Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
File:                     a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa (raw, json)
Hash identifier:          kVZCEQ8ZQdI/mmV+6OuN7ADPfzhQAc2BX0ACSfLqCdY=
Subject key identifier:   5B:C5:95:6D:E6:22:0F:20:AF:FE:8D:DF:6B:BA:73:1B:88:12:A1:FF
Certificate issuer:       /CN=74b24643-d6d5-4d2a-b885-83160dec7103
Certificate serial:       010D0C9F43285848EC96810EBDB78A894137D780
Authority key identifier: 32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     42
IP address blocks:        206.223.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:81:0e:bd:b7:8a:89:41:37:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74b24643-d6d5-4d2a-b885-83160dec7103
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=90065819-5edb-4cf5-95dc-76b91d1594f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:5d:05:a9:51:fc:df:a4:bb:b2:19:4e:b5:9b:
                    12:3d:79:14:ff:ff:99:22:91:4a:b9:5d:a4:a3:c7:
                    58:a0:3f:fb:1e:cd:1d:26:ac:38:90:fd:50:61:48:
                    1e:7f:f6:29:10:47:60:27:57:db:eb:ea:4c:23:e9:
                    9c:1a:76:ca:3a:c7:1e:33:0e:1d:8b:aa:df:22:2b:
                    61:5e:84:53:c5:9e:24:0a:b9:c3:13:ab:76:ca:0a:
                    f3:b0:9b:c8:ba:7c:76:87:97:04:ea:ba:8e:6e:9e:
                    26:f9:07:3a:df:f4:88:18:30:75:75:7e:78:04:52:
                    ce:82:e3:78:8a:21:4e:b1:77:18:b3:33:90:cb:5f:
                    58:cd:ae:37:42:c6:f6:84:df:3d:39:c2:ed:9c:9d:
                    5b:5f:32:af:03:ff:ec:a7:92:b4:d3:cd:47:f0:fa:
                    47:28:87:0d:d5:9e:b5:dd:24:e2:42:36:1d:ea:30:
                    fc:66:45:21:9e:1b:84:92:f6:a9:03:90:c9:56:83:
                    b0:aa:3a:04:05:a3:aa:fe:21:fb:be:b4:3f:c4:a4:
                    66:f2:19:a0:53:3c:63:bf:5d:49:07:b8:bf:b1:4d:
                    35:c8:65:6a:ba:4a:66:08:18:a0:55:04:af:a2:98:
                    03:03:1e:d4:fd:93:c1:57:29:6b:7b:9e:5e:45:05:
                    30:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:C5:95:6D:E6:22:0F:20:AF:FE:8D:DF:6B:BA:73:1B:88:12:A1:FF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/a348add7-76bd-3889-a8e1-e53f45bbfc1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103/74b24643-d6d5-4d2a-b885-83160dec7103.crl

            X509v3 Authority Key Identifier:
                keyid:32:48:2C:26:74:5B:59:00:E4:D0:78:12:7E:F4:AA:AE:8A:4E:57:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/74b24643-d6d5-4d2a-b885-83160dec7103.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.223.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:88:77:a9:32:56:2a:14:0e:17:96:70:af:f7:7b:84:ff:42:
         08:84:82:77:ab:b2:69:7e:1d:a6:df:45:d9:c7:a4:d1:b7:c6:
         bf:09:4a:73:55:0f:91:fe:f2:d7:04:d6:7d:eb:36:01:90:37:
         16:ea:73:2b:2c:c3:21:4e:80:71:36:ef:0f:9b:6e:78:5a:33:
         72:bc:bb:96:7a:b0:7d:2b:0f:a4:77:12:77:69:cc:cb:3a:94:
         d6:42:3a:ae:fb:ae:fa:63:d6:43:f4:80:f6:a0:89:06:c1:2b:
         57:cd:9a:6f:2d:f5:05:c7:a9:f0:7c:f2:6b:03:1b:47:6c:ea:
         8b:84:3f:a0:65:0c:cf:c1:bb:72:e4:0b:74:01:19:9e:4e:61:
         be:3f:ed:16:c0:20:e6:32:ac:52:90:b5:91:16:3c:e3:8c:4a:
         44:96:16:a4:df:5f:0e:75:a1:b7:a3:83:59:2e:e7:00:14:53:
         a7:aa:88:5f:ef:4e:9e:b1:88:11:2c:39:dd:95:df:5b:1f:07:
         b3:86:01:38:90:2b:28:d8:47:f7:ed:3a:27:ad:db:50:34:25:
         4e:6a:3b:43:90:a1:c0:c8:7c:fc:56:ea:57:0b:40:b0:5e:2b:
         a1:8f:6f:c4:a9:6d:95:e9:bf:bd:f6:7e:fe:94:13:f9:17:31:
         91:27:54:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjsloEOvbeKiUE314AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzRiMjQ2NDMtZDZkNS00ZDJhLWI4ODUtODMxNjBkZWM3
MTAzMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
OTAwNjU4MTktNWVkYi00Y2Y1LTk1ZGMtNzZiOTFkMTU5NGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhl0FqVH836S7shlOtZsSPXkU//+ZIpFKuV2k
o8dYoD/7Hs0dJqw4kP1QYUgef/YpEEdgJ1fb6+pMI+mcGnbKOsceMw4di6rfIith
XoRTxZ4kCrnDE6t2ygrzsJvIunx2h5cE6rqObp4m+Qc63/SIGDB1dX54BFLOguN4
iiFOsXcYszOQy19Yza43Qsb2hN89OcLtnJ1bXzKvA//sp5K0081H8PpHKIcN1Z61
3STiQjYd6jD8ZkUhnhuEkvapA5DJVoOwqjoEBaOq/iH7vrQ/xKRm8hmgUzxjv11J
B7i/sU01yGVqukpmCBigVQSvopgDAx7U/ZPBVylre55eRQUwNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFvFlW3mIg8gr/6N32u6cxuIEqH/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIy
NDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2MGRlYzcxMDMvYTM0OGFkZDctNzZiZC0z
ODg5LWE4ZTEtZTUzZjQ1YmJmYzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzRiMjQ2NDMtZDZkNS00ZDJhLWI4
ODUtODMxNjBkZWM3MTAzLzc0YjI0NjQzLWQ2ZDUtNGQyYS1iODg1LTgzMTYwZGVj
NzEwMy5jcmwwHwYDVR0jBBgwFoAUMkgsJnRbWQDk0HgSfvSqropOVxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83NGIyNDY0My1kNmQ1LTRkMmEtYjg4NS04MzE2
MGRlYzcxMDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzt96MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeId6kyVioUDheWcK/3e4T/QgiEgnersml+HabfRdnHpNG3xr8JSnNV
D5H+8tcE1n3rNgGQNxbqcysswyFOgHE27w+bbnhaM3K8u5Z6sH0rD6R3EndpzMs6
lNZCOq77rvpj1kP0gPagiQbBK1fNmm8t9QXHqfB88msDG0ds6ouEP6BlDM/Bu3Lk
C3QBGZ5OYb4/7RbAIOYyrFKQtZEWPOOMSkSWFqTfXw51obejg1ku5wAUU6eqiF/v
Tp6xiBEsOd2V31sfB7OGATiQKyjYR/ftOiet21A0JU5qO0OQocDIfPxW6lcLQLBe
K6GPb8SpbZXpv732fv6UE/kXMZEnVPQ=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:36:05 2025 by rpki-client