Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa
File:                     bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa (raw, json)
Hash identifier:          sQy5EUi+iyVSwSEXvedtq1r9PjgMbo7Mvp3qwPyw1Ls=
Subject key identifier:   B7:DD:1A:6D:67:35:1D:DE:D2:F3:17:AB:0F:69:83:29:E7:7C:55:A1
Certificate issuer:       /CN=00856c65-b5f4-4666-91c4-407d890d4494
Certificate serial:       010D0C9F432858499D5296C17E2985EB1C69B370
Authority key identifier: A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa
Signing time:             Tue 22 Apr 2025 21:22:09 +0000
ROA not before:           Tue 22 Apr 2025 21:22:09 +0000
ROA not after:            Mon 21 Jul 2025 21:22:09 +0000
asID:                     6079
IP address blocks:        209.236.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:52:96:c1:7e:29:85:eb:1c:69:b3:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00856c65-b5f4-4666-91c4-407d890d4494
        Validity
            Not Before: Apr 22 21:22:09 2025 GMT
            Not After : Jul 21 21:22:09 2025 GMT
        Subject: CN=67c4fc01-f1b0-434b-b1ce-1ca1e36c85e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0b:dc:1c:ea:f2:02:11:a3:bc:f0:d6:af:4f:
                    79:b3:1c:97:ba:53:6c:1f:07:53:05:64:85:88:02:
                    37:78:6a:8d:9e:0e:60:2a:75:cc:84:6a:f1:03:6f:
                    15:6f:0e:f4:f3:eb:3f:14:f3:dc:21:2c:00:72:5d:
                    22:ea:b9:b2:d0:cd:b8:ff:87:ad:4c:20:aa:c7:83:
                    21:d7:95:c8:30:05:d3:5f:44:f0:27:3c:16:9c:70:
                    c2:f3:8c:eb:2b:b6:05:88:1b:ec:e9:de:a9:3d:4b:
                    b5:ca:a6:44:fa:66:05:1f:27:38:2e:b4:48:ef:e2:
                    bc:85:2e:31:92:f7:e0:7a:95:21:e3:bd:09:ed:19:
                    0b:e2:af:ac:61:12:1e:9c:ae:8c:03:15:05:bf:53:
                    e2:2b:65:d7:c3:df:eb:6d:2e:eb:91:73:10:4f:7d:
                    19:1a:36:6b:9e:b8:4a:46:f1:97:ec:50:57:e3:80:
                    a1:0f:d2:29:c0:8a:fc:75:e9:77:58:fb:94:ba:33:
                    b7:ea:00:5f:e5:f5:06:be:43:11:d2:dc:7f:61:cc:
                    79:bd:9d:a6:f2:b5:c4:04:85:08:5a:4e:da:b0:6f:
                    b7:d3:4a:c6:49:6c:d5:90:2d:b6:e6:59:32:a1:25:
                    a9:9c:86:17:d8:7a:f7:39:2a:6f:3d:25:a4:c6:d7:
                    16:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:DD:1A:6D:67:35:1D:DE:D2:F3:17:AB:0F:69:83:29:E7:7C:55:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/bcef13b1-d475-34fe-93f4-bde2db1c76f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494/00856c65-b5f4-4666-91c4-407d890d4494.crl

            X509v3 Authority Key Identifier:
                keyid:A5:EF:44:36:8E:20:3C:B4:0C:EF:B2:0F:13:9D:A3:B8:DA:DE:89:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/00856c65-b5f4-4666-91c4-407d890d4494.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.236.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:bd:79:9b:54:11:34:fe:ba:2b:89:f4:7c:a0:db:94:1d:67:
         3b:4e:ca:4f:bb:2d:64:56:cf:61:a2:ed:24:b4:85:6e:25:0a:
         e2:77:e3:59:1a:c9:7e:79:2c:11:48:c3:08:21:fb:cf:eb:9f:
         a7:1c:eb:4e:1e:0e:39:fd:e7:ab:b3:b5:f9:2f:36:7b:4e:8f:
         c2:16:3b:af:b3:59:f4:8c:3c:52:b1:92:cb:6a:37:1c:fa:65:
         84:ab:62:f8:50:0d:73:9e:c7:54:b9:65:99:63:37:fd:fc:de:
         d9:be:47:51:f2:6a:fc:c1:59:23:4f:f0:be:50:f7:ab:b1:b4:
         04:99:f5:89:cc:bc:e3:9b:5e:a8:bb:b7:a4:f2:67:07:b6:d0:
         ec:02:bf:5f:1e:27:b6:d4:81:e3:1f:39:36:e6:8d:de:61:5b:
         41:ce:95:cf:75:69:5e:e6:e3:f7:24:e8:d6:dc:b8:ac:0b:ef:
         c6:c9:81:37:9a:26:d0:55:bd:eb:e2:0a:e7:98:e0:0e:34:aa:
         23:7d:7e:5c:ad:23:ac:4d:ec:4e:8e:78:b7:41:3e:e5:8a:2a:
         7e:3a:14:40:0b:a5:45:ad:76:d9:52:5d:8a:d3:19:f6:09:47:
         34:03:63:7b:bf:af:b2:af:9e:f1:e7:47:33:6f:37:3e:38:f5:
         97:ce:5e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:34:37 2025 by rpki-client