Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
File:                     95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa (raw, json)
Hash identifier:          9cyDTD5vzF2W7TXiM2AXiFWL3+tS0AQutOxO1gXRb60=
Subject key identifier:   28:F6:DB:05:8C:83:59:E7:22:49:42:2A:B5:37:CC:A5:3A:11:73:3A
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499DBF25E092B11B114C54FAC0
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa
Signing time:             Wed 23 Apr 2025 01:00:46 +0000
ROA not before:           Wed 23 Apr 2025 01:00:46 +0000
ROA not after:            Tue 22 Jul 2025 01:00:46 +0000
asID:                     852
IP address blocks:        209.29.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9d:bf:25:e0:92:b1:1b:11:4c:54:fa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 23 01:00:46 2025 GMT
            Not After : Jul 22 01:00:46 2025 GMT
        Subject: CN=790ca10c-5aee-41e1-aa63-02a861d68723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e7:2a:d4:c1:42:b2:ee:26:9e:73:81:dc:cc:
                    d9:dc:05:c2:f7:0c:b8:28:37:8b:80:63:3c:64:af:
                    cb:ce:91:94:2f:9e:a8:90:c6:e3:36:ef:d6:f1:f7:
                    70:36:07:56:18:17:18:bb:6b:dd:75:8e:a8:e2:3f:
                    5c:64:61:3c:09:97:b3:74:11:af:70:60:1e:7c:dd:
                    53:40:21:41:02:0a:25:1b:7d:0c:f7:0f:c2:3c:99:
                    5c:a7:90:ec:0f:53:79:62:e6:0a:1e:07:68:df:27:
                    97:0c:e0:5f:eb:7c:92:15:56:f9:76:de:2f:bb:aa:
                    9d:23:8e:e3:a3:c6:e7:63:7a:25:fc:da:b7:dc:2d:
                    f6:9e:7d:6e:93:26:a4:f3:dc:c8:fb:c4:33:97:26:
                    4a:36:a4:6a:b5:07:44:6d:fb:cf:21:0e:82:ba:98:
                    b6:16:da:5a:cf:ba:bf:fe:ef:f1:14:f0:14:18:82:
                    8c:7f:2d:45:bc:d0:c5:1a:df:04:97:f9:e3:0a:56:
                    d9:7f:41:4e:57:9e:06:36:42:9c:f5:c2:2a:cc:8b:
                    29:fb:86:29:e7:db:e2:d3:93:95:23:f3:f8:61:71:
                    f2:d8:75:21:0a:5c:b0:aa:42:1c:5d:d4:87:3c:70:
                    6d:29:7b:3f:e2:2f:dd:ae:03:0c:f9:e4:a0:3c:03:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F6:DB:05:8C:83:59:E7:22:49:42:2A:B5:37:CC:A5:3A:11:73:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/95f0f53f-dfc5-331e-a852-7cfd5d8dfdef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.29.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:19:23:51:72:f2:d3:de:cb:89:20:6c:25:d4:eb:ba:89:4e:
         8d:b2:4e:06:89:55:17:0d:41:f5:43:1f:4a:06:f8:3c:b3:98:
         1f:a2:7c:b2:83:ef:86:47:7d:11:7a:b5:b0:ff:34:54:b4:4c:
         01:71:48:66:9f:dd:bc:2d:2c:d4:ff:84:65:dc:dd:43:05:cd:
         88:16:0f:07:bf:39:4b:e6:aa:ac:3e:e4:d3:52:a3:06:a3:26:
         47:a4:f0:36:ce:e5:8f:5c:4d:a2:e5:f8:99:bc:64:05:a7:75:
         97:13:5d:e9:57:9e:b1:1f:d8:83:74:56:21:8f:b0:60:03:83:
         89:81:f2:92:6e:00:86:b0:cf:d1:e5:ec:db:63:06:c9:1a:57:
         a5:d7:b9:c6:37:dc:88:d4:d6:2d:72:b5:65:4d:82:ae:f7:4a:
         62:39:7c:7e:f2:32:20:06:95:75:e3:79:bd:13:95:2e:c8:a0:
         77:c8:8f:71:af:7e:40:c7:44:ee:52:41:bd:43:89:42:91:5b:
         54:ad:a5:6f:d6:40:66:a0:1c:44:e8:91:d7:2d:ba:61:d1:f1:
         a3:c2:60:a8:e3:8c:c4:da:39:63:60:e7:f6:5b:1f:05:dd:40:
         c0:c6:cc:20:5b:91:a6:ef:ac:e5:45:5a:4d:5d:c8:ba:00:c8:
         11:09:d6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 03:15:30 2025 by rpki-client