Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa
File:                     864da7e7-501b-3190-a653-c711c042368d.roa (raw, json)
Hash identifier:          Qi2o7fKmSjFlcE4VQy6JJxIGeDel9VDPgkp9Xsy15GE=
Subject key identifier:   4A:D4:46:1B:C2:2B:8C:4D:D1:2C:8F:5C:A4:50:45:42:FE:08:87:A3
Certificate issuer:       /CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
Certificate serial:       010D0C9F432858490F7BF18FA81D3AECAAE098D0
Authority key identifier: 7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        69.71.136.0/24 maxlen: 24
                          69.71.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:f1:8f:a8:1d:3a:ec:aa:e0:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9bc274-f788-4da8-a0aa-74469ac06ef1
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=7acb31b6-65af-43d0-a6a5-f1bc0bf3d23e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b9:77:a9:f0:56:ee:7e:47:be:64:5e:84:6c:
                    35:d7:d9:97:97:b8:c1:c0:74:74:11:a7:dd:27:13:
                    76:a5:ea:0e:73:db:00:a5:43:ae:f9:57:ae:6d:a1:
                    c9:a7:1b:c2:80:44:ab:7e:e9:08:e3:a6:05:54:92:
                    b4:e7:3d:73:9c:4d:4b:e7:0e:00:57:72:12:1e:60:
                    c1:5d:31:c5:90:7e:c1:30:f5:b6:09:b1:25:a1:2b:
                    4b:54:92:a7:c9:79:48:57:35:87:c1:61:cc:51:5b:
                    9f:6a:d0:b0:99:36:69:47:a0:07:11:08:8c:b6:92:
                    77:ba:e4:ca:86:f5:fa:c7:55:f4:73:61:6b:0a:46:
                    c2:49:5c:2e:2b:f0:c3:13:d3:c4:e1:ce:a9:38:2a:
                    c2:f4:11:e0:fe:62:d6:a5:a9:39:60:a6:50:70:20:
                    eb:e4:47:53:8b:74:93:2b:2c:30:27:c3:48:56:d3:
                    0b:f0:bd:4a:81:74:40:d5:5a:1f:58:f5:2b:51:9d:
                    15:a5:a4:4d:6a:b0:68:e0:7d:ae:dc:fb:f1:ff:ef:
                    19:80:d3:be:c1:4e:be:c8:05:e2:0c:36:07:13:35:
                    be:95:64:65:b4:a6:1c:d0:58:da:f2:74:53:ff:9b:
                    fa:ee:1b:f9:5a:f6:ec:8c:96:b0:bf:4b:35:06:07:
                    56:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D4:46:1B:C2:2B:8C:4D:D1:2C:8F:5C:A4:50:45:42:FE:08:87:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/864da7e7-501b-3190-a653-c711c042368d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1/5e9bc274-f788-4da8-a0aa-74469ac06ef1.crl

            X509v3 Authority Key Identifier:
                keyid:7D:FB:5F:72:48:C6:EC:16:EE:8C:7E:1A:BB:24:9B:99:8B:FB:22:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5e9bc274-f788-4da8-a0aa-74469ac06ef1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.71.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8d:68:fb:bb:a6:4e:e4:a3:14:14:26:3a:c4:0f:f1:0d:67:
         79:6e:c5:ec:16:33:5b:9e:19:0e:d1:ab:b2:81:cd:37:c2:22:
         ac:55:ad:d0:ea:67:f5:c1:f5:9b:eb:6d:4b:ea:e9:d0:5f:ad:
         d2:52:6a:d8:35:3c:34:a6:28:68:9c:56:1d:24:4b:1e:5d:14:
         5b:09:c9:1c:ca:3e:95:30:17:0a:bd:18:b0:69:1b:0e:7e:76:
         4d:c1:a9:78:bc:f7:41:ce:d3:51:dc:48:91:c7:3c:30:1b:2a:
         8e:1c:21:6c:8e:e2:b5:b8:6f:70:6c:e6:09:02:e6:b9:2d:a2:
         fd:ae:f0:de:da:a1:f6:8a:b0:af:87:de:90:89:e7:c9:eb:0c:
         8a:17:67:d4:cc:60:67:e7:c3:76:34:14:b3:69:16:8d:2e:2f:
         1c:2f:bf:c8:fb:1e:61:51:97:9b:83:f4:aa:58:88:3b:d7:8e:
         5b:ee:a4:88:1e:56:e9:29:49:11:c8:32:b0:1b:06:e1:a7:e8:
         66:25:f1:de:54:fc:60:07:67:73:e1:54:c2:86:7b:fa:9a:3f:
         e0:5d:34:d0:5d:80:22:13:d1:b8:e0:ed:d8:b5:f3:05:f0:c6:
         37:14:28:f3:3c:b2:47:c1:c4:76:47:d1:d6:19:7a:7f:03:1b:
         8c:8e:a1:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:21 2025 by rpki-client