Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
File:                     4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa (raw, json)
Hash identifier:          d6XwPUTArWAtNVWtMWQiKJEK1jwbihTmCl7fxgmZy9Q=
Subject key identifier:   A0:95:59:23:83:74:8F:36:76:93:03:9F:4F:F7:CF:3E:B6:16:72:6F
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829DF1FB3FAEC7A4571DE00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:df:1f:b3:fa:ec:7a:45:71:de:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0e99d1df-7947-4bdd-b1c0-aa8b9a1325e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:c7:b9:67:46:3e:a2:43:c8:e7:e2:95:ab:
                    1c:64:e9:73:65:f3:ce:a6:53:41:04:94:07:af:35:
                    ca:b1:0b:c6:b0:b6:dc:be:1f:49:18:2b:38:be:0c:
                    87:dc:5a:a0:10:b7:da:6d:ef:f6:96:54:21:22:ec:
                    ab:17:ca:f9:e8:36:ee:46:1d:bf:50:50:d4:69:36:
                    57:23:c9:c4:61:fb:15:3a:e1:89:d5:e8:b6:11:9d:
                    85:e8:60:94:c1:76:de:67:aa:ad:a3:03:9d:5c:9f:
                    3a:df:7f:0c:be:06:5a:d3:2f:3c:8d:c4:a3:17:c7:
                    0c:cd:5f:5f:a4:11:3f:43:d6:3f:a5:7f:1c:15:8f:
                    fe:f9:f9:8e:9d:fb:e3:f3:f0:ba:26:2b:2a:ba:66:
                    8d:66:36:5f:53:e0:a1:2f:ce:c6:a4:6f:36:50:9f:
                    d7:13:a5:73:33:54:0b:80:b0:42:ca:00:9e:6f:1e:
                    f5:01:1e:1a:c1:34:91:8a:a2:e7:27:ad:d6:8e:ef:
                    6a:88:17:af:1f:51:c6:2e:12:91:0f:40:d9:01:3e:
                    8b:7d:4e:4f:04:bc:bd:74:05:e2:18:02:3d:c6:06:
                    56:35:da:08:b5:90:59:ff:d5:6c:d0:61:38:39:c6:
                    2e:b7:c7:58:70:8e:56:3a:cb:29:0e:c8:55:bc:a5:
                    04:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:95:59:23:83:74:8F:36:76:93:03:9F:4F:F7:CF:3E:B6:16:72:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/4ccb2694-7547-30b2-b02f-bb6fbe5bbfec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:89:07:d4:65:c5:86:cb:8a:72:e2:b3:6a:61:1d:ff:88:18:
         37:20:e7:b8:10:ef:6a:93:3f:11:66:0c:46:25:58:43:03:58:
         31:56:37:f0:bc:ee:db:51:58:b9:42:d3:06:ac:27:33:ac:8e:
         e0:40:39:d0:64:51:72:13:c7:00:1d:39:65:ed:d2:72:67:78:
         3f:74:b0:bb:1e:1a:6f:77:10:84:cf:1c:53:67:fe:ec:e4:42:
         11:80:a5:a4:83:e6:73:22:f5:a5:93:82:73:1c:89:2e:8e:53:
         f8:c2:bc:44:36:1e:ea:d0:0e:1e:ac:b5:12:0c:b4:bf:a8:a4:
         21:54:08:d6:8d:ee:71:00:cd:e0:34:a3:da:71:47:44:dc:f8:
         9e:62:02:ca:c3:ec:fd:48:82:ee:02:d0:8a:bf:e9:74:e8:ab:
         ff:e5:5f:13:34:84:4c:f4:94:72:20:4e:36:a9:c8:02:a6:6d:
         b6:8f:d9:d5:72:32:3b:34:4c:2e:43:4d:1c:1c:90:ae:2d:d1:
         6c:0a:40:13:82:18:54:50:39:2c:41:74:bb:6e:e0:b9:26:f6:
         f7:3c:8e:bf:fd:52:26:d4:48:cc:06:4c:d4:fc:10:d2:35:d7:
         20:5d:4e:2e:83:e9:ee:ac:68:e2:89:5a:62:28:5c:6f:49:de:
         85:05:c8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:11:56 2025 by rpki-client