Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5199229-24f9-3995-9d07-8d2eed5a058a.roa
File:                     a5199229-24f9-3995-9d07-8d2eed5a058a.roa (raw, json)
Hash identifier:          k4kkufrXj6Pxc4eHu3ck5jG2gSU3/isTQP4haS/wOlQ=
Subject key identifier:   A3:65:58:4C:50:D9:4A:2B:F6:D5:42:FE:79:11:07:FB:1D:B3:66:CA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A643EBED4716D263095180
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5199229-24f9-3995-9d07-8d2eed5a058a.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:43:eb:ed:47:16:d2:63:09:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=da737604-cbda-4f55-b0d5-de5325f4b8c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d4:7d:81:89:ac:2c:d1:3a:58:a8:17:fe:1e:
                    64:9c:56:f0:3c:5c:aa:4c:06:9e:d3:f4:0a:52:9a:
                    77:df:ab:eb:02:46:e4:31:bd:ca:74:c6:b1:dc:3d:
                    18:1b:5f:96:ab:32:24:de:c5:d2:85:d4:be:2f:02:
                    b1:cc:51:e3:d7:81:24:00:8a:88:f6:c0:8a:87:53:
                    c6:b7:5b:cd:56:5a:3f:9c:d7:27:53:4a:6e:9d:fa:
                    9a:39:3b:95:bd:72:86:a5:4c:b0:f2:6c:45:36:a7:
                    b3:b6:f2:d2:ec:bb:55:3e:a4:ab:60:2b:46:f0:3a:
                    fb:89:03:19:b0:32:fc:dd:03:04:1c:6d:98:7e:55:
                    a6:2b:9a:5d:e8:cc:a4:c2:31:05:e4:36:60:e9:e4:
                    55:50:33:24:af:70:6a:ed:e4:62:e3:0d:c2:14:84:
                    8f:50:15:bf:6f:c5:73:81:bf:5a:a6:4d:be:ef:95:
                    71:e4:bd:10:76:19:a7:b9:8e:07:5a:c8:f1:6b:e7:
                    0b:f9:71:34:2c:73:53:d9:60:f7:4d:43:a6:41:64:
                    9c:6f:c0:7e:94:6d:15:9a:7a:9c:ed:21:e2:3f:9f:
                    1c:c2:e5:e2:3b:84:3f:f8:47:31:2d:97:35:8c:c8:
                    00:50:78:04:88:cf:cd:7c:d2:9f:05:78:b0:37:59:
                    eb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:65:58:4C:50:D9:4A:2B:F6:D5:42:FE:79:11:07:FB:1D:B3:66:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a5199229-24f9-3995-9d07-8d2eed5a058a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:39:c2:d3:4f:54:96:cd:48:20:72:cc:1d:94:6a:59:db:4e:
         78:c2:88:d4:7f:8a:50:ff:35:3b:5e:b6:25:d7:70:8b:b0:61:
         84:9d:2c:cc:d0:b5:23:75:0c:e0:5a:bf:44:bb:63:81:8d:fe:
         39:fa:f8:c1:01:1c:e2:e8:50:26:5b:02:a5:bf:35:0e:e2:d7:
         e6:4a:19:f7:6b:d0:5a:78:10:7b:57:7c:a8:a2:39:4e:fc:cf:
         f9:05:e3:f8:70:9b:13:b2:3e:80:41:32:8b:91:76:b8:01:25:
         5e:c5:09:6d:0e:e3:9f:a5:bd:c7:a0:4d:20:6b:51:59:3c:e6:
         e8:1d:ff:87:c9:95:99:20:e9:be:72:b8:4a:6e:f1:43:28:38:
         79:c2:4e:0d:25:06:ea:4e:fa:6b:14:f5:ae:56:62:d4:95:e5:
         df:e0:6e:29:12:f5:50:e1:54:0b:51:89:a0:b7:50:ad:e6:fe:
         24:8f:af:55:e2:27:ad:be:dc:75:36:d2:5a:f6:91:62:86:93:
         26:6d:c0:b8:fe:47:c2:a7:47:2a:6e:77:1e:0f:44:e0:05:6e:
         ce:91:14:ee:6f:09:18:64:97:0b:15:f8:1e:75:56:06:e2:25:
         40:97:2c:39:9c:ac:26:14:b8:b9:f8:5f:e9:88:13:8b:ec:1d:
         84:ca:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:46:05 2025 by rpki-client