Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
File:                     a810c427-52bf-3069-889e-49d7c3d307dd.roa (raw, json)
Hash identifier:          hKhHumDm5sQa9j5SN1pwxB8rHJEB27Ntua26n5TaMes=
Subject key identifier:   26:EB:2E:7A:F6:77:20:A1:7E:42:5A:69:47:9C:B5:CD:AB:F8:89:BB
Certificate issuer:       /CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
Certificate serial:       010D0C9F432858498E648E7DCFDC0C728662F1E0
Authority key identifier: B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     8075
IP address blocks:        204.209.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 03:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:8e:7d:cf:dc:0c:72:86:62:f1:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=601d8cf8-4cca-4295-8f3b-916dcd50b673
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=42684240-8380-4e9b-9512-5f50fbf3532d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:a0:dc:55:81:e3:63:6f:96:f7:c2:08:42:39:
                    11:ce:3f:da:e4:8c:7d:b6:bc:fe:f4:dc:d9:30:b6:
                    bd:80:bf:0d:56:df:6b:ff:ea:01:4d:08:60:1b:b8:
                    9f:b1:84:e9:1b:9e:42:4c:1d:f0:bf:5e:9a:43:d4:
                    7d:98:f2:3f:42:56:72:f1:7b:82:10:42:2c:2d:40:
                    10:1d:a1:25:7b:cd:91:a6:03:4b:7c:d5:30:bd:f2:
                    f7:c7:02:1f:a6:aa:cc:a7:2d:39:a0:59:3d:b9:5c:
                    f8:83:1a:1c:d1:b9:26:d4:65:68:e1:7e:8d:a8:a3:
                    02:cd:62:99:0d:b1:68:04:50:3b:fa:3d:31:c0:30:
                    76:5e:94:9c:2f:2a:b3:ef:5c:d7:47:c3:3d:48:1c:
                    7c:bf:5c:61:58:2b:79:f2:03:81:a9:63:83:f3:0c:
                    37:dc:62:8c:e9:4d:b3:7d:50:f3:b3:78:3e:d0:c8:
                    21:08:25:42:5a:7f:f1:ca:08:91:81:e9:24:64:c7:
                    12:67:da:05:6b:12:2f:0b:24:30:b6:c3:19:b9:3c:
                    01:9a:4d:4d:8b:af:30:2a:98:70:bb:8c:21:ab:12:
                    cf:6c:fe:c2:57:3f:02:3f:18:5a:7e:63:6f:42:38:
                    3a:db:53:5f:ac:9a:64:d3:85:9c:9a:4b:76:a4:d2:
                    5b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EB:2E:7A:F6:77:20:A1:7E:42:5A:69:47:9C:B5:CD:AB:F8:89:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/a810c427-52bf-3069-889e-49d7c3d307dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673/601d8cf8-4cca-4295-8f3b-916dcd50b673.crl

            X509v3 Authority Key Identifier:
                keyid:B5:FB:B9:75:42:D8:2F:0F:7D:61:6E:E3:77:A1:A1:ED:4D:F7:20:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/601d8cf8-4cca-4295-8f3b-916dcd50b673.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:47:25:69:a6:7a:20:6f:6b:81:a5:ee:a2:f8:fa:e6:23:00:
         66:bb:1a:39:ac:7c:44:11:2b:80:93:e9:01:f6:d8:b5:ce:a7:
         51:7f:a3:00:da:25:42:ca:03:a6:ae:76:24:6d:84:e6:8d:5a:
         ca:3d:4d:36:7b:ae:49:23:3a:b6:6a:80:ba:d3:1f:f1:a7:01:
         0d:01:45:42:1e:7e:0b:92:68:d7:a8:79:12:52:24:28:1b:bd:
         45:20:db:cf:c4:d2:e2:76:6d:79:eb:0a:be:c4:fa:42:2e:0d:
         87:75:38:cb:76:22:27:86:70:a3:00:8f:73:cd:b9:d9:6c:e2:
         c4:a4:ce:d4:84:ca:83:88:6f:29:50:32:16:77:2b:8a:f2:c2:
         0a:c4:c5:0d:c3:55:13:94:ea:e4:04:eb:e2:8b:1b:9b:df:72:
         d6:46:f5:2b:36:10:a1:6a:8c:77:a5:ec:a1:39:9d:9f:45:1e:
         c1:59:c3:45:bc:8b:71:1e:47:b6:02:26:fc:8d:b2:0e:5b:0c:
         6a:52:53:35:c2:c0:3c:a5:51:89:a8:98:72:4a:24:52:73:ce:
         6b:e6:50:72:11:06:4e:64:3b:9c:12:57:5a:75:67:48:0d:75:
         ec:cc:d2:b0:45:e7:98:7c:94:6f:02:20:4e:43:a8:bb:67:33:
         49:68:8c:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 07:33:43 2025 by rpki-client