Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa
File:                     b030074f-d5d6-32ed-98c1-cf2c636df036.roa (raw, json)
Hash identifier:          0Yy9ljBRPQnKPdgroaWvNB8PRmamaQhDZnaMfl6X2P0=
Subject key identifier:   A5:3C:40:99:59:AD:63:44:5F:D7:AD:F2:C6:0D:9C:48:B3:BF:4E:51
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F432858498339EF98DA44ADB6C4662840
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa
Signing time:             Sun 13 Apr 2025 13:01:01 +0000
ROA not before:           Sun 13 Apr 2025 13:01:01 +0000
ROA not after:            Sat 12 Jul 2025 13:01:01 +0000
asID:                     19437
IP address blocks:        206.162.252.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 07 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:ef:98:da:44:ad:b6:c4:66:28:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr 13 13:01:01 2025 GMT
            Not After : Jul 12 13:01:01 2025 GMT
        Subject: CN=acbb4981-4dcf-43af-a83c-f8b0a763f38a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4d:42:e7:bc:57:5d:5f:9e:1d:25:60:5c:89:
                    d2:01:38:1d:b1:d1:ab:01:17:a5:7d:ab:24:40:df:
                    65:bf:f3:3f:9b:ef:a3:b6:90:df:70:99:40:2c:59:
                    b2:5c:3a:3f:96:1e:50:a0:3e:43:b6:36:1c:e7:f3:
                    5c:2a:29:cf:03:92:c7:82:0e:9b:a5:ba:36:e4:86:
                    df:69:89:91:df:66:f3:3d:9a:b9:17:de:9c:56:8b:
                    12:8f:d2:85:ac:6c:55:fa:48:62:e4:75:f2:a0:ee:
                    e1:48:76:a1:4d:8a:35:08:f6:e6:6a:26:76:fe:e6:
                    1c:3e:8a:24:eb:b5:75:09:0d:ad:73:97:e9:a4:43:
                    b8:82:5e:a2:29:f2:7a:16:3a:7c:e6:ca:b3:b3:e8:
                    75:74:36:06:fa:49:5d:2b:57:93:5f:91:20:84:8a:
                    d1:e9:9c:a8:db:8d:f8:d9:da:80:a5:01:68:5c:de:
                    ac:c8:32:01:3c:69:57:81:38:ed:b3:4c:29:81:bf:
                    31:08:c3:1b:7c:dc:ca:8d:92:d5:d8:55:0b:27:87:
                    d6:0d:1d:e7:e0:74:9a:6f:d0:9e:e3:ff:a6:8a:49:
                    85:82:70:da:30:d1:7c:eb:1b:f5:22:4d:98:0e:cc:
                    88:05:df:88:1c:af:37:70:c7:fa:25:ba:8d:be:34:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3C:40:99:59:AD:63:44:5F:D7:AD:F2:C6:0D:9C:48:B3:BF:4E:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b030074f-d5d6-32ed-98c1-cf2c636df036.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.252.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:0d:b1:69:54:95:c3:55:05:10:79:1d:df:fc:96:9a:55:16:
         5d:ba:69:a5:4c:62:32:70:bb:3c:68:64:37:2d:83:5c:b6:b2:
         c8:4f:e0:8b:53:4c:71:cd:ce:8b:bd:cf:0a:8e:2e:a5:5a:dc:
         eb:ce:87:70:60:26:a0:0d:e6:4b:f0:2f:b4:5b:fe:16:f1:af:
         8f:8e:13:c0:54:55:eb:33:26:70:6a:cf:cf:ba:80:05:5f:de:
         50:00:cb:30:a6:6c:3f:8b:1a:64:c9:02:47:7b:fd:f4:3d:6b:
         00:b3:4d:db:96:cc:2e:af:50:75:af:83:44:57:6c:2a:2a:b6:
         98:4e:dc:30:f8:80:1f:9e:0a:43:63:7a:bf:21:5a:3a:ca:60:
         14:fe:a7:28:fe:f4:8f:08:ed:7f:7f:3b:56:f1:db:d7:ab:63:
         ce:da:f3:37:8a:74:20:91:20:ad:da:c0:3c:7e:1e:9a:f5:68:
         c9:d3:f1:9d:5c:76:41:9f:00:56:0f:67:85:8d:d7:db:c3:3e:
         fd:82:eb:d0:41:86:28:b2:99:da:b8:57:4b:4c:88:18:87:71:
         57:99:df:8c:43:eb:88:1b:ab:f6:2b:9f:7e:f4:8c:fb:9b:13:
         35:01:98:c7:4e:12:53:ca:0e:c0:58:35:97:a9:7f:8d:e9:8e:
         ff:25:7b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 16:10:28 2025 by rpki-client