Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa
File:                     9897f656-b344-3323-a5ea-830b11fb1410.roa (raw, json)
Hash identifier:          cLoZ2qGhf+40d1tOFYe8R9gtx1sQ4EW1tyv1htXyUQY=
Subject key identifier:   69:4F:87:10:99:93:CD:B2:69:2C:4C:1A:3E:16:6B:21:9F:6F:73:6C
Certificate issuer:       /CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
Certificate serial:       010D0C9F432858498199CF4C3B96677AE2823220
Authority key identifier: 5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa
Signing time:             Sat 12 Apr 2025 23:03:01 +0000
ROA not before:           Sat 12 Apr 2025 23:03:01 +0000
ROA not after:            Fri 11 Jul 2025 23:03:01 +0000
asID:                     13875
IP address blocks:        207.228.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:99:cf:4c:3b:96:67:7a:e2:82:32:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2b1124-f433-4440-b52c-8f0b5650e2bb
        Validity
            Not Before: Apr 12 23:03:01 2025 GMT
            Not After : Jul 11 23:03:01 2025 GMT
        Subject: CN=cc8e6f22-7bc8-4bf3-8e92-3c7a5dbc8aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2f:b2:3b:c0:e4:12:79:1b:cb:0a:95:35:2f:
                    75:c2:8f:48:a1:7d:03:ba:7f:d4:21:e5:af:1b:89:
                    23:cc:16:73:d1:bf:35:59:a1:1d:f9:58:4a:4d:60:
                    a1:0e:7d:9c:18:97:5a:17:50:4e:4b:b0:28:89:1e:
                    38:c9:e5:4e:14:9b:46:d9:d9:5b:94:1b:f7:0c:9e:
                    ad:7f:cb:00:58:24:81:d1:89:4c:df:2f:ed:bd:6f:
                    d2:28:a1:e3:5c:05:66:2b:11:09:e1:0b:ab:41:a7:
                    8f:63:da:2c:88:f8:1d:b9:d7:3a:fd:c9:e6:b3:0d:
                    1a:96:bf:be:a6:98:ae:23:e1:c0:68:71:7d:c9:64:
                    a8:d7:0b:9e:0f:27:fb:82:fe:62:2d:7d:1c:5b:e5:
                    c5:8a:27:8b:a3:65:94:3d:59:01:83:d7:62:c3:db:
                    c1:f8:7a:66:49:cc:c3:f6:48:bd:77:2b:25:15:8a:
                    61:87:a2:b6:95:ef:70:2f:c9:e2:90:8f:78:7f:c3:
                    d4:a4:c5:b6:f2:01:ec:2b:08:c6:16:29:81:1f:7e:
                    0c:60:2f:ff:f3:1f:c0:4c:2f:b9:8e:b4:61:a9:92:
                    76:e2:a0:c0:39:76:e9:70:62:44:c3:71:47:dd:62:
                    84:0c:0f:99:7b:9d:aa:9f:b8:ee:57:ab:32:59:aa:
                    36:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:4F:87:10:99:93:CD:B2:69:2C:4C:1A:3E:16:6B:21:9F:6F:73:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/9897f656-b344-3323-a5ea-830b11fb1410.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb/2c2b1124-f433-4440-b52c-8f0b5650e2bb.crl

            X509v3 Authority Key Identifier:
                keyid:5F:EE:E2:BF:7F:FE:5E:32:1F:29:95:6C:7D:EC:5D:BE:2E:21:D0:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2c2b1124-f433-4440-b52c-8f0b5650e2bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.228.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:9a:ed:49:be:86:eb:60:ec:05:ca:62:1d:0b:84:2f:ed:98:
         2b:bf:37:59:6b:5a:aa:74:a3:4f:5b:a9:5d:3f:a1:71:c0:70:
         1a:54:39:17:0b:79:7b:5b:ec:1a:04:0a:81:9a:d1:2b:a0:33:
         62:a5:02:96:46:3d:f4:34:6f:33:4e:ff:6e:0a:16:9c:05:47:
         7c:e6:0e:37:82:9b:26:77:9d:39:0c:94:05:c6:64:e2:24:98:
         6c:3d:dd:68:13:e0:ea:a7:57:5f:c6:f1:ad:cb:c5:ff:9d:26:
         a2:63:48:45:71:50:d6:b4:1f:83:3f:58:fa:8e:90:02:93:0b:
         00:b7:09:a3:13:c9:b0:0d:1a:41:89:c1:9c:29:16:cd:37:a3:
         38:dd:f0:25:4d:27:0e:cf:13:a7:e8:20:c2:82:60:d7:42:51:
         d4:1d:9c:d0:4d:64:04:1f:d5:2d:e9:9f:27:da:5e:9d:2e:41:
         c9:71:f4:de:7f:5d:5a:99:22:89:c1:19:38:86:bf:48:cf:49:
         24:79:ee:72:50:0d:ae:54:02:6f:c1:03:55:03:89:bc:c7:80:
         6a:8e:65:2a:48:3c:6c:47:59:8f:29:74:3f:f4:62:dc:3e:d2:
         5a:dd:92:90:1f:6c:25:49:4e:4f:ba:9f:28:86:42:76:b9:c4:
         8c:b5:c2:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 06:20:56 2025 by rpki-client