Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa
File:                     27f67c2e-5343-3665-869e-5961a293bd0e.roa (raw, json)
Hash identifier:          w8oTRFtq70GmTziPwD5hekdRr2Qsl2dcHVhQFuwuMUk=
Subject key identifier:   F1:FE:E1:BF:59:39:ED:E1:39:EF:82:DF:F5:1A:05:91:C0:0E:B5:06
Certificate issuer:       /CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
Certificate serial:       010D0C9F432858494CC950DF44704AC6AE24D200
Authority key identifier: B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     49367
IP address blocks:        108.61.102.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:50:df:44:70:4a:c6:ae:24:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63817736-7e5e-4740-8ee1-ac6f2317f08d
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=387cdf4f-1d40-4bc5-8fe9-cd585b429060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:79:14:04:a2:1c:7e:58:93:07:51:9e:b3:94:
                    c2:85:b8:d2:8c:8a:e6:36:5b:d2:51:ff:06:ef:9f:
                    a7:9e:35:63:91:75:d2:19:8f:21:6b:59:40:37:3b:
                    3a:92:50:d0:b5:37:47:4b:6c:66:b4:29:06:a3:09:
                    d5:d5:43:ec:7a:9d:4e:15:c2:91:63:e5:05:9f:01:
                    ff:84:c7:d9:70:ca:50:d5:32:df:64:fe:52:73:17:
                    34:e2:ae:c6:da:2c:58:71:cb:3c:9d:c1:32:0b:75:
                    74:39:df:67:7e:64:43:13:db:e2:ce:67:db:3c:9d:
                    8f:da:73:68:22:28:b3:df:d7:04:4a:c1:7a:ae:ca:
                    a1:83:4b:8c:33:67:b7:76:54:9d:15:37:ba:57:e4:
                    9c:17:b1:d2:af:4b:16:52:2e:18:3e:06:cf:f3:93:
                    a4:33:5b:e4:94:17:fa:91:9b:f0:58:4a:ac:49:7f:
                    26:ad:9c:15:e3:58:2c:23:4e:0d:a3:a3:0b:30:cb:
                    2a:66:5b:7f:15:0d:66:30:3c:6d:f4:01:97:e2:e2:
                    63:6d:a4:7e:3b:84:6d:a4:d9:e7:63:7d:54:58:c7:
                    c1:66:8a:c3:bd:85:61:03:10:17:45:1b:1d:7c:11:
                    b0:b9:6a:28:49:45:e3:f2:69:65:79:33:ea:29:95:
                    38:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:E1:BF:59:39:ED:E1:39:EF:82:DF:F5:1A:05:91:C0:0E:B5:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/27f67c2e-5343-3665-869e-5961a293bd0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d/63817736-7e5e-4740-8ee1-ac6f2317f08d.crl

            X509v3 Authority Key Identifier:
                keyid:B5:F4:FF:81:CB:E0:A0:26:F5:12:35:A7:B3:44:73:D0:89:4F:FC:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/63817736-7e5e-4740-8ee1-ac6f2317f08d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  108.61.102.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:65:a0:46:40:d6:d5:e7:39:4e:1f:68:b6:14:17:74:45:
         39:1d:e0:ca:0d:10:2c:6f:17:02:f4:af:bd:3d:84:a0:9c:13:
         5c:03:87:d7:24:3c:b9:35:bc:fa:d5:d5:93:62:56:f8:29:c9:
         10:ab:8d:9a:36:a6:b9:b2:5f:9c:55:a4:7b:70:36:88:a4:37:
         f8:82:c3:85:59:82:3d:34:7b:66:e3:58:73:a6:a4:10:0a:c5:
         c4:0d:2b:02:14:d4:34:aa:90:fb:3f:3a:fe:2e:c7:05:28:1c:
         de:28:af:7d:8a:d7:6f:86:12:b7:78:cb:41:e1:8b:26:6c:1c:
         f5:29:33:d2:26:5d:b9:6c:e3:11:f5:ea:3b:7f:4b:b1:44:4a:
         ab:4b:cc:a9:6c:ba:c4:fe:39:7e:17:49:44:8c:ae:72:65:14:
         29:8f:c0:78:e9:af:d8:8a:7c:a7:7d:e7:94:3d:10:78:30:a2:
         a7:a8:46:a3:ff:9b:18:5c:ba:c6:5c:92:04:54:14:31:f6:a2:
         51:36:52:ba:37:85:ce:1a:c4:b4:b7:81:43:2f:e1:62:78:a6:
         26:4a:9a:d3:92:f9:42:8d:4b:21:ce:bc:76:1b:27:14:b8:52:
         31:fa:cd:5f:e5:23:03:ef:14:77:94:f8:55:45:3e:a1:c4:57:
         74:f8:b3:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:58:37 2025 by rpki-client