Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/621213d1-3b13-3c28-9297-0e573e4108f1.roa
File:                     621213d1-3b13-3c28-9297-0e573e4108f1.roa (raw, json)
Hash identifier:          Vpw3IBNrAUBbw3SculCA0OkX50BB8Pz4OlfVY8GQg/k=
Subject key identifier:   67:F7:A3:CF:54:F6:84:64:6E:5B:4E:BE:D9:B1:96:D4:A9:AB:B3:34
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F43285849CE9A58A2F233F5BC141D2A20
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/621213d1-3b13-3c28-9297-0e573e4108f1.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     54238
IP address blocks:        206.124.163.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:58:a2:f2:33:f5:bc:14:1d:2a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=fc5ceb2f-f6d2-4406-9381-5d037158e223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:7d:d9:9b:65:f4:d7:ff:66:cf:16:26:90:75:
                    e3:9e:e1:32:dc:69:e9:c5:2a:cb:40:e3:30:71:8a:
                    ba:3f:08:8b:10:c3:59:83:ee:20:3c:40:ef:e6:08:
                    32:00:10:79:56:46:e1:27:b4:8f:24:57:ec:93:52:
                    69:94:e0:08:0d:aa:48:df:5d:80:e7:c9:90:af:39:
                    3e:6f:10:0f:70:7d:ab:3c:b4:10:94:a6:5b:64:50:
                    eb:6c:dc:93:c1:b1:af:6b:24:a4:fa:e4:d7:95:ae:
                    09:74:0f:4a:df:35:65:aa:9e:03:38:10:7a:03:ac:
                    8f:14:3b:d3:ac:60:db:a0:d7:80:25:5f:6f:b9:3d:
                    49:50:0f:bd:45:b1:b7:f4:4d:2c:72:7e:e3:5e:fa:
                    4a:f7:0f:8f:b8:b5:22:4b:4f:05:7f:1f:fe:4e:1f:
                    f4:de:aa:ce:57:e3:f4:74:bf:fd:d7:5a:86:2f:e8:
                    a3:ff:16:b1:89:fe:be:83:9f:13:f8:c3:fc:96:46:
                    28:e6:c2:56:bf:9e:29:1b:c5:a9:31:78:81:dd:ac:
                    9f:f3:47:bc:c5:9d:fc:b8:e7:a3:ba:20:38:62:37:
                    11:4a:00:a2:aa:59:71:fe:b1:13:0a:08:11:39:2c:
                    8e:bd:b7:8e:f5:c1:eb:ad:fb:7b:68:42:38:99:e1:
                    1c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:A3:CF:54:F6:84:64:6E:5B:4E:BE:D9:B1:96:D4:A9:AB:B3:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/621213d1-3b13-3c28-9297-0e573e4108f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.163.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6a:23:29:4a:71:d6:d9:3f:2a:b2:93:2b:de:36:37:d6:ec:a4:
         7d:a9:20:24:8a:a6:66:b7:32:4c:e5:16:d3:9e:08:61:f0:e1:
         ea:a6:23:28:3c:26:8d:65:fb:70:81:ae:82:8e:d3:fe:e7:e2:
         40:55:da:05:35:ef:52:b9:de:3e:d2:2c:4d:e0:cf:41:33:b4:
         28:38:11:61:59:fc:cc:15:0e:fa:7d:ef:b4:99:22:99:c6:c9:
         d8:44:2b:e8:b7:60:37:d1:0c:fb:ff:c1:e4:97:d9:18:9b:c2:
         50:54:f2:41:74:7a:91:ef:56:a6:5e:54:5e:e4:89:1e:55:55:
         a7:d8:7b:4a:4f:44:68:4a:8a:21:8d:cc:61:7a:41:81:fa:e6:
         f4:dc:02:0c:44:8c:8f:49:2d:ec:f7:99:d2:45:76:39:13:fa:
         5e:98:7c:41:47:ef:8a:61:91:3d:22:60:34:d7:25:b8:e2:4a:
         a3:13:74:a2:df:92:ee:b4:4f:ac:7d:a6:65:79:81:25:a3:bc:
         72:9b:78:4a:a7:a8:d6:f5:21:c7:7f:9b:0e:60:b4:63:f6:9d:
         00:96:a5:79:8b:c6:50:b8:ac:4e:c4:d8:32:fb:16:90:f9:b5:
         66:2e:84:43:aa:76:d7:8d:51:65:35:a3:6e:9f:58:86:f6:df:
         bb:d4:71:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 19:49:19 2025 by rpki-client