Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ecec0da2-6390-3f49-b4d6-fd59f7349e30.roa
File:                     ecec0da2-6390-3f49-b4d6-fd59f7349e30.roa (raw, json)
Hash identifier:          lrNVENYmV4o+hKJCPUmryfpFtWtu2SzBDFa48v/YsL0=
Subject key identifier:   3D:26:44:EE:25:2A:CD:BF:04:34:74:F6:44:2B:4C:90:6C:A4:4B:43
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849912F2AB8ACDB5E9D52758500
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ecec0da2-6390-3f49-b4d6-fd59f7349e30.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     7861
IP address blocks:        209.91.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2a:b8:ac:db:5e:9d:52:75:85:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=c66e6e63-c45d-4407-afda-1981dcfcd5a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:e1:8a:9f:fa:00:37:0c:03:be:6c:b9:e2:
                    0c:15:c8:c4:c4:44:f0:f0:37:d6:d8:ea:86:3c:b9:
                    b0:2e:cd:b0:fd:83:8a:08:59:53:10:18:0c:98:65:
                    e5:60:8c:e0:8e:71:a7:f5:d0:80:c1:af:1a:9e:37:
                    b5:88:6f:bd:f3:da:ae:64:92:ed:92:da:41:29:40:
                    ec:75:40:3d:98:de:ff:e4:82:5c:e9:26:23:ad:c6:
                    90:54:b3:5a:dc:d5:a1:20:04:10:5f:61:90:bb:f2:
                    5b:7b:95:e7:0b:c0:af:dd:e1:93:dd:39:8f:8f:90:
                    e0:cf:1f:c6:09:27:03:ba:2f:d5:89:5d:f5:12:f4:
                    f6:9e:b7:a5:cc:40:b0:ea:f8:e1:aa:7a:1e:fc:51:
                    76:42:00:0a:0a:75:7e:b1:77:b8:4e:f3:73:41:de:
                    60:af:b0:b7:ab:f1:3d:5c:8e:d0:c6:3f:0b:38:a5:
                    20:60:24:1a:ee:ed:a7:f9:91:0d:06:40:b3:b3:f7:
                    24:e6:d7:da:1a:33:b9:8e:61:25:df:a9:ae:d6:fc:
                    47:a4:7f:c3:b4:b4:2f:69:a6:a1:b6:ec:09:9b:8f:
                    fb:96:56:d7:bd:63:18:fc:66:5c:83:1c:d8:8f:9d:
                    0a:0f:ee:03:3f:92:d5:82:43:18:68:55:42:1b:98:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:26:44:EE:25:2A:CD:BF:04:34:74:F6:44:2B:4C:90:6C:A4:4B:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/ecec0da2-6390-3f49-b4d6-fd59f7349e30.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.91.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:49:1b:a7:cd:dc:49:73:0f:b4:15:5c:4a:c4:4a:53:a8:f8:
         6b:de:5e:db:17:2a:8e:c2:8a:79:5d:e9:ef:17:9c:bc:26:9d:
         f7:c8:01:82:75:ba:3b:e9:75:d7:2b:d1:6d:a5:d1:ee:bd:f8:
         51:cd:f3:b4:bd:aa:c8:3c:70:db:30:80:1d:92:9b:95:bc:a3:
         7d:22:65:07:3a:ad:74:18:eb:f3:76:03:d8:88:ab:33:ff:e8:
         c9:86:33:8e:4f:14:8d:96:81:ad:e8:56:a5:49:63:3f:41:9e:
         9a:9f:50:1d:4d:08:3c:64:33:52:96:41:1a:47:18:e7:7b:b0:
         32:54:51:7d:a5:cf:51:04:6e:90:80:5a:1a:69:0c:40:60:03:
         cb:3c:ec:df:d4:af:72:33:cc:41:c5:f9:29:4f:e8:e1:e5:05:
         1b:11:d0:02:cc:53:83:ed:1f:10:17:e5:f0:5f:f8:b9:be:f0:
         85:61:08:93:1d:56:fb:ff:53:0c:dd:21:36:42:cd:16:f8:cd:
         63:74:5a:76:cb:4d:3b:7b:63:da:08:b0:95:13:c4:d5:53:fb:
         64:cd:4f:16:1f:80:1c:73:bf:88:3f:91:fd:ab:c9:af:3b:7e:
         ca:aa:fc:28:b1:aa:c2:a6:c9:63:19:08:02:91:2e:7f:0c:8e:
         03:54:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 01:41:07 2025 by rpki-client