Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
File:                     b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa (raw, json)
Hash identifier:          LZsfYE51VIlYv+CxlIVGPu2pzOm8nVqO5dP0AgXGYG8=
Subject key identifier:   6C:F7:FE:DE:16:85:5B:1A:94:F8:6A:B9:EC:84:9D:57:76:0B:F3:20
Certificate issuer:       /CN=efead3cb-1d38-407f-ba06-8e276b067238
Certificate serial:       010D0C9F43285849C4D4B59E208740BB28EF9000
Authority key identifier: 34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa
Signing time:             Wed 07 May 2025 01:00:46 +0000
ROA not before:           Wed 07 May 2025 01:00:46 +0000
ROA not after:            Tue 05 Aug 2025 01:00:46 +0000
asID:                     14618
IP address blocks:        216.238.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c4:d4:b5:9e:20:87:40:bb:28:ef:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=efead3cb-1d38-407f-ba06-8e276b067238
        Validity
            Not Before: May  7 01:00:46 2025 GMT
            Not After : Aug  5 01:00:46 2025 GMT
        Subject: CN=503262fb-a3d5-453a-bed5-bda88b6bc7af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a4:a4:00:25:df:1b:cc:11:59:a7:ea:d5:24:
                    67:cd:93:32:ab:c4:70:81:7d:22:4c:b3:ca:4a:70:
                    9a:7f:48:78:9c:6c:c4:b4:95:8f:bf:17:5b:61:50:
                    97:ff:2e:e0:7e:3a:b3:f2:a6:8c:f4:a8:9f:f7:84:
                    b8:22:48:f5:de:4c:ea:4b:cb:89:23:ed:e6:26:9e:
                    dd:e0:b4:b0:d8:c3:a5:16:29:3c:65:f0:2d:dc:a7:
                    96:fc:82:04:42:a6:7f:33:5f:68:23:0b:97:50:fe:
                    9c:06:72:f3:41:8b:c8:8e:ac:de:cc:1f:6b:47:b5:
                    52:60:3f:1f:e9:a0:01:80:5c:29:2c:fa:49:46:59:
                    9d:cf:b0:85:57:7a:c6:a4:8d:8e:d9:1b:83:03:ae:
                    89:de:ca:c0:81:09:94:c9:26:f0:02:2a:77:74:83:
                    16:a5:3d:36:5f:23:ff:fc:7a:3e:2f:87:bb:10:6d:
                    72:b0:ef:a7:df:0c:67:00:7b:8a:52:e6:e4:be:95:
                    d8:12:ec:d9:30:d3:3b:29:ed:5e:18:b1:d6:19:b7:
                    a7:a2:f5:8e:a1:29:41:e2:f4:b0:bb:55:8b:4a:b8:
                    d9:66:35:76:45:d1:49:1f:17:cc:e8:07:f8:45:b2:
                    3f:a7:f3:ee:a2:96:89:f1:2d:b2:f2:e5:d4:48:2a:
                    cb:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:F7:FE:DE:16:85:5B:1A:94:F8:6A:B9:EC:84:9D:57:76:0B:F3:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/b2ccde77-91d2-3aa3-aa36-abab30730a8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238/efead3cb-1d38-407f-ba06-8e276b067238.crl

            X509v3 Authority Key Identifier:
                keyid:34:F9:DA:8D:CD:DF:5F:80:A2:55:F5:F6:68:8B:4F:47:20:C1:03:D2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/efead3cb-1d38-407f-ba06-8e276b067238.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.238.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:81:65:d3:0d:c2:f5:cd:3b:e7:69:21:8e:c4:33:12:20:0a:
         77:38:f0:53:47:da:a9:a6:f1:d8:60:36:13:83:a4:31:69:83:
         54:b4:e5:8a:6f:18:63:fe:8a:1b:86:7f:b6:37:8b:04:4b:fe:
         dd:4f:a0:42:a5:72:42:71:70:a4:fe:1f:07:93:5a:4c:81:55:
         f8:93:e9:f9:a1:1c:f3:49:30:69:a1:3f:8a:0c:73:65:87:e3:
         0e:db:b4:38:f3:e4:f2:f0:71:f8:31:87:34:52:14:58:d1:2b:
         0e:b7:0e:1b:3a:92:9d:c5:1e:b2:09:bd:3b:29:a4:6f:72:f9:
         80:c8:43:b5:5b:d0:c9:eb:7e:8e:4d:59:83:2b:8f:89:d9:9d:
         d3:d9:c0:89:11:e2:1f:7c:2f:6c:0d:91:42:6e:0b:3d:4c:6c:
         1c:d3:13:58:68:c5:57:bd:81:6e:b9:83:af:d7:7d:bf:19:a7:
         78:80:39:1d:8b:9a:f2:4d:f3:f0:0a:fa:9e:49:96:53:3a:55:
         d5:b7:27:96:1c:5e:45:4d:c1:41:fb:f4:e6:36:98:65:28:6b:
         97:fb:51:f8:7d:18:7a:fb:23:a2:bb:d4:0f:dc:65:20:ba:79:
         39:69:a1:35:76:75:c6:3b:29:39:47:49:b3:65:b3:d4:eb:d1:
         9c:0e:90:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 03:42:25 2025 by rpki-client