2:c7:
         5f:17:44:fc:fa:c3:6d:6f:82:ac:c9:59:67:5c:75:37:2f:33:
         cb:e4:30:17:2f:d9:3e:31:cb:16:6f:72:64:69:6a:4f:54:d0:
         af:1e:10:a1:1c:e5:43:79:a1:ae:fc:e6:e2:48:8a:3a:c7:f6:
         39:ad:b3:c0:f1:65:d6:6d:67:f7:b0:a7:03:91:f0:65:db:d9:
         d4:a0:f8:89:6d:0a:35:1c:28:a5:d4:2e:a9:7f:8e:cb:c7:69:
         f0:3b:89:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:16:05 2025 by rpki-client