Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa
File:                     6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa (raw, json)
Hash identifier:          hDh9Dq1yVQfA0FlUrkb3DPOOr67ccAnzlRoaNoy5IvY=
Subject key identifier:   30:01:ED:B3:37:A3:CA:6B:AC:EF:98:3D:A0:E7:24:44:34:1E:BC:8E
Certificate issuer:       /CN=6063814d-5183-49de-90ee-84cbbecde422
Certificate serial:       010D0C9F43285848C6E62A65AA9552A2333CA240
Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     22251
IP address blocks:        204.25.208.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2a:65:aa:95:52:a2:33:3c:a2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=ad0966a4-a803-482c-acb8-9d91a1f43128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:11:82:06:ed:48:31:52:3f:22:9f:83:1b:71:
                    f7:67:ec:53:41:aa:cf:b4:e9:22:67:c0:71:39:7b:
                    00:42:1f:7f:cd:22:84:b5:e8:88:59:f7:e5:e3:ff:
                    c8:b2:49:4a:7c:0a:c5:d9:69:da:26:d8:73:b3:be:
                    16:3d:3c:0b:27:61:d4:2b:80:5a:12:60:dd:f1:86:
                    41:c3:bd:17:3d:c2:6d:48:f2:f1:74:33:14:4e:e9:
                    2b:0a:56:e4:72:fb:ee:dd:76:e6:a7:c5:9a:d7:a7:
                    24:ac:86:de:d0:a2:1e:3d:26:f3:05:d7:89:4d:bf:
                    6a:14:3f:7b:ae:11:a5:3e:13:88:35:e5:00:81:15:
                    a4:b1:ad:ce:9d:3a:5a:e9:41:6c:67:ef:a8:11:56:
                    41:1a:26:c0:06:b1:13:6f:16:0e:eb:32:a0:42:c4:
                    52:f7:31:a9:a7:c2:a6:52:f7:0d:b5:75:a6:99:d1:
                    17:ac:a0:05:79:50:1d:45:09:c4:1f:bf:1f:1a:30:
                    08:9b:54:65:de:7e:1e:3e:b3:73:c7:f5:93:14:f1:
                    56:5d:3c:3f:9c:0c:d5:da:b1:e5:fc:89:88:c4:f8:
                    62:ba:25:4c:5c:ec:42:b0:90:db:77:a2:fd:c1:f8:
                    b2:89:67:29:47:27:ec:00:bc:be:9a:7e:b7:c6:83:
                    cd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:ED:B3:37:A3:CA:6B:AC:EF:98:3D:A0:E7:24:44:34:1E:BC:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6f434037-fdf4-3dcb-a3c3-eb3f696e11a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl

            X509v3 Authority Key Identifier:
                keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.25.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:ea:be:5c:d7:61:7e:08:c5:4f:c0:21:cc:ac:d2:57:fd:3c:
         63:7b:2e:62:6c:2f:87:49:ee:71:1e:7c:3d:52:c4:ab:9b:f1:
         14:c9:e7:dd:36:3c:04:16:b6:7c:67:63:90:70:01:ea:ec:8e:
         72:e9:55:c9:4e:15:95:e3:d3:79:aa:c7:17:ae:58:4a:31:32:
         8c:ac:39:a0:a5:ad:98:12:89:7a:10:c1:3f:4c:fe:05:df:59:
         2b:97:02:56:c1:ee:ed:56:35:e7:b0:ab:f5:15:e6:a7:51:b5:
         39:a8:e1:bf:fd:66:1b:b3:5c:8f:83:27:a7:ff:11:8a:dd:cb:
         56:f4:c8:13:c3:95:56:2b:a7:b8:07:c1:84:7b:da:5a:29:09:
         d5:d6:21:1c:84:84:32:e0:7c:46:0b:70:8a:c7:af:b0:75:0b:
         07:70:45:2b:d5:5f:cf:a5:10:79:5b:2e:d9:6b:61:cd:d7:c3:
         0e:19:20:9b:0f:69:8d:e7:77:02:6a:27:2c:45:0a:fe:0a:5a:
         a6:7b:67:29:82:4c:4b:f3:9b:8d:7e:96:97:c8:70:59:58:16:
         f1:50:3a:64:3c:e3:c7:99:8c:26:20:ef:70:b8:f8:f8:0a:c7:
         ae:c8:b8:c3:cd:06:aa:82:19:89:88:ee:cf:00:ee:97:2e:52:
         c3:6a:de:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:46 2025 by rpki-client