Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa
File:                     c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa (raw, json)
Hash identifier:          yToKQQOSCN9HwcCsB4r55Ak/1ECebNsWmzI+rHboa8w=
Subject key identifier:   D1:63:71:7C:3F:F3:B2:A1:18:4B:2D:62:33:F5:FE:77:99:B2:94:CE
Certificate issuer:       /CN=69a80da8-69e1-4580-ab63-1ce23bea895b
Certificate serial:       010D0C9F43285849E2251870E454A15A4A67E900
Authority key identifier: 86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     394846
IP address blocks:        24.224.234.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:18:70:e4:54:a1:5a:4a:67:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69a80da8-69e1-4580-ab63-1ce23bea895b
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=6ce60616-b1f5-4e72-83a6-c3ebd797c753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:fc:2e:30:0e:f6:45:a2:94:d6:04:6b:2a:2e:
                    27:ae:dd:31:96:3c:8d:74:a0:0f:6e:b2:5c:e8:96:
                    11:16:ee:7d:c8:74:9d:f0:18:f0:d6:d2:a1:62:f1:
                    89:21:52:54:5c:a4:f3:14:73:0d:df:65:38:3a:b5:
                    25:c3:28:f5:b8:4f:6f:57:ed:eb:5f:48:3d:88:65:
                    f1:e3:34:6a:8c:2f:9e:14:b0:e0:94:9a:e9:38:9b:
                    f2:7c:b1:ec:5b:46:ff:38:19:05:46:1d:ed:cc:45:
                    3c:16:07:0e:62:f0:a1:b4:da:35:4e:f0:f6:e1:3a:
                    1f:83:ea:8a:cd:81:7b:ad:e8:1c:9b:9c:05:35:d8:
                    77:1d:56:14:cc:da:c3:16:12:ba:6a:0a:41:13:88:
                    fd:c6:cf:a5:78:ed:35:bc:5a:4a:2c:b5:70:cb:f3:
                    f6:25:72:e9:67:88:ac:9a:02:aa:8d:93:e3:6e:cb:
                    50:9d:cb:28:59:e6:25:51:47:26:e6:32:0a:4e:7b:
                    57:b6:3a:54:57:7f:b5:85:a4:2a:8d:9d:7b:7a:40:
                    87:a3:dd:dc:0f:9d:57:d8:4f:17:8e:f7:1c:99:7a:
                    be:ed:f5:31:9a:a2:ca:36:19:da:6d:32:53:3e:75:
                    36:fc:60:fa:8c:7a:f1:34:61:16:cf:01:a2:48:8c:
                    24:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:63:71:7C:3F:F3:B2:A1:18:4B:2D:62:33:F5:FE:77:99:B2:94:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/c9baf2d7-7ac4-3b1b-ac7f-cd2e140bf477.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b/69a80da8-69e1-4580-ab63-1ce23bea895b.crl

            X509v3 Authority Key Identifier:
                keyid:86:A8:81:DC:A6:07:54:56:6B:4E:A5:2C:D0:CD:61:52:EB:E9:1D:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/69a80da8-69e1-4580-ab63-1ce23bea895b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.224.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:91:87:b4:10:a2:0d:b1:17:1a:30:50:5e:db:c6:20:20:e3:
         91:bd:65:b0:92:3e:5e:17:15:52:51:57:c7:35:1f:1f:5c:4a:
         d4:aa:0f:87:62:54:fc:aa:9d:d2:ca:da:9f:bd:29:e9:2e:2a:
         29:15:e1:91:bb:20:31:fc:85:08:56:23:d2:1e:eb:4d:05:e3:
         9b:3a:37:e2:82:29:97:3d:66:80:f9:b0:b1:b5:3a:4a:58:80:
         df:74:ab:c4:73:7c:de:5a:87:be:24:7d:dd:f6:30:3b:12:d7:
         1f:30:50:63:9c:72:e8:77:e2:2b:37:ea:e8:5e:1f:83:45:4f:
         a6:c4:d5:8d:d4:9c:15:be:6f:05:9d:69:db:5a:30:32:f2:74:
         fc:92:8e:f3:b6:81:ce:1a:48:39:8f:94:8e:96:53:1a:f9:24:
         ce:85:ca:84:71:29:85:90:bf:75:26:83:2f:62:3b:6a:b7:72:
         e9:40:17:41:bc:9e:19:6c:53:26:3a:63:33:40:c2:67:7a:7e:
         48:7d:0b:f7:4b:12:4d:2b:40:db:3a:0f:6a:e0:86:46:1c:56:
         ec:13:90:2f:f6:6b:71:67:19:e6:be:c9:7b:fc:48:03:9e:5d:
         6d:4e:e5:6e:57:74:b4:da:f0:f0:9c:0b:b7:89:f5:35:5e:34:
         09:8c:db:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 11:03:45 2025 by rpki-client