Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/93372355-7bdf-3071-aaff-a569ff2db4e7.roa
File:                     93372355-7bdf-3071-aaff-a569ff2db4e7.roa (raw, json)
Hash identifier:          ikPbMgDmX61Tf/XAGr7j7olPxfnKjC5taHgf5SHblDw=
Subject key identifier:   BE:FB:52:9C:B4:29:F6:E7:17:9F:AC:46:FC:4B:11:79:1C:25:F8:C4
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848DB421499BE888820EC8D2200
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/93372355-7bdf-3071-aaff-a569ff2db4e7.roa
Signing time:             Wed 12 Feb 2025 09:02:04 +0000
ROA not before:           Wed 12 Feb 2025 09:02:04 +0000
ROA not after:            Tue 13 May 2025 08:02:04 +0000
asID:                     64267
IP address blocks:        209.59.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:db:42:14:99:be:88:88:20:ec:8d:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb 12 09:02:04 2025 GMT
            Not After : May 13 08:02:04 2025 GMT
        Subject: CN=d48c778a-e2af-4e1c-a524-a3cecc46785c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:12:4e:8e:08:64:ee:71:9b:28:4f:a2:f3:
                    57:02:ff:43:ef:9f:18:70:5d:57:a3:46:f9:36:c5:
                    ec:97:57:15:a8:7f:1a:83:d2:bc:15:9e:9f:dd:bd:
                    6c:4f:81:d8:cd:dc:04:83:ac:67:9f:6a:88:ea:fc:
                    b9:bb:f2:29:0d:04:c2:5d:b4:76:0a:3c:20:8d:46:
                    07:f8:b9:b6:39:ca:52:e9:62:0d:b3:8a:27:5a:28:
                    93:e5:4e:dd:7d:82:23:78:0e:f8:4c:ff:87:a6:79:
                    c6:16:f2:0b:96:72:bb:ae:84:98:63:5e:c0:c4:55:
                    84:cf:7e:cb:a0:8b:9f:f6:79:a3:34:bf:ca:62:96:
                    cd:4a:2b:ec:bd:a5:71:65:2e:ac:69:06:8a:78:6b:
                    2f:6b:ed:e9:0c:62:00:2d:98:91:48:84:24:13:d1:
                    6d:28:27:38:34:e7:ae:02:58:dc:57:c1:99:df:78:
                    c9:14:db:ff:00:d6:fa:a8:9f:20:17:ef:21:42:e5:
                    40:f5:5f:1c:ad:2d:c3:de:fb:3c:c2:29:06:d5:77:
                    79:26:48:4a:1c:16:f6:6f:1b:74:e0:60:3a:9d:26:
                    d0:5a:f3:0d:52:9d:d0:31:1d:dc:a9:0d:f1:80:a9:
                    56:dc:e3:68:f3:75:39:cf:6b:70:10:f1:2a:e6:b3:
                    1d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:FB:52:9C:B4:29:F6:E7:17:9F:AC:46:FC:4B:11:79:1C:25:F8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/93372355-7bdf-3071-aaff-a569ff2db4e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.59.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:44:ed:48:e6:37:aa:fe:98:46:00:34:34:29:e4:19:7a:d7:
         56:7a:36:b2:93:6e:c7:13:06:93:dc:ec:08:0a:f9:27:e5:fa:
         b4:c9:3d:a4:a0:ca:b9:dc:ed:2d:e8:ee:73:e2:4b:48:ae:92:
         dd:55:bc:c9:e8:4e:d1:05:d7:f8:8a:34:93:22:0e:78:08:c9:
         95:db:34:57:bc:5b:0d:f7:ab:38:71:b7:d2:c5:17:e2:34:3d:
         95:51:49:43:bc:08:e0:06:60:1b:17:18:a9:e0:0c:20:4f:82:
         eb:d3:a2:a8:5e:09:e2:17:e9:fd:e6:f9:8f:da:b8:2d:b6:97:
         85:e6:ca:e8:81:99:62:c5:71:6b:61:8c:13:ee:b1:2f:8b:94:
         3c:5f:6b:ad:b4:6f:58:c2:1c:ba:df:88:50:3e:5a:d2:1b:b3:
         72:67:5c:43:63:26:f4:dd:f7:6a:d5:01:9b:92:40:6b:a0:77:
         ce:7b:8b:3b:f0:66:cb:f4:3e:30:6b:0f:ce:42:d0:44:8d:7e:
         e8:91:c4:10:99:24:78:0a:13:81:af:43:05:e8:e3:88:4d:a5:
         32:37:3a:2e:fd:19:6d:ac:d9:4f:3b:7d:d0:67:8f:54:54:57:
         ca:52:65:ea:bf:21:15:14:12:d8:20:4e:d7:44:3a:28:ca:6b:
         73:05:f4:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:43:16 2025 by rpki-client