Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa
File:                     259f3724-3c3e-369d-802f-686d6a0da0d6.roa (raw, json)
Hash identifier:          LvRQxFG13VnPEmjnL50/aHO/qF1RG8LEO/aH3RPANsM=
Subject key identifier:   21:F3:89:7D:89:36:29:B8:02:E1:19:1A:08:F2:1F:F1:23:46:CB:AA
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6BE939BBDEB9230C2CA00
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        206.191.74.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:be:93:9b:bd:eb:92:30:c2:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=6f5c6e5f-5ed2-4ed9-ba7e-8f65f9722767
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b7:63:56:a7:fc:5f:e4:72:54:43:91:ed:c3:
                    70:dc:42:17:56:e8:d4:20:af:57:21:5b:8f:58:cd:
                    ea:41:4f:a4:60:44:b9:e9:cb:8f:62:4c:41:40:ff:
                    f6:dc:8b:c7:77:44:b3:70:5c:d5:1c:a5:61:2b:e5:
                    50:1f:0e:2c:19:2e:2b:45:92:1f:49:27:06:33:d3:
                    5d:5b:39:d4:28:d0:9f:e3:84:06:c4:19:40:49:20:
                    2c:1f:49:85:38:dd:df:06:e0:77:76:6a:61:b0:3b:
                    c4:52:27:1f:8f:13:31:c8:0f:b0:77:9f:c9:0b:45:
                    2f:02:04:e0:d7:93:0b:f7:53:58:05:e9:e2:95:04:
                    49:f2:22:70:ef:5e:5e:8d:77:87:e9:b2:80:f2:b0:
                    22:20:cf:b1:be:1d:2f:91:4b:3d:db:31:cd:24:01:
                    07:bf:76:24:b1:cf:76:48:68:7a:d1:bf:1f:95:7d:
                    62:e7:11:bc:5b:97:35:fa:6c:4f:71:dc:4f:58:d2:
                    ee:0a:82:af:30:05:a2:05:8b:6c:17:99:c4:03:81:
                    74:a5:b7:04:cc:ed:d5:34:f5:20:b1:9c:92:f5:31:
                    9c:9f:5e:f4:a1:59:61:52:91:cc:fd:89:d7:34:70:
                    38:0b:0c:43:41:c3:b7:8f:73:14:ee:38:3c:52:52:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:89:7D:89:36:29:B8:02:E1:19:1A:08:F2:1F:F1:23:46:CB:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/259f3724-3c3e-369d-802f-686d6a0da0d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.191.74.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:bd:ec:16:1e:a2:84:0e:9b:56:5d:32:58:19:c8:a5:37:bb:
         09:82:05:66:2c:1d:60:6d:9e:1c:46:e0:d5:da:15:24:8f:89:
         b2:ee:7e:d3:2f:5a:67:af:26:ba:db:bb:92:d2:40:f8:c1:e2:
         99:bc:09:94:10:f2:91:1c:e8:4c:5c:61:14:1c:2d:14:50:d4:
         9b:45:ef:11:b0:97:2f:d4:8c:a2:75:d3:69:ba:78:2e:cf:df:
         ae:e0:93:18:49:fe:39:72:43:d0:4c:62:17:ef:c1:5d:aa:ba:
         a0:bd:1f:77:f6:e4:ab:b8:44:76:c8:46:4c:06:9c:d8:73:f9:
         83:0b:63:99:d9:e4:e1:25:84:7d:da:42:39:a1:5e:06:c7:55:
         ba:11:b2:90:fc:91:c0:7a:df:3d:df:b7:98:92:fb:03:01:1f:
         00:bd:dd:8b:e8:a8:e4:41:5f:de:d7:32:aa:6d:ad:60:61:19:
         5a:05:93:73:b3:71:08:c9:0a:e6:18:15:8e:2e:5c:7c:54:74:
         a5:f5:75:1d:5f:3d:f4:38:c3:a4:2c:f7:7d:00:2b:6b:86:cd:
         fd:13:d6:92:ab:ee:8f:e3:ac:dc:2c:e5:6f:86:58:a2:8b:5b:
         93:45:37:92:26:09:0b:07:de:03:fc:a7:98:dd:95:ab:86:2f:
         69:e0:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:05:48 2025 by rpki-client