Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa
File:                     ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa (raw, json)
Hash identifier:          VexY4Gw3CIB/is7mxSe34ZqqAB/7ysF0DCAnEr1Z7WE=
Subject key identifier:   0D:C2:07:CA:D9:A7:0F:9E:4E:12:BA:B2:2A:28:FA:6E:C8:F3:67:72
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F43285849C4D4BD6992D2B56B554C70C0
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        206.225.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:bd:69:92:d2:b5:6b:55:4c:70:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=0d1a328b-edd4-4d21-8e25-0cc79b075644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:5b:79:bc:92:3b:da:2a:e0:bc:c5:f8:36:
                    42:75:74:d5:27:1d:c9:73:b0:15:84:ae:e5:19:37:
                    ad:2c:21:d1:26:1e:95:db:77:e5:2d:98:0d:3b:cf:
                    9f:80:7b:1f:1e:0c:c7:20:bf:4a:c3:5f:a0:92:96:
                    a6:ff:ca:55:52:c0:81:2f:96:cf:55:3f:12:42:c8:
                    96:70:89:ff:46:0c:28:a8:5b:a1:16:c9:51:9a:34:
                    00:50:e6:82:9e:62:04:40:51:15:3e:b7:0a:c7:11:
                    67:54:a6:a6:a7:de:41:a2:4c:a4:42:8e:0b:1d:e4:
                    87:c7:2c:dd:b0:dc:87:1c:4b:e6:4a:e9:73:a4:4b:
                    3a:b9:3a:e9:bf:4c:bb:6f:ff:88:db:31:90:be:7f:
                    c3:c8:ec:cb:8c:8c:31:be:d9:5e:35:db:82:03:84:
                    ba:0b:0e:0d:41:cd:78:36:7a:78:1e:f6:42:ce:14:
                    75:d1:e3:1a:b5:51:75:2f:c7:a7:df:27:2d:c2:38:
                    69:d6:61:ee:6a:2a:a6:9e:54:65:f9:63:51:7a:6f:
                    6b:a0:73:1a:2d:a9:f3:0c:06:be:96:01:8b:5f:70:
                    76:b7:64:e8:6d:49:3b:b5:5d:09:90:ae:6b:25:62:
                    b0:c6:b0:20:95:95:ac:bf:d0:03:22:f4:f3:71:4e:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:C2:07:CA:D9:A7:0F:9E:4E:12:BA:B2:2A:28:FA:6E:C8:F3:67:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/ea4b1d17-c3ad-3bd4-9481-c84058c46769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.200.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:67:ac:90:69:4f:4c:d3:d4:d6:43:5b:3b:91:90:fb:64:33:
         b7:6b:1e:81:29:e0:53:8f:21:66:a5:61:36:8a:1b:85:65:9b:
         61:8d:de:25:3b:07:c2:fd:79:8b:aa:44:49:8e:3b:a6:a0:0c:
         a7:e0:4f:c1:23:4a:cb:49:f6:8d:e9:61:7b:44:c1:30:46:ce:
         f2:41:e5:97:23:df:4b:cd:12:1a:0f:be:3d:c4:c8:53:e6:11:
         bf:37:fe:f7:5d:59:dc:87:86:af:70:6d:2d:bc:9c:51:3c:75:
         1c:0f:14:b3:eb:cd:84:cd:90:3f:9f:53:21:2f:fd:6a:89:45:
         95:27:00:2d:fb:4c:8d:a1:a5:8d:34:43:06:dc:b4:ff:e0:4a:
         30:83:a6:76:a6:92:b6:6c:e0:c4:68:2c:18:31:48:8c:fd:db:
         16:24:e6:4e:61:3e:4a:84:63:2e:a4:3d:8b:e1:83:dd:57:40:
         75:13:c5:f8:6f:8f:09:d7:e2:57:93:ca:32:48:83:2b:dc:e3:
         45:f9:52:53:65:04:67:88:b0:76:6b:a7:d6:ec:ac:65:3e:64:
         80:aa:5a:64:78:8e:fb:76:14:e7:69:a6:42:11:af:27:e6:2d:
         ff:1f:43:e9:3b:ed:a5:61:0c:42:f6:4a:1a:7e:62:fc:12:c5:
         41:ad:6a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 12:41:26 2025 by rpki-client