Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa
File:                     1f7df69e-2e19-3974-9512-ae87190b53aa.roa (raw, json)
Hash identifier:          MH6QnwAN2tE3Afr9reHYbgBlBgdZEK6yim4Ca74xLec=
Subject key identifier:   0C:E4:9E:13:E3:87:C6:2A:E6:9C:72:82:FF:0B:EA:68:29:2D:98:5D
Certificate issuer:       /CN=7d6bea32-db4c-4326-93a0-713364b8aa44
Certificate serial:       010D0C9F4328584987AB5B5AEA126E393425EFA0
Authority key identifier: D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa
Signing time:             Tue 15 Apr 2025 03:13:13 +0000
ROA not before:           Tue 15 Apr 2025 03:13:13 +0000
ROA not after:            Mon 14 Jul 2025 03:13:13 +0000
asID:                     22351
IP address blocks:        216.250.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:ab:5b:5a:ea:12:6e:39:34:25:ef:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d6bea32-db4c-4326-93a0-713364b8aa44
        Validity
            Not Before: Apr 15 03:13:13 2025 GMT
            Not After : Jul 14 03:13:13 2025 GMT
        Subject: CN=25399d18-8de0-4f70-98b1-fd8fd8027709
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:89:3c:94:bd:22:64:48:4e:54:27:15:3a:c7:
                    d3:6e:c3:40:d1:ab:5f:8f:a5:9f:3a:77:15:f6:1e:
                    99:7f:34:65:87:3b:d4:0e:81:7c:c8:18:58:72:a5:
                    7f:5c:89:ae:ab:b4:26:00:ca:cb:f8:69:a0:02:b1:
                    f4:ad:e4:c4:ad:98:98:75:c9:d8:74:3d:69:d7:31:
                    42:ce:f9:f2:3f:ec:ee:18:81:4c:9a:b3:e5:b3:2a:
                    b7:a0:56:6d:c7:8d:a0:6d:dc:a9:12:8b:67:ef:74:
                    c1:74:73:05:71:1c:08:c5:59:18:65:ec:82:01:58:
                    05:0c:27:44:28:ba:cf:df:3d:8a:49:cd:70:67:3a:
                    74:1a:22:07:7c:a5:5d:48:6f:8f:1b:6d:74:d0:7f:
                    b2:0f:5f:ba:b5:fb:3d:2a:8b:11:ba:91:2c:06:02:
                    c1:ff:f9:31:1d:30:65:0e:aa:72:22:ba:39:ad:da:
                    31:a2:2d:23:22:74:4f:f9:8e:d0:ee:e9:3c:f7:d1:
                    8c:81:44:d4:89:23:4f:3c:f9:f0:43:86:7f:2f:a9:
                    4a:0f:4a:b4:49:55:5b:1d:b5:b3:81:2c:75:35:95:
                    23:c1:45:90:3f:76:03:da:91:63:bd:9d:86:e6:63:
                    00:d2:31:3c:32:bd:7f:7f:2e:c5:3d:90:ea:b9:97:
                    e5:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:E4:9E:13:E3:87:C6:2A:E6:9C:72:82:FF:0B:EA:68:29:2D:98:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/1f7df69e-2e19-3974-9512-ae87190b53aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44/7d6bea32-db4c-4326-93a0-713364b8aa44.crl

            X509v3 Authority Key Identifier:
                keyid:D7:7B:C2:7B:DA:37:35:F7:6C:BF:19:78:70:3A:30:39:25:88:72:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7d6bea32-db4c-4326-93a0-713364b8aa44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:2f:88:d3:dd:d6:a1:03:0c:e5:e1:72:cb:15:58:f6:bd:54:
         cd:fc:4d:65:8d:02:fa:4e:89:d6:ab:08:48:16:38:9c:3d:3c:
         8b:3a:61:40:6e:1c:52:c3:d9:2a:ad:1a:b9:24:af:14:18:ae:
         c3:c6:43:b6:52:6f:9e:99:8f:f0:c5:13:6e:4f:ef:db:4d:ed:
         86:c7:31:e6:08:80:96:e9:31:1c:cb:c0:08:54:47:5d:fb:f8:
         5c:a3:85:f1:2a:ba:08:7f:ea:04:2e:a9:28:7e:3f:74:de:9b:
         22:2f:50:3c:e6:98:b9:5f:5f:59:53:b0:46:ec:89:ec:1d:a9:
         58:5f:e9:08:17:ec:4f:41:bd:91:ef:6a:f0:33:98:51:e8:47:
         1c:0c:ea:bd:5e:94:83:fe:8e:16:3e:cb:96:c0:b5:ea:61:24:
         da:cb:62:69:a6:1f:e4:64:02:f6:f7:ce:17:4b:b3:6c:50:2c:
         9b:46:39:b0:40:43:07:f1:ad:7d:d7:11:b8:66:e8:29:09:cd:
         94:9c:0c:3b:50:27:ec:d4:7d:ba:ea:1f:eb:1b:78:fb:65:05:
         81:e2:80:87:b8:4c:25:20:46:5f:b9:bb:4d:35:01:8a:0d:30:
         c8:8d:88:e5:33:86:53:67:cc:63:d6:93:18:f8:6b:93:80:a1:
         46:4c:ff:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 04:57:11 2025 by rpki-client