Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a34141-516d-3d49-9c71-9659d03ad697.roa
File:                     f1a34141-516d-3d49-9c71-9659d03ad697.roa (raw, json)
Hash identifier:          My4Yi1zmCGd5UJqoSo/mXrU2AGn5LDJjSq5iMAqORVM=
Subject key identifier:   4B:2B:DC:4B:13:B8:D5:7C:C2:1E:CB:3F:64:A1:9B:E9:8E:25:AF:CC
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849B5C3FFB831249501147A1F00
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a34141-516d-3d49-9c71-9659d03ad697.roa
Signing time:             Thu 01 May 2025 15:30:03 +0000
ROA not before:           Thu 01 May 2025 15:30:03 +0000
ROA not after:            Wed 30 Jul 2025 15:30:03 +0000
asID:                     376
IP address blocks:        206.167.124.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:c3:ff:b8:31:24:95:01:14:7a:1f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May  1 15:30:03 2025 GMT
            Not After : Jul 30 15:30:03 2025 GMT
        Subject: CN=2c8fe892-6f74-4736-863b-8e8bf1aae1c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:46:a9:05:70:96:52:1a:c5:07:bc:39:d0:8b:
                    bf:5f:93:56:76:77:90:a1:7b:67:9a:e4:ef:65:60:
                    19:c4:9b:e1:1f:96:a2:db:62:83:dd:d3:af:f1:db:
                    71:50:7d:7d:e5:19:8c:56:22:22:79:8f:36:6d:17:
                    07:bd:47:d7:bd:9c:02:d6:c9:a1:3b:82:c1:f8:b2:
                    88:54:0c:58:8d:2d:aa:8a:9a:f9:d3:19:aa:23:2e:
                    ed:6a:9d:65:b3:a8:17:8d:db:86:43:e7:a7:64:f5:
                    f5:46:5c:b4:95:cc:3f:6d:4b:d8:a6:81:ee:d1:34:
                    68:1c:fc:00:79:6f:de:fd:7c:65:84:50:31:ff:31:
                    c9:36:af:69:61:8f:b5:22:ea:b8:3e:75:db:6a:52:
                    34:df:56:92:90:73:c4:b7:0b:f9:ef:ba:f5:34:70:
                    05:cb:03:7d:b8:39:20:9a:16:b0:a4:b3:79:eb:d8:
                    c3:c3:bc:d6:18:8b:86:d3:a2:e2:2a:e9:45:b7:d7:
                    bc:05:e9:3c:13:67:2a:35:28:d1:ac:fa:57:f6:c9:
                    bf:30:d2:19:7e:84:19:20:0e:bf:0e:1b:0f:79:d7:
                    ab:9f:bc:1e:7c:8c:d5:cf:47:60:70:a4:7d:e5:93:
                    38:65:1f:ca:c1:fe:4b:79:a2:77:b0:db:12:f2:23:
                    5c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:2B:DC:4B:13:B8:D5:7C:C2:1E:CB:3F:64:A1:9B:E9:8E:25:AF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/f1a34141-516d-3d49-9c71-9659d03ad697.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.124.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:90:b7:53:26:14:1d:34:43:06:5f:05:3f:4a:0c:b5:ae:07:
         1e:7b:61:12:0d:75:6a:57:f5:91:a1:82:5f:eb:14:f0:5d:33:
         22:a5:86:02:23:d7:e9:3f:22:b9:83:d0:1e:e0:7b:4d:54:5c:
         f4:56:87:2d:d2:b0:b2:e9:48:8a:de:a0:59:9a:22:85:cd:fd:
         1a:96:39:b0:10:ff:82:aa:aa:d9:a9:dd:a4:e9:f6:61:7d:bd:
         0c:1d:01:72:c6:d5:10:a8:94:94:a5:d7:05:0a:f9:fd:fb:52:
         ba:c3:4e:2e:0b:65:0b:be:61:10:fd:17:74:be:c0:66:3e:db:
         cf:a5:8c:67:47:bf:d3:46:56:82:35:da:8f:be:fe:39:b8:51:
         87:de:4f:91:a1:09:34:93:16:aa:79:18:7f:e6:85:cb:36:f9:
         3a:39:aa:1b:7d:46:c3:00:64:14:7c:f1:e9:1f:08:56:c8:0b:
         f3:d5:c8:db:c1:9e:ad:3c:21:34:dd:54:d8:31:21:53:ea:9a:
         a3:95:23:f9:ab:9f:f4:1f:4f:20:b3:86:95:ec:59:48:6b:68:
         e2:8c:46:8a:63:f0:c3:bf:b0:12:f9:94:b0:ca:69:e5:6a:b2:
         d6:f6:6a:ee:34:b7:37:9a:b1:83:1c:b9:f1:27:5c:9b:33:5b:
         a0:c6:1e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 07:56:57 2025 by rpki-client