Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/face1dc1-8a4c-34ce-8775-e3d247ace4e9.roa
File:                     face1dc1-8a4c-34ce-8775-e3d247ace4e9.roa (raw, json)
Hash identifier:          48/eKFa7A0X0ZKflsnycpxDAUybLCsDTWOgZ5hkHGHc=
Subject key identifier:   B3:D2:3D:E5:3A:41:70:59:66:B8:9E:D3:57:85:E7:71:B9:7D:90:CC
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A643A2BE0E03AE87424900
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/face1dc1-8a4c-34ce-8775-e3d247ace4e9.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:43:a2:be:0e:03:ae:87:42:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=dfef05fa-c1fb-4490-907e-0fcf41413e23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b6:b2:9d:51:2e:ea:96:66:43:90:c8:f8:cf:
                    6b:c8:56:1f:ee:d1:52:43:6f:8d:ec:2b:f3:3c:3e:
                    bc:86:a5:b7:97:e6:68:62:2b:c4:3a:b6:0f:68:79:
                    af:86:06:24:74:2a:6f:58:10:8f:b9:ea:22:1c:73:
                    ae:53:5b:ef:32:79:e7:2d:9b:1b:45:81:cd:69:fe:
                    0c:05:2e:9d:a4:db:5e:fb:55:40:47:1f:b8:e4:90:
                    c5:4a:3a:db:37:c8:3c:0d:68:84:93:f9:27:98:a0:
                    27:96:c6:83:f6:ce:3d:c4:ba:b0:4f:c6:f8:71:ac:
                    f0:d2:1f:eb:96:bc:4b:44:40:d4:24:a5:42:ae:b2:
                    c4:ce:64:a5:96:3d:b7:c2:66:8d:f7:31:a3:45:0f:
                    41:b1:32:67:7b:ce:cb:b1:5d:2c:0b:6b:64:95:28:
                    59:f9:ce:c8:b5:a8:ef:03:55:1e:5a:39:76:91:e9:
                    5f:bf:da:84:22:0d:63:f5:f8:78:1d:30:0c:57:78:
                    89:4a:aa:14:d0:6c:91:3a:e2:88:51:83:f4:98:9d:
                    a5:c0:cb:06:e9:d3:f9:a3:d4:63:10:9e:c2:85:2e:
                    06:1c:ef:fd:71:6b:98:d1:07:c7:ff:b8:63:9f:58:
                    7e:3c:4d:b9:f1:68:cd:f1:b5:aa:ed:f4:25:53:3e:
                    38:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:D2:3D:E5:3A:41:70:59:66:B8:9E:D3:57:85:E7:71:B9:7D:90:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/face1dc1-8a4c-34ce-8775-e3d247ace4e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.159.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:be:5f:c5:73:c6:3f:a2:d2:ac:57:72:b9:d3:85:85:ca:92:
         09:63:ee:e9:b1:61:15:67:ca:24:64:ca:86:49:ef:8b:2e:26:
         5a:8e:82:bd:51:4b:11:35:b6:63:23:7d:ac:e6:74:14:31:ca:
         64:dc:2f:00:28:b3:d3:96:54:1d:8b:38:39:50:a2:d7:ab:d5:
         f7:e3:12:29:3e:a2:ab:34:63:0c:3a:0c:88:43:36:b7:23:c7:
         df:e9:d8:9a:7d:50:9a:cf:6c:69:cc:fe:70:a1:89:fd:db:72:
         28:1c:88:d4:f9:0e:5e:75:68:d8:8e:a5:26:d5:69:1c:a1:51:
         c1:40:a3:a4:41:75:6b:13:e0:ea:75:34:4b:9f:4b:0f:f7:93:
         e9:e8:aa:b3:7d:99:08:a6:09:6d:4e:06:ca:a2:a4:86:17:f0:
         bd:24:70:c8:4e:c9:63:8e:ef:15:e5:59:e9:ba:3f:50:6a:be:
         9e:37:3a:a4:80:16:1f:58:62:4b:75:43:35:53:9b:44:f3:09:
         5c:4c:dd:f5:a4:05:cc:68:56:cc:06:f3:51:ea:ad:55:13:6c:
         9c:22:5d:9b:d4:cd:24:1a:64:c4:c4:c7:8d:61:17:19:7f:67:
         9d:b2:ff:06:32:d7:93:be:ae:ae:99:cf:62:1c:03:90:11:2e:
         de:8f:8d:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:48:20 2025 by rpki-client