Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa
File:                     52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa (raw, json)
Hash identifier:          wk+vtqx480kNUSGO8wacYMXDPhUwPORfxaYlBKDLWZ8=
Subject key identifier:   A3:27:EE:85:9A:84:3A:D9:35:B1:FE:A1:5F:FC:5E:DA:0C:C8:30:53
Certificate issuer:       /CN=0c2f5a4c-917e-4b90-8022-391847ae5699
Certificate serial:       010D0C9F43285849819B04C48D9AE448E5E16B80
Authority key identifier: 2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa
Signing time:             Sat 12 Apr 2025 23:05:27 +0000
ROA not before:           Sat 12 Apr 2025 23:05:27 +0000
ROA not after:            Fri 11 Jul 2025 23:05:27 +0000
asID:                     13875
IP address blocks:        204.235.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:9b:04:c4:8d:9a:e4:48:e5:e1:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c2f5a4c-917e-4b90-8022-391847ae5699
        Validity
            Not Before: Apr 12 23:05:27 2025 GMT
            Not After : Jul 11 23:05:27 2025 GMT
        Subject: CN=2106a97a-7bf4-4951-be7a-2199e5f85921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5e:c6:0c:92:55:1b:a4:09:c4:c3:d3:43:43:
                    ce:15:1a:c0:5b:b4:a6:b4:0f:e7:a4:a4:07:93:63:
                    f0:26:4b:f5:69:57:fd:d1:4c:ea:8b:88:4a:09:b8:
                    b9:01:d9:15:6b:fc:31:80:d7:c2:81:66:86:04:d1:
                    ca:f9:fd:95:ba:f4:ad:f3:75:52:02:f4:ef:62:cc:
                    99:81:dd:0a:ac:31:3c:e5:e8:02:35:16:a3:67:6b:
                    ac:0e:77:02:ad:77:3b:4f:24:5a:1b:6c:ac:a7:c5:
                    c8:8a:86:88:d6:e8:56:27:91:96:82:c2:3d:82:6b:
                    f7:eb:a1:db:a4:6a:a6:dd:b8:ad:34:d0:19:a5:93:
                    ff:9c:3d:f9:00:ce:2e:96:8b:ef:03:a0:8d:71:dd:
                    bc:77:15:1a:0d:f3:e4:58:bf:8a:7d:92:4d:dd:c8:
                    e3:44:91:61:dc:93:63:14:b3:2b:52:ae:a2:9d:c0:
                    20:35:b2:63:b8:12:3d:c8:4b:1e:fc:76:86:c0:60:
                    e3:63:16:d4:3f:51:2b:90:5d:03:ff:e1:6c:c1:b7:
                    02:f2:87:a8:dd:9f:1c:0b:a4:04:8d:5c:7f:1c:c1:
                    91:df:ee:3c:ef:7f:ac:2e:94:8a:01:f5:4b:60:f5:
                    25:e6:60:c9:d2:ef:b1:23:b3:37:b9:9f:6f:83:ff:
                    ff:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:27:EE:85:9A:84:3A:D9:35:B1:FE:A1:5F:FC:5E:DA:0C:C8:30:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/52232ecb-f67b-30e2-9f6f-6eea369ffb6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699/0c2f5a4c-917e-4b90-8022-391847ae5699.crl

            X509v3 Authority Key Identifier:
                keyid:2A:77:D3:04:F0:E9:28:8C:9E:75:87:0C:E3:FC:5F:DD:14:0B:77:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0c2f5a4c-917e-4b90-8022-391847ae5699.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.235.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cd:a8:d5:34:02:69:45:63:76:c3:e1:8b:04:e9:08:99:63:87:
         b1:c0:61:79:11:6c:40:55:cf:19:07:56:c0:5c:e6:d9:86:1b:
         45:dc:10:30:06:19:d5:4b:eb:98:70:20:ac:8b:83:4d:b5:ae:
         e1:3c:5e:ff:24:04:fd:26:0b:53:76:ae:56:97:89:2d:64:4f:
         c6:e7:14:13:fb:1a:88:b1:dd:39:de:b4:e4:a7:85:38:1b:7b:
         1b:7d:b8:f6:0d:62:9c:f1:4e:ec:56:23:af:4d:fe:91:dd:40:
         9e:76:b3:8f:c1:18:56:ef:dd:ba:a0:75:ea:47:43:db:d7:7c:
         a6:93:f2:89:67:f3:9a:b4:7e:e3:c2:79:f3:4a:59:8f:d2:71:
         fe:c5:f0:75:db:65:c6:b4:31:5e:a2:4a:78:4d:a4:2c:c0:63:
         f4:ed:cc:2f:a5:e2:e7:0e:8d:e0:22:da:b4:41:08:cf:ea:ab:
         c3:33:c2:9a:6c:03:04:e9:00:1f:57:43:d3:e4:41:43:db:5e:
         a3:87:3b:c2:79:8f:35:99:f7:c4:06:9a:b2:4a:b1:07:c2:cb:
         22:c2:42:33:37:70:0f:c2:2a:8e:f8:e0:b8:61:f7:86:99:74:
         3e:ae:76:a5:82:dd:fc:73:44:80:92:8a:27:10:16:b3:4c:4e:
         05:1d:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:13:07 2025 by rpki-client