Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9285789b-3ec9-3107-9642-072a232ed199.roa
File:                     9285789b-3ec9-3107-9642-072a232ed199.roa (raw, json)
Hash identifier:          +DPy4yBXGOHBK554kIZEvWDJfiP9rU5W3YOYNcmZoAc=
Subject key identifier:   B8:BB:5E:4F:E2:0D:30:74:B6:B1:7F:31:A7:45:A1:F7:83:23:A3:6E
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6C367075AFB70649C3550
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9285789b-3ec9-3107-9642-072a232ed199.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.123.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:c3:67:07:5a:fb:70:64:9c:35:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=293bfa7a-a74e-4290-ba39-49f6908feeff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:d8:82:73:14:5f:d6:68:df:e9:3d:af:c8:
                    17:ba:14:d2:11:df:7a:76:b5:c8:19:15:27:48:07:
                    06:f1:40:77:1b:5e:1c:e8:0f:cb:65:be:c4:63:cb:
                    a1:32:38:74:a4:58:c0:df:f8:54:23:21:a1:80:d2:
                    24:5a:0f:aa:77:70:49:6a:90:08:97:5a:06:22:94:
                    6e:f6:ba:4b:9f:87:e4:73:6c:29:49:56:49:62:b3:
                    a0:49:ca:68:cb:79:9b:95:54:53:bc:ef:f0:f8:63:
                    74:e2:00:09:2e:48:ce:e0:73:da:65:5e:37:98:b0:
                    a1:11:73:5d:d2:62:33:83:29:58:d1:41:51:67:cc:
                    05:87:3a:c5:73:3a:f5:d7:85:0b:49:56:2e:22:69:
                    cd:74:b4:de:79:2c:9a:0e:fa:bd:ff:85:4b:df:a1:
                    54:19:fd:15:a8:40:03:72:70:63:4b:ad:1f:b2:17:
                    83:23:4e:db:ee:e9:67:dd:7d:18:d4:8c:3e:4a:1e:
                    0d:f3:3a:75:32:ec:d8:8a:2f:f4:01:a3:86:34:3d:
                    d3:e3:0e:a9:0a:43:af:87:03:75:4b:8d:ad:e3:95:
                    16:8f:15:fa:01:42:10:be:51:01:26:8a:b4:a4:ee:
                    b5:52:5d:99:6c:b0:d1:1a:73:44:60:8d:8d:2b:f7:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:BB:5E:4F:E2:0D:30:74:B6:B1:7F:31:A7:45:A1:F7:83:23:A3:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/9285789b-3ec9-3107-9642-072a232ed199.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5b:ab:a7:c7:cd:d9:a8:12:72:ef:f4:7e:62:bb:8b:41:a2:
         37:e8:c4:bd:10:75:6d:7d:82:c7:32:a1:35:c3:f1:62:b7:e9:
         83:3e:65:19:d9:ca:5a:67:59:ff:76:09:25:3c:60:7b:8d:32:
         17:81:f6:6c:1b:3a:1f:3f:86:fa:8b:08:90:b5:11:0d:1f:34:
         a7:7f:fd:f5:ca:ec:88:2a:f6:41:93:b8:6f:ad:c9:5e:35:16:
         e7:df:dd:81:35:d6:1f:04:27:d7:1e:a1:4e:b6:96:bb:f4:99:
         3f:31:24:38:44:44:2a:70:d5:eb:ba:a2:3a:a0:8d:19:1d:2a:
         31:9f:38:f1:3a:1a:61:c8:87:69:cd:19:a4:91:70:ab:07:3f:
         c2:90:77:7e:f3:69:ec:e2:59:15:35:1e:b5:aa:e7:ab:c5:0e:
         ab:96:e7:cf:2f:17:dc:9b:2d:c3:5c:c6:f4:9f:a6:c7:39:00:
         71:cc:d2:79:4a:f1:7b:7a:fa:90:58:a6:22:1d:b8:b9:67:a4:
         58:a2:b1:a9:c0:81:3d:8f:d5:55:49:53:bb:48:5b:91:74:37:
         ae:e8:40:60:26:f7:1d:f0:ef:5b:41:70:30:84:ba:13:9e:3d:
         6c:dc:88:d2:d6:fe:99:a1:98:4b:00:a7:f6:05:ca:6a:a8:57:
         c0:f6:59:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:20 2025 by rpki-client