Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1f9b2726-a021-3b59-ba40-14d58d43ef18.roa
File:                     1f9b2726-a021-3b59-ba40-14d58d43ef18.roa (raw, json)
Hash identifier:          1puhth9VIaD4UcWdecQQp6f76RRjiWYkx+WIEvA+E+8=
Subject key identifier:   D8:7F:4B:43:BC:94:EA:74:08:80:17:EF:11:C6:0C:E7:9A:E8:E9:A8
Certificate issuer:       /CN=69233f52-8a17-4eb0-ae6a-62c861686718
Certificate serial:       010D0C9F432858494B64158C2BEEF42FAD059100
Authority key identifier: 79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1f9b2726-a021-3b59-ba40-14d58d43ef18.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     205220
IP address blocks:        167.253.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:15:8c:2b:ee:f4:2f:ad:05:91:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69233f52-8a17-4eb0-ae6a-62c861686718
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=2bbd7812-65d8-4c37-84d5-48bdbc42212b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:96:7f:0c:d1:45:b5:be:d5:44:ef:16:0e:25:
                    67:0a:54:c4:95:87:08:0a:98:24:7a:52:15:a4:16:
                    aa:d8:61:51:f5:4d:56:57:3f:12:48:70:cb:00:18:
                    5c:10:eb:d9:70:65:d4:a6:36:b0:82:93:d3:74:47:
                    96:7e:46:d1:23:66:9f:6b:98:a5:52:64:18:c8:2a:
                    11:80:fc:e1:08:52:f7:71:0a:f2:0a:38:70:c2:87:
                    be:98:2d:9b:c7:b5:c0:61:74:e2:62:fa:b3:55:08:
                    d2:d7:d5:e0:03:5a:99:ac:6d:62:b1:3b:ee:86:92:
                    8b:dc:e8:77:4f:05:bc:58:82:ab:b2:d5:bf:a3:5f:
                    f7:5f:d8:1e:80:8b:9e:2d:a0:1f:37:64:9a:17:97:
                    57:f2:b6:a8:99:b2:79:14:cf:c9:e8:30:9c:72:0f:
                    68:d4:81:ae:d1:7f:17:d2:3f:c7:52:12:26:8f:65:
                    e1:34:60:72:e9:f7:7c:b7:60:4d:46:bd:24:bd:07:
                    50:95:f5:bb:d2:c4:1f:17:16:d5:70:4d:ff:d4:2b:
                    80:f5:ec:e1:27:c9:9b:58:0c:21:9b:75:a1:d2:35:
                    5d:b6:1b:79:13:ca:9f:87:7e:72:91:5c:34:ec:70:
                    c1:fb:ad:df:95:86:c4:b9:2c:e3:27:de:63:a7:f5:
                    e1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:7F:4B:43:BC:94:EA:74:08:80:17:EF:11:C6:0C:E7:9A:E8:E9:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/1f9b2726-a021-3b59-ba40-14d58d43ef18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718/69233f52-8a17-4eb0-ae6a-62c861686718.crl

            X509v3 Authority Key Identifier:
                keyid:79:00:BA:75:0D:A9:7C:C7:52:2F:26:3F:AB:EF:F3:8E:F3:84:81:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/69233f52-8a17-4eb0-ae6a-62c861686718.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.253.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:56:90:54:d9:8d:40:85:2b:b8:8a:e1:60:fd:1d:b9:ac:62:
         13:32:71:fd:ef:ff:4d:6d:3c:bb:4c:40:72:fe:8c:55:c5:ef:
         57:88:42:75:38:79:5f:b2:f4:5c:1c:c0:ab:f1:5f:3d:24:45:
         ea:65:a8:86:4a:c4:cf:db:a9:87:7e:8a:78:9c:9d:66:d6:c3:
         13:f5:0b:a3:7c:fe:4e:5e:9c:da:fc:52:1c:92:53:7c:4e:60:
         d4:62:4c:0d:88:b4:a9:92:37:ef:48:d7:28:7e:46:96:46:98:
         00:bb:c2:6d:fc:b3:b2:77:4e:7c:0f:27:d3:65:0a:76:84:c9:
         c2:9f:53:9a:45:c8:56:bb:e7:d9:88:91:30:42:53:7c:f1:51:
         f0:15:e7:b7:b7:61:c9:d2:ee:a9:98:5a:a5:f8:de:cc:cf:99:
         5e:f9:44:93:b8:d5:11:b7:67:98:94:95:3d:d4:ef:26:f5:2e:
         77:ae:b7:77:43:25:3e:59:7e:4d:6d:19:66:e5:6b:46:f7:bb:
         6f:68:ed:32:45:e3:8c:06:8c:61:2c:1c:cb:84:24:03:44:ba:
         47:b0:7f:50:e1:e4:8d:83:70:c4:7e:6a:0c:bb:00:2c:85:d8:
         ef:47:ef:7e:c3:8e:eb:b9:e3:04:81:73:91:b3:78:4b:05:ab:
         19:83:ac:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:52:00 2025 by rpki-client