Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
File:                     f2b995eb-586f-39ad-969c-884580b42a0e.roa (raw, json)
Hash identifier:          KxMi87k0MOXVJkCSbMBkjquRE763MK8qgjeuHDPiF1c=
Subject key identifier:   DA:CA:7D:E5:53:87:AE:7E:FB:8A:2A:76:79:59:E4:59:D5:66:02:FD
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848F926AF0D63E026EA42462420
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     25899
IP address blocks:        206.192.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:af:0d:63:e0:26:ea:42:46:24:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=45503ed0-1ea7-4fea-a37b-4eeb61330303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:cf:79:38:7e:93:9a:9c:23:d5:17:31:3e:97:
                    eb:22:bf:55:ba:f8:d3:0e:47:ef:f1:e0:76:85:d1:
                    23:5f:f5:09:b2:1f:68:08:19:89:13:bf:9a:c2:b0:
                    0c:4b:d6:de:4a:ad:48:54:bb:d5:96:cb:c8:21:86:
                    30:f2:cc:17:b0:13:a2:e7:74:46:4e:50:69:2d:5a:
                    12:59:4c:27:ea:b6:82:17:89:8f:48:28:2f:7d:52:
                    15:8e:a5:3d:30:04:66:46:c8:ca:1a:89:48:76:87:
                    a2:bd:21:bd:58:b4:a0:75:f2:39:e6:ac:69:39:3d:
                    a6:71:7d:02:b0:81:cb:c9:20:38:fc:f2:36:8d:8a:
                    8d:52:2b:4e:86:1e:92:ac:00:dc:e1:72:2a:79:ab:
                    67:b6:64:a5:4a:ea:ac:e8:39:1f:46:46:91:13:74:
                    9e:87:c1:b3:3c:78:91:cb:87:5a:52:ad:f1:44:5d:
                    e2:ea:93:26:8a:82:d4:f2:98:d8:56:87:cc:e7:0b:
                    44:0c:4f:7c:0c:14:bd:8b:fa:1f:48:e5:dc:6a:73:
                    af:6b:ed:17:12:20:1f:00:da:33:a7:48:15:6b:3c:
                    e6:8b:30:d6:58:b8:7a:e4:90:1e:b2:3c:8c:55:c7:
                    66:c9:aa:95:1f:96:7e:6d:2b:4e:80:fe:25:a1:89:
                    bd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:CA:7D:E5:53:87:AE:7E:FB:8A:2A:76:79:59:E4:59:D5:66:02:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f2b995eb-586f-39ad-969c-884580b42a0e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.192.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:a0:02:16:2b:2b:6b:4d:56:61:52:be:24:26:dc:4b:11:13:
         98:b0:b9:bd:24:a5:dd:43:13:20:a4:f1:70:7b:82:9f:2c:ce:
         85:b0:3f:32:82:dc:1a:e4:13:43:12:1e:66:8f:e0:e8:99:01:
         a7:91:1c:ef:2a:0b:68:d1:58:4b:a7:c2:d0:f6:89:e4:4d:87:
         18:65:f3:3f:da:52:36:23:b0:1e:0a:f3:6e:72:19:a0:e0:49:
         a8:09:00:55:77:e2:d9:22:1d:9f:ba:cd:bf:51:87:75:4b:b5:
         b4:60:74:74:41:8c:11:d0:a0:53:78:c3:18:44:f9:de:32:52:
         a0:3d:37:e4:b5:48:cf:b4:4f:79:26:c1:3a:fa:45:46:cb:62:
         67:f8:d3:37:b4:98:21:0f:57:77:27:92:35:9b:47:a3:dc:fd:
         b4:b9:a1:58:33:97:80:88:ea:6a:7b:16:96:03:30:9e:ac:35:
         a0:87:a0:89:06:fa:01:92:30:4c:03:c6:4a:fd:27:d5:73:c8:
         5c:b4:96:01:30:c5:84:9f:43:7d:7e:39:c1:8e:50:9e:ef:45:
         7b:63:07:38:1a:51:31:fb:41:5a:a4:c6:73:d7:17:6b:b1:48:
         16:bd:40:ef:91:cf:00:71:6e:01:6f:94:4a:80:a0:1d:35:78:
         79:1c:a9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 04:57:21 2025 by rpki-client