Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa
File:                     b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa (raw, json)
Hash identifier:          FRQ3m8zaUHVpUMdpyhNHos08aRSslp+PEDfLr0DqN3A=
Subject key identifier:   7B:8C:4A:E1:06:9A:12:52:54:CD:FF:B7:B5:61:E6:C4:96:98:B7:4D
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F432858497DA470EFF71A9787450720C0
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     26918
IP address blocks:        69.7.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a4:70:ef:f7:1a:97:87:45:07:20:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=2c3bed9b-b968-46b4-be30-eed7579e60ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b3:c8:88:52:f1:a3:5c:db:3a:0e:92:e0:28:
                    75:80:6b:04:14:88:2c:c2:a8:11:8c:76:84:3e:49:
                    92:d9:47:0c:92:a4:15:b6:6a:e4:61:da:64:9e:6e:
                    26:0d:0b:5c:5a:3f:7e:7a:aa:f8:94:35:50:82:56:
                    77:dc:9a:f9:39:8d:98:8b:e2:06:fa:25:eb:0f:90:
                    0e:05:9c:d0:09:72:6f:2c:97:53:73:c0:e9:31:ca:
                    50:4e:f9:3c:f5:10:f1:ba:6c:4a:c2:97:47:f3:b9:
                    93:08:67:5c:47:62:d6:5c:11:7e:0e:93:fe:1f:ac:
                    87:ec:b7:21:f9:a9:92:ea:5f:7b:cc:1e:0f:ed:db:
                    df:b7:5c:40:c9:30:71:3e:c1:b0:83:fc:07:43:7e:
                    33:8c:36:a7:1e:6a:8b:74:05:b5:ce:db:8c:5b:fc:
                    6b:a0:22:ca:5d:5b:10:78:c7:12:07:ef:dd:4f:b6:
                    e7:b1:82:3a:d0:0c:2a:81:1c:8a:db:59:14:f5:ac:
                    a8:de:3a:0a:06:93:10:2a:f4:45:74:bd:8d:62:d1:
                    c8:ce:1f:f0:ef:6a:1d:fb:ce:89:8d:32:c6:30:02:
                    fc:3c:ce:eb:09:b7:74:aa:b7:76:94:f8:45:22:1d:
                    2e:36:c8:f2:5d:e1:91:d7:6d:4a:4c:65:2d:18:a6:
                    62:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:8C:4A:E1:06:9A:12:52:54:CD:FF:B7:B5:61:E6:C4:96:98:B7:4D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.7.76.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:b9:bb:31:cb:2b:5d:10:4f:da:df:f9:99:ea:8e:72:e5:aa:
         94:a7:ea:1c:ac:62:b9:42:70:dc:ef:99:4d:69:07:a5:1a:de:
         03:a9:9f:04:8b:85:65:70:0d:55:a1:b0:0d:24:89:b0:81:23:
         1a:a9:95:c6:07:83:ad:8a:d5:80:d5:bf:a8:64:08:ef:d7:b6:
         00:0d:6f:a6:1d:ab:49:ea:dc:f9:1a:6c:43:41:e3:e4:41:58:
         1a:30:30:33:2a:fe:0e:da:f3:00:f3:ba:c0:e7:c8:2f:8a:88:
         36:cd:c4:28:6d:87:3b:69:61:51:74:bf:7f:d6:48:b0:1d:03:
         08:b5:44:85:54:ba:e9:9a:43:3f:d6:79:c2:20:da:e5:5d:a8:
         1b:8b:b9:bc:52:2d:87:71:6a:35:42:69:42:1e:ff:aa:8b:c9:
         64:93:ca:5e:80:5d:88:c5:e0:55:03:ee:6e:44:4e:6f:b1:48:
         66:ae:55:64:85:bf:f2:cc:5d:6e:31:71:80:3d:1d:02:d3:34:
         2c:c7:be:c7:39:e2:b0:a9:6b:a0:73:fb:af:49:ca:b3:ef:4f:
         e8:1c:18:5b:c0:57:f8:66:f2:61:77:75:e8:24:8f:35:85:35:
         fd:ca:39:5a:e8:90:b0:61:44:99:50:b0:95:24:57:c6:ec:3f:
         3b:0e:e5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:20:21 2025 by rpki-client