Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e0005002-3202-3df6-8900-dc2c2805b4c1.roa
File:                     e0005002-3202-3df6-8900-dc2c2805b4c1.roa (raw, json)
Hash identifier:          iNNaugAJQgCt/Ej4BHJXKwgsvICvZ6LA5jRHOPJyugg=
Subject key identifier:   10:B2:0D:22:34:25:B6:2C:3E:4A:A2:F7:51:F8:54:1E:8B:3E:FA:FE
Certificate issuer:       /CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
Certificate serial:       010D0C9F43285849D85FA11E411EFA7B8514B530
Authority key identifier: 7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e0005002-3202-3df6-8900-dc2c2805b4c1.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14773
IP address blocks:        206.82.24.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:a1:1e:41:1e:fa:7b:85:14:b5:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f767ea16-72b4-402a-9b2f-7583fe390bb7
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=eede1ccc-0926-4408-86bf-e55888389924
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:db:fe:41:cc:91:77:76:16:3f:47:77:c9:
                    5f:d9:e8:2b:81:5a:bc:f9:65:4c:6d:c5:09:c6:a8:
                    4d:e0:93:7a:de:46:85:d9:f0:0c:be:d0:3a:b4:53:
                    61:94:0a:7e:92:87:3b:23:ae:1f:cd:f3:60:21:0c:
                    9a:da:87:6f:e4:b7:44:f2:52:89:6f:61:56:80:55:
                    c7:f7:33:e1:33:64:90:1d:d7:2c:bc:78:0b:45:7e:
                    27:2f:14:c8:26:88:55:27:4e:8a:fc:2d:d0:b9:5f:
                    45:f7:68:93:3f:ff:b7:22:1c:f2:dc:cc:3c:32:0c:
                    3a:5f:e7:57:a8:95:8c:e3:23:f3:0b:18:54:3b:c2:
                    69:f7:55:1b:82:b8:62:52:c4:f2:a0:46:29:10:39:
                    70:43:39:1b:3f:46:48:33:59:f5:81:6a:57:da:c3:
                    ee:9c:2b:56:d7:23:28:e8:05:5b:0b:fa:35:f5:e3:
                    e6:42:d0:fe:2c:53:eb:89:c2:ff:a4:62:c8:3b:8c:
                    38:c3:1e:3c:9b:09:af:a8:9b:94:d2:cb:94:24:c1:
                    9f:f4:3e:b3:71:ef:42:77:60:26:c2:28:10:bd:52:
                    6d:41:6a:00:84:4b:7d:56:de:dd:89:d8:a4:e5:7b:
                    9b:73:cd:2f:97:cb:1d:ec:dc:02:ed:bf:7b:1b:93:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:B2:0D:22:34:25:B6:2C:3E:4A:A2:F7:51:F8:54:1E:8B:3E:FA:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/e0005002-3202-3df6-8900-dc2c2805b4c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7/f767ea16-72b4-402a-9b2f-7583fe390bb7.crl

            X509v3 Authority Key Identifier:
                keyid:7A:C6:2E:73:FB:82:27:31:62:5F:C0:8E:76:FB:20:55:A6:05:B9:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f767ea16-72b4-402a-9b2f-7583fe390bb7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.24.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:aa:39:5d:3b:8c:dc:83:6a:dd:88:b4:6b:09:d1:52:d1:b8:
         fd:00:26:7a:f6:a5:04:3d:6f:5c:87:1d:dc:12:5b:cc:9e:0a:
         2e:b0:ba:7c:c7:54:85:ad:63:06:da:77:37:db:dc:99:89:a2:
         ac:b0:8d:a1:38:6b:16:bc:e9:d7:44:fd:e5:81:e8:de:27:04:
         e6:79:e5:f0:9b:4e:92:18:fa:83:b4:83:b3:b7:6a:d4:25:8c:
         83:46:3a:31:d3:5a:9e:ed:fe:bf:32:fd:bc:c8:57:79:3b:f3:
         90:87:ed:04:03:c5:cd:00:4d:e4:c9:fb:77:34:78:d9:f4:ff:
         8a:ae:e0:fd:89:31:c6:a4:c4:95:a9:27:e2:fc:80:69:1a:5d:
         9e:66:93:69:be:cc:1f:a9:a8:30:8d:ac:a2:d2:76:8b:84:d4:
         bf:88:e2:75:13:24:ce:ed:4b:ed:21:75:a5:9e:8a:2a:46:d7:
         64:7c:4f:3b:15:b0:9f:e2:94:43:d6:c9:b0:db:08:26:ae:99:
         b5:a6:d6:18:c2:0a:54:b1:f0:70:26:b3:76:5d:a2:ac:79:2a:
         0d:22:76:4d:c9:e4:48:50:a6:cd:f9:f5:70:2a:27:56:84:a6:
         97:37:d7:1b:67:93:e1:b4:e4:d4:5d:95:12:67:a9:4e:d3:e9:
         0c:d6:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 05:58:19 2025 by rpki-client