Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3ed7bea4-8607-3fb1-9593-17e73a2d4dfb.roa
File:                     3ed7bea4-8607-3fb1-9593-17e73a2d4dfb.roa (raw, json)
Hash identifier:          xl/mavjbd2YIk9s56rkUtfYJYzxUm3LHnfyj0Ggk6oY=
Subject key identifier:   7A:D8:CB:17:50:49:FE:68:C1:6C:07:8B:2D:57:8E:FA:EF:46:F7:37
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A644007E3E70E86A78FF90
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3ed7bea4-8607-3fb1-9593-17e73a2d4dfb.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:44:00:7e:3e:70:e8:6a:78:ff:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=6e609ecf-8da7-4071-acb6-78f14d615e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:08:ef:5d:9d:25:38:8a:28:19:29:84:9b:
                    12:70:1b:3a:3f:58:df:ee:16:1c:03:6a:94:ee:a6:
                    7b:77:46:4c:cb:9f:72:a0:c2:dd:2e:0b:c1:5c:20:
                    0a:b4:32:cf:8c:ac:ff:5d:d5:e8:f1:41:6f:6a:fd:
                    f5:b6:21:1f:ad:01:83:c5:c4:11:c1:47:d9:90:c3:
                    f6:8f:50:00:12:f8:68:33:77:93:c6:28:07:a7:70:
                    99:dc:ed:b6:55:af:fa:14:18:de:69:60:e3:fc:dd:
                    1a:fa:0f:5d:cf:97:ef:fc:6e:f2:9b:11:48:d5:71:
                    ee:4d:04:b3:fa:bb:75:02:28:56:c7:ae:03:16:b8:
                    1a:1c:14:63:81:92:45:07:7b:10:18:c4:52:5e:6e:
                    60:1b:81:72:73:a3:02:45:b2:2b:2f:c3:b8:df:cb:
                    c1:11:78:42:96:b0:18:a4:05:00:5f:9a:c8:e3:d1:
                    ac:97:8a:6f:27:bd:48:bc:22:d3:d1:16:7e:0f:3c:
                    40:e1:2a:99:35:e7:5e:65:0c:e5:09:33:ae:59:25:
                    66:64:9e:04:c4:cf:64:6b:a4:e5:29:6a:57:1d:27:
                    1c:37:ae:62:e8:b9:3d:ab:4f:d1:3b:ce:ad:bf:27:
                    7e:f1:89:73:c2:ca:fb:44:7b:40:27:0d:9f:45:1a:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D8:CB:17:50:49:FE:68:C1:6C:07:8B:2D:57:8E:FA:EF:46:F7:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/3ed7bea4-8607-3fb1-9593-17e73a2d4dfb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:b5:c6:7f:3e:2c:31:50:a4:9c:97:ee:76:68:15:e7:90:88:
         e0:91:bb:be:79:53:9f:f4:0c:5f:78:7c:8b:f0:0d:10:29:4e:
         89:6f:87:3b:25:a9:67:ff:d3:b8:58:fe:be:75:0e:2d:ec:c7:
         cc:53:30:30:d2:dd:4d:60:e7:5e:ee:f4:90:c7:f5:9a:17:2d:
         19:fa:02:60:c0:b3:0b:ca:1c:f0:4d:67:69:ce:b2:92:8d:e1:
         bf:fe:1c:1a:30:4a:6b:ef:c2:e6:23:81:9e:9d:bb:60:39:61:
         ab:7f:d0:18:a8:8e:3e:ce:40:73:55:d5:33:ee:c0:d1:57:14:
         f6:f8:00:73:2a:0b:98:f1:58:bc:f9:e8:26:32:38:e1:06:a9:
         10:25:e9:6b:3e:5f:34:de:5c:c6:8c:af:6e:e8:eb:39:35:af:
         8d:7a:bc:3e:4f:35:29:5c:74:95:83:98:c4:4c:d6:08:25:a4:
         b3:be:65:f4:78:e9:6c:f5:b4:7b:f6:86:2f:9d:d6:5e:f2:f4:
         3e:ff:a4:3f:cb:1a:7a:27:7e:7b:9a:d8:8a:87:9f:dd:ee:f9:
         ad:b6:ea:2d:54:3c:26:4f:17:a0:ee:ec:a8:a4:cb:70:d0:dd:
         f6:7a:89:13:93:bd:f2:f2:39:18:94:4f:3b:39:e5:9b:47:ab:
         0f:e5:f2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:36 2025 by rpki-client