Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa
File:                     43abee32-0b0c-3284-ab75-86047f53ab34.roa (raw, json)
Hash identifier:          xu7JvN2fPQesI7D97NVGAAtfT7zAdZTohHjAW/3ht3M=
Subject key identifier:   31:33:5C:ED:7D:B8:37:59:CF:2E:26:99:E6:7E:DD:F9:D4:07:DB:A0
Certificate issuer:       /CN=3555956f-7142-453a-8aea-177a684dd7aa
Certificate serial:       010D0C9F4328584A86DB75C5F778B77A44790420
Authority key identifier: 4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     13821
IP address blocks:        206.218.248.0/24 maxlen: 24
                          206.218.249.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 26 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:75:c5:f7:78:b7:7a:44:79:04:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3555956f-7142-453a-8aea-177a684dd7aa
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=50edde40-e635-4928-91ad-3bbb0928f8c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:33:c2:b6:b3:4c:1a:2a:db:b2:7c:52:9b:15:
                    53:b0:66:8c:56:a4:4e:b4:9e:a6:1a:88:22:11:17:
                    46:49:8c:dc:67:c1:d5:70:38:2d:32:8e:d9:ee:9c:
                    29:c1:d1:73:ab:f1:fd:98:0a:2e:66:c3:e5:fa:d9:
                    83:42:d6:14:dc:15:8e:26:98:46:19:9a:24:9d:3a:
                    0e:db:47:df:1f:5e:bf:e1:1b:6d:38:ce:64:82:97:
                    4c:69:08:89:5b:02:37:9a:3b:ce:ae:08:b0:3b:eb:
                    35:d3:10:66:c2:86:fe:de:99:1e:39:45:c1:88:b1:
                    6d:72:7a:e7:67:84:72:9a:e9:2d:4a:21:73:d7:6a:
                    7a:8c:02:1c:4c:45:ae:6d:25:a4:be:7b:fc:69:16:
                    26:07:df:8d:6f:57:33:06:c8:7a:96:36:d1:49:bc:
                    bb:0d:85:d5:8d:2f:cc:3e:59:cb:e6:d4:31:91:5d:
                    77:bd:9d:cc:b7:83:1a:22:ea:18:ad:d7:44:5b:13:
                    01:8a:94:ab:12:37:cb:52:27:82:69:92:5f:52:b1:
                    7e:65:92:fc:bf:99:62:12:60:18:9c:5b:95:cd:a7:
                    50:b1:ed:11:79:b8:a3:94:a1:ff:6b:23:47:37:65:
                    92:f1:15:68:2d:cd:3b:96:f8:ce:32:fb:b6:c8:cd:
                    0c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:33:5C:ED:7D:B8:37:59:CF:2E:26:99:E6:7E:DD:F9:D4:07:DB:A0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/43abee32-0b0c-3284-ab75-86047f53ab34.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa/3555956f-7142-453a-8aea-177a684dd7aa.crl

            X509v3 Authority Key Identifier:
                keyid:4E:7A:76:49:A1:4E:1D:93:34:D9:CD:A8:76:A9:D1:98:66:F4:48:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3555956f-7142-453a-8aea-177a684dd7aa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.218.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:15:06:18:48:26:0a:c0:97:5e:45:db:31:e2:9d:3a:39:64:
         57:1b:d9:06:70:61:95:4d:be:81:81:2a:72:42:8e:13:aa:39:
         b4:e8:eb:aa:ea:b5:5a:7a:95:30:34:e6:18:e9:ac:bc:e4:dd:
         c2:97:57:7b:7d:87:94:2c:82:74:45:2b:88:b6:ce:80:75:00:
         69:f1:b9:bf:a8:56:ca:38:a4:83:80:4d:a6:be:39:30:28:bc:
         6f:0e:b8:2c:82:b5:77:7b:f3:5b:43:2b:09:5b:b4:33:5b:70:
         c2:32:87:80:8d:fd:a4:22:c8:75:a2:31:26:f1:d3:9d:6e:3f:
         65:61:4b:b1:56:59:cb:aa:62:4a:25:f4:4f:2e:28:73:21:c3:
         77:de:d9:8d:34:56:01:f5:9f:c2:46:7e:39:3a:8b:4a:cc:58:
         15:af:2e:8e:62:2e:b4:44:2f:66:fb:1f:a1:8e:01:88:09:14:
         7b:6f:30:e5:3e:33:e2:3d:a8:76:37:29:e2:4f:c9:99:56:07:
         b1:71:87:1f:a5:4c:22:ac:d3:13:c4:4d:cb:31:72:2d:19:69:
         49:c0:96:47:c5:ba:60:7d:8d:48:71:aa:c0:1c:1a:30:59:f0:
         7c:72:c1:50:17:de:f5:09:af:e3:5c:0e:78:d6:4a:e5:df:1b:
         60:b6:db:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:35:37 2025 by rpki-client