Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/798982e4-c2cd-36b3-905c-8d91468142a0.roa
File:                     798982e4-c2cd-36b3-905c-8d91468142a0.roa (raw, json)
Hash identifier:          9Fj/9B1IOwyE4a3sFHkpcB0LVAY1+8Q0ImQJ6vdACN4=
Subject key identifier:   C1:A6:E5:87:39:DA:64:9D:94:F4:FE:80:F5:3F:B1:25:DA:11:C8:4A
Certificate issuer:       /CN=1931273b-f68a-4770-b714-cad22762621f
Certificate serial:       010D0C9F43285848C84BA037BF5261AE2BE2E6C0
Authority key identifier: F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/798982e4-c2cd-36b3-905c-8d91468142a0.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     7018
IP address blocks:        206.168.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:a0:37:bf:52:61:ae:2b:e2:e6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1931273b-f68a-4770-b714-cad22762621f
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=42e9813d-5026-41da-8274-befa7360be92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:32:d5:ca:f1:61:ee:b8:72:c0:1a:4c:15:2b:
                    1a:03:0c:0a:1b:d4:4e:74:09:a9:e5:5d:25:ce:b9:
                    2d:68:db:3c:23:09:86:42:f4:28:62:cf:3f:2a:a5:
                    52:59:e7:b4:5f:57:47:8c:16:5b:11:0d:b0:e5:24:
                    51:99:be:e9:b0:8d:35:3c:9c:f7:a7:55:3c:25:38:
                    2f:b7:c3:2d:a0:58:b3:a4:f6:fb:00:09:50:50:5b:
                    c0:f3:3b:a2:4f:59:0d:8e:d4:90:8c:29:9a:b4:27:
                    35:0f:fd:af:50:9a:ef:d7:2a:33:ba:ef:41:21:16:
                    6b:0f:aa:c4:8a:95:c4:16:d0:08:28:81:23:c7:ab:
                    71:72:c2:83:5a:1d:f8:bf:b4:76:41:88:52:80:1b:
                    99:46:54:96:17:c9:bc:49:b1:2d:72:91:2e:5e:02:
                    da:85:b5:2f:c6:82:a5:40:01:80:a9:47:56:12:7e:
                    61:63:1c:3e:45:99:24:1f:2c:89:f9:c8:2c:78:44:
                    b0:48:da:79:98:64:8f:6c:fb:d3:71:50:41:11:0a:
                    dd:9f:64:d5:99:3b:e4:6e:06:0c:32:49:16:dd:18:
                    5f:e8:c3:fc:b5:a2:aa:18:f1:df:f4:a0:74:b6:a6:
                    5f:79:64:46:0b:38:56:ff:04:40:c8:0c:b8:cf:46:
                    88:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A6:E5:87:39:DA:64:9D:94:F4:FE:80:F5:3F:B1:25:DA:11:C8:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/798982e4-c2cd-36b3-905c-8d91468142a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f/1931273b-f68a-4770-b714-cad22762621f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:16:90:B5:E3:C9:9B:72:25:C4:87:A7:EA:51:76:F2:4E:3C:F6:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1931273b-f68a-4770-b714-cad22762621f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:1a:f1:45:fa:3d:94:f8:71:a1:e7:59:d9:89:14:63:17:14:
         11:c8:af:ed:c6:1e:5e:d3:c1:81:b4:6c:6d:47:cd:08:f9:25:
         5f:ef:56:dd:79:8b:38:a3:38:6f:4a:38:c4:90:43:83:2e:be:
         1d:3a:e3:da:41:c6:a8:8a:44:70:0f:4b:31:e3:72:4a:e0:dc:
         f9:61:d3:47:d9:0c:54:3f:45:a3:4e:ab:17:7b:e3:2d:a2:cb:
         50:c8:78:04:aa:98:ef:29:80:6c:1f:43:73:d8:f7:37:a6:82:
         b9:d5:85:3c:d3:ba:08:c0:5c:aa:7a:8c:34:15:b1:83:48:bc:
         61:62:16:dd:73:9c:09:56:7f:8d:f5:e8:8b:cf:64:6b:bf:2f:
         ee:3c:4e:82:f8:2c:ce:e9:ec:08:49:e9:dd:f6:23:a6:90:ae:
         22:45:86:87:37:f0:fc:84:a8:1b:37:e0:b5:f7:e1:97:da:47:
         21:51:6e:c3:e9:47:99:4d:94:10:c5:3b:2b:26:11:6b:55:bd:
         b2:df:5b:62:f2:f4:4c:7d:8d:bb:91:cf:2b:46:c7:07:d5:11:
         36:06:a6:32:3c:42:60:44:12:12:77:74:c5:1f:b6:6a:ee:b8:
         f1:7e:10:a6:b7:5e:f5:9b:3a:53:3c:68:a6:f1:65:5e:f6:13:
         b9:f5:f2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:09:19 2025 by rpki-client