Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa
File:                     1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa (raw, json)
Hash identifier:          WfrqtEAfSJXW1Rbyx57yf2AUFFwxCcPd3emQfPfolmI=
Subject key identifier:   9A:E0:03:5E:3A:7F:BB:60:71:99:AA:81:62:03:69:9C:6F:E0:F4:7C
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584987AAB3B3AE3FBCDAC805E8D4
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa
Signing time:             Tue 15 Apr 2025 03:11:54 +0000
ROA not before:           Tue 15 Apr 2025 03:11:54 +0000
ROA not after:            Mon 14 Jul 2025 03:11:54 +0000
asID:                     22351
IP address blocks:        216.250.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:aa:b3:b3:ae:3f:bc:da:c8:05:e8:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Apr 15 03:11:54 2025 GMT
            Not After : Jul 14 03:11:54 2025 GMT
        Subject: CN=502e1a07-2b53-4e4a-8cea-2656094037d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f7:7a:c0:bf:e9:78:71:67:0c:d7:21:21:2c:
                    ad:81:ef:c1:1b:4c:28:2e:8a:43:04:fc:e0:9f:ec:
                    bf:8a:e0:33:46:a4:dc:22:87:05:fe:31:82:b9:c2:
                    64:1f:09:3c:47:96:6f:14:e6:ab:58:e6:c2:97:98:
                    63:ca:5d:2b:73:e5:9d:c5:62:20:a7:b1:2d:c8:04:
                    b4:e4:ed:de:8b:07:62:53:4f:94:4e:3b:a4:aa:dc:
                    b7:be:c1:ff:b0:bf:22:14:92:7e:56:29:94:c6:c0:
                    a2:e4:ca:3a:a0:e4:86:04:e4:c9:07:bc:7f:01:da:
                    a9:e7:af:38:6e:a6:53:b5:49:e3:a0:bc:75:51:ef:
                    f6:26:12:75:62:95:e5:7f:a4:fd:72:7f:99:d9:ff:
                    d4:85:f2:b6:94:86:75:47:a0:0b:4d:f6:a1:26:9d:
                    70:15:58:0b:9b:4e:22:47:a6:04:0a:60:66:24:50:
                    c9:e1:7f:da:cf:b7:a9:63:63:72:ad:64:fc:79:6a:
                    97:68:01:df:8d:f9:bb:f3:83:09:64:3b:61:63:7d:
                    0c:d7:db:b2:b3:ff:94:66:2e:87:94:18:c9:4d:21:
                    2c:b4:a3:49:db:6c:98:a3:5a:44:aa:1b:51:eb:ab:
                    e7:27:e2:5c:be:ad:80:f9:4b:1f:41:94:12:b6:43:
                    db:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:E0:03:5E:3A:7F:BB:60:71:99:AA:81:62:03:69:9C:6F:E0:F4:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1420f73f-ea1d-3fb3-8575-aba2c9823fb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f8:13:49:ea:66:be:d7:d0:46:ff:90:06:fa:fa:0c:55:a7:
         75:8a:37:e4:23:98:59:5d:4d:d1:d0:1c:04:9b:52:a5:1b:db:
         aa:0b:05:02:c2:54:dd:65:4f:92:86:b6:2e:92:e7:4b:e9:65:
         b6:6e:5e:60:af:91:ae:1e:bc:53:5c:90:f0:bb:59:05:32:90:
         bf:57:66:d6:94:bf:e8:ee:cf:dc:7c:e1:5b:b6:96:0a:ee:60:
         db:c5:71:8c:e7:b5:98:9e:77:a9:e6:51:c1:31:30:58:13:b1:
         24:5d:01:8e:14:b6:6d:68:7d:72:f3:89:02:e5:e3:59:89:63:
         ed:d1:c6:7f:cc:c9:88:20:74:99:28:bc:30:d8:9b:24:a8:f5:
         b4:65:b0:36:d0:7f:a4:14:60:0f:aa:0a:62:56:e0:39:ea:82:
         a3:1b:8d:26:cf:0f:e4:95:1f:bd:9c:c1:e0:89:68:a7:d2:19:
         ef:e8:4c:b5:c3:36:57:bc:65:d5:ce:57:18:11:24:d2:14:08:
         b5:77:33:24:90:6e:e9:4d:f2:79:50:eb:97:5d:bd:cb:23:27:
         15:bc:02:d1:4e:89:85:5e:20:ca:03:b7:18:bb:89:52:70:d9:
         db:42:d9:78:60:5f:6c:65:bd:96:c0:c2:4f:af:f5:9b:55:7b:
         d8:40:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 08:05:54 2025 by rpki-client