Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
File:                     6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa (raw, json)
Hash identifier:          iOrWvE+UdRu4PFy3LGSGLmQp0kB3vvaxTeJdd2N+y6Q=
Subject key identifier:   47:72:66:43:14:EE:2E:D7:38:0C:D3:B7:33:CA:5B:E7:C9:EE:DF:AD
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584937D93913D093671B5F87E210
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     398210
IP address blocks:        168.220.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:39:13:d0:93:67:1b:5f:87:e2:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=504db7e8-65b3-438f-8324-5f80275455a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4b:79:10:f0:3c:a5:07:65:28:e7:fe:d2:d0:
                    5b:1f:e6:53:62:6a:2b:18:55:06:23:04:28:5d:7a:
                    a4:a8:89:27:3c:de:5e:d1:58:73:df:4a:c0:bf:eb:
                    c4:89:92:90:97:6f:5f:a0:bd:16:0c:2f:46:89:d5:
                    ce:62:6d:08:43:f1:1b:32:37:06:1b:2b:44:e0:97:
                    93:15:16:88:3c:43:c5:26:da:d3:0c:8f:ad:f3:5d:
                    5a:38:6b:a7:bd:0a:2b:a4:12:49:2b:59:c4:84:33:
                    5a:17:c5:8a:06:50:13:92:4f:d7:3d:e0:ab:bc:ff:
                    a1:8d:e2:ca:57:09:80:d5:cb:ff:8e:e6:ed:12:fb:
                    8e:03:a8:57:08:fc:c0:e7:dc:18:91:20:40:88:61:
                    fd:a9:fc:f7:ae:dd:a1:97:fe:d3:c0:62:23:16:69:
                    ec:bf:d8:94:95:62:36:ff:30:22:a8:65:68:78:ad:
                    13:65:ec:0d:3a:b7:c8:e1:26:af:f8:2b:a0:16:b9:
                    97:21:28:3d:0d:9d:c4:0c:c6:e7:4f:b7:ec:f5:5a:
                    8b:ab:29:66:21:5a:44:75:ef:d7:8e:69:36:a8:e5:
                    81:66:67:8b:ef:35:8f:4f:ab:dd:e3:a1:42:bc:cf:
                    f1:7c:78:d7:d1:d5:6f:50:94:01:05:89:7b:d2:4a:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:72:66:43:14:EE:2E:D7:38:0C:D3:B7:33:CA:5B:E7:C9:EE:DF:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:6a:a1:1f:96:6b:e2:53:27:6c:57:35:79:dd:21:83:05:57:
         19:c8:25:36:76:b5:c2:98:b0:24:c5:eb:99:fa:f2:67:57:90:
         a2:e3:6e:c3:e9:5a:c6:d6:e1:e1:9a:99:98:db:4c:37:65:9f:
         43:3c:9d:0a:bb:eb:57:27:83:94:03:9f:e6:b4:5b:23:69:86:
         72:70:d6:50:50:31:ce:ba:a5:36:e1:74:50:75:34:77:d9:a3:
         11:d8:89:4c:9f:c1:94:88:fc:b8:d2:bb:19:51:2f:e9:f1:a3:
         40:bd:a0:36:5c:cc:6a:0f:d4:94:bc:e3:8c:e2:af:65:1c:31:
         a2:b5:c2:92:89:61:fd:37:40:ed:de:0b:03:1f:fe:f6:64:fb:
         ab:7f:c1:aa:0b:cf:45:1c:a0:02:be:a0:09:99:96:96:47:36:
         ea:02:72:ff:52:01:09:c6:ce:e0:2e:68:17:1d:9f:55:ef:60:
         a8:5f:59:76:64:f9:5a:1f:8d:ce:09:9e:ff:37:85:32:d2:1d:
         3f:30:50:0b:05:77:1a:42:79:f4:ce:77:e0:8f:78:8c:b2:8a:
         42:de:a7:6b:a3:2d:27:a8:50:f5:34:cd:7b:d7:6e:60:f6:0c:
         1c:81:87:fd:bb:9e:ce:66:dc:4b:5c:43:38:b7:34:19:f7:b4:
         07:1d:8a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:13:24 2025 by rpki-client