Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/eb5555fe-d912-340f-8c0f-90e58a06baf5.roa
File:                     eb5555fe-d912-340f-8c0f-90e58a06baf5.roa (raw, json)
Hash identifier:          36M3XlG5R/6ahbilQXwS7X81RAx/bIuyn8XB+iXU4H0=
Subject key identifier:   78:99:3A:2F:95:66:31:8F:7D:EB:D5:94:34:88:C3:5A:FC:56:3F:51
Certificate issuer:       /CN=aad22c3d-3c14-42b7-a324-b1bb21649378
Certificate serial:       010D0C9F4328584827C532E20F090E10BBF8D580
Authority key identifier: 67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/eb5555fe-d912-340f-8c0f-90e58a06baf5.roa
Signing time:             Tue 10 Dec 2024 02:00:40 +0000
ROA not before:           Tue 10 Dec 2024 02:00:40 +0000
ROA not after:            Mon 10 Mar 2025 01:00:40 +0000
asID:                     27281
IP address blocks:        192.184.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:27:c5:32:e2:0f:09:0e:10:bb:f8:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aad22c3d-3c14-42b7-a324-b1bb21649378
        Validity
            Not Before: Dec 10 02:00:40 2024 GMT
            Not After : Mar 10 01:00:40 2025 GMT
        Subject: CN=b6fa52a9-9e42-49ac-a29b-67739a86173d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d2:44:5f:ab:ba:fe:59:13:ce:64:d3:cb:04:
                    e1:cd:4c:c4:e0:eb:59:2d:9c:79:a8:1d:57:52:45:
                    8c:73:f0:ba:37:b7:1f:31:24:25:99:78:34:b1:c9:
                    5c:c5:2b:07:f4:2c:b4:e6:66:c8:d8:40:87:96:bc:
                    33:5f:c5:90:07:4f:a8:72:d0:4f:f8:be:5f:f8:1a:
                    de:fb:64:7f:9e:57:5d:2e:bf:c2:d9:9c:f0:11:6f:
                    38:c7:cc:0b:1c:63:05:90:fe:79:d5:79:c3:23:6f:
                    3a:b6:fd:40:23:09:fb:65:b7:ed:ec:df:50:8f:80:
                    02:32:87:40:d2:20:12:f7:e3:bc:0f:2b:8e:8a:52:
                    88:20:1b:38:6e:96:d6:76:29:75:e9:9a:75:e1:52:
                    2c:f7:8c:c2:f8:04:2d:4e:35:2f:d2:ae:f9:a7:60:
                    04:b6:52:23:59:56:01:36:c6:d9:82:f6:c2:42:3c:
                    16:54:98:83:7a:fa:94:01:73:d1:31:c3:5d:47:fb:
                    79:e7:2f:d4:70:ef:8a:65:22:94:9f:b9:ee:4b:8f:
                    16:47:e7:4c:92:ef:04:9a:c1:77:9b:89:c9:4c:0a:
                    ae:14:86:9f:1d:81:21:d8:27:a6:13:6e:ed:67:85:
                    c7:ba:b9:90:0a:ec:17:ee:d2:8c:d5:88:41:97:21:
                    a5:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:99:3A:2F:95:66:31:8F:7D:EB:D5:94:34:88:C3:5A:FC:56:3F:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/eb5555fe-d912-340f-8c0f-90e58a06baf5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378/aad22c3d-3c14-42b7-a324-b1bb21649378.crl

            X509v3 Authority Key Identifier:
                keyid:67:AE:97:3F:92:B0:66:C4:36:11:D4:7A:D2:24:7A:6F:AC:55:B1:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aad22c3d-3c14-42b7-a324-b1bb21649378.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.184.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:6d:59:0e:f8:a6:e0:9c:4e:31:4b:d0:5e:b0:5e:f6:2e:ca:
         1e:63:bf:07:06:75:74:c1:e2:ed:9e:a1:1c:8d:ff:35:61:2e:
         37:0f:8b:1e:83:83:60:5d:a5:a4:df:3a:90:48:dc:64:19:18:
         5d:a5:21:f5:d4:17:1c:cf:10:89:f6:a4:48:7f:1b:f0:e0:70:
         d4:f6:ea:3e:0d:ec:45:e7:c3:f2:61:10:62:be:b5:af:35:54:
         2b:91:f3:52:e8:c1:38:c3:9c:5b:77:06:54:62:20:80:eb:f6:
         26:4b:28:e6:11:e3:7e:27:14:51:01:32:00:22:d7:b5:54:3f:
         23:cc:31:bb:71:91:fb:70:e0:95:53:67:58:12:e2:64:74:6a:
         b6:f1:ab:94:5e:59:d3:b8:fa:e5:5b:8b:2a:ff:21:f1:f7:5c:
         a4:56:d6:db:5d:0e:09:2f:72:16:b7:80:a6:8a:e9:fa:fd:30:
         ae:f6:c4:ed:b3:c5:1c:28:69:39:d2:30:35:f5:8e:d1:fe:90:
         53:fd:52:56:29:3c:cc:af:c8:69:8b:ce:f6:92:3d:70:41:0d:
         97:7d:78:23:6d:e2:f8:21:86:c2:54:b6:a4:2c:08:fb:65:52:
         1d:d7:cd:cf:2c:52:2e:7f:8f:d9:5e:cb:28:1d:d6:12:18:8d:
         9c:48:b3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:29:43 2025 by rpki-client