Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f27c78a9-bbca-3af8-bc6c-b68671d18bab.roa
File:                     f27c78a9-bbca-3af8-bc6c-b68671d18bab.roa (raw, json)
Hash identifier:          Zex6BwDjGXK/Nmfvg5YvHiD37taZfv2kquGZxDA7BEo=
Subject key identifier:   7A:DA:40:50:52:38:B7:48:C3:79:B1:C4:56:A6:17:19:E1:A8:C0:61
Certificate issuer:       /CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
Certificate serial:       010D0C9F43285848BA563F02D46A8B6BE0EC7C00
Authority key identifier: C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f27c78a9-bbca-3af8-bc6c-b68671d18bab.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     54103
IP address blocks:        206.246.98.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:3f:02:d4:6a:8b:6b:e0:ec:7c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48c974e9-82f6-4ede-812c-5b9302f0c7cc
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=fea84a0a-78ad-4396-a6c3-aaccd15bc923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:8e:1d:dc:a4:e5:94:74:09:52:85:b6:3d:55:
                    45:1f:a6:f1:64:f9:e2:4a:47:0b:d8:b4:1f:e2:be:
                    a8:29:f0:6d:11:50:2c:31:66:3d:cf:5c:f5:3a:57:
                    dd:5c:9f:fe:14:a0:43:29:11:90:1f:97:b5:26:05:
                    8b:e2:a6:52:d4:3d:b5:63:19:38:ae:59:1c:b0:73:
                    d2:d7:76:c1:d2:98:6c:e5:83:17:99:5b:fe:66:45:
                    9b:1b:3d:01:70:5a:03:b5:49:f1:4a:b3:03:c3:42:
                    e7:07:38:f1:2c:3c:ce:d7:96:d3:8c:cb:aa:eb:9d:
                    8f:07:4f:92:af:c5:40:38:93:9e:b5:30:e0:d3:a0:
                    de:48:36:35:bc:10:76:a5:4c:b0:f9:55:a0:58:3b:
                    71:d9:35:b0:a4:72:e9:88:b0:ed:fd:66:f2:94:8d:
                    9d:ff:de:98:2e:49:2a:3f:d3:09:e8:28:74:b9:69:
                    5b:ab:75:02:0c:9a:fe:54:72:45:14:bb:3a:bf:09:
                    fb:b3:cd:a2:82:95:40:49:55:28:92:55:95:e4:bb:
                    59:c5:a1:98:ec:a7:6b:ed:e0:ac:1a:dd:f3:21:73:
                    c9:17:c2:4a:3a:1e:8d:98:4e:89:3a:cc:fd:b3:bc:
                    99:fd:c9:be:a0:b9:33:01:a5:32:55:57:3c:cc:6f:
                    e5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DA:40:50:52:38:B7:48:C3:79:B1:C4:56:A6:17:19:E1:A8:C0:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/f27c78a9-bbca-3af8-bc6c-b68671d18bab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc/48c974e9-82f6-4ede-812c-5b9302f0c7cc.crl

            X509v3 Authority Key Identifier:
                keyid:C4:16:34:F3:51:6F:6B:E6:30:BB:50:16:8D:70:1D:08:1A:18:28:33

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/48c974e9-82f6-4ede-812c-5b9302f0c7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.246.98.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:db:bd:27:e0:12:71:b7:31:67:6c:c8:ae:38:39:ad:e7:45:
         1c:20:6a:26:f4:ec:1c:de:0d:ff:c6:a0:2d:87:cb:73:8f:e0:
         e8:20:f4:f1:6d:05:f8:9f:39:bf:fe:ca:fc:72:96:ea:47:ae:
         ae:dc:94:0a:53:86:68:70:29:fe:06:82:51:1c:4b:ca:e2:cc:
         ab:13:58:4d:e4:40:55:3a:e5:d8:0d:47:a1:ff:30:cb:c7:ad:
         6e:8b:b2:8a:d6:18:f9:04:68:48:03:e8:d2:52:4f:6d:e6:8e:
         7a:44:68:59:c7:51:94:92:68:69:81:76:7a:85:82:b7:4f:b9:
         35:e5:1d:5e:31:30:db:6a:ae:5a:a9:8d:2b:de:6b:27:fe:4c:
         7f:37:54:ae:b5:68:82:69:78:4e:20:8b:72:3c:ad:1e:7b:75:
         85:e5:6e:1e:ae:e3:5d:e2:1c:ab:88:2d:bd:0e:d7:70:44:0f:
         2e:6d:c4:b9:1c:eb:55:19:a8:d2:e7:f2:e1:86:5a:45:9b:95:
         9e:b7:86:7f:6b:0d:85:c5:41:7f:21:89:98:fe:6b:48:c8:c4:
         85:db:c2:ad:d9:48:16:f7:c2:b3:9c:9a:22:53:6f:ed:d5:36:
         23:e1:bb:04:59:11:68:e3:3b:13:ef:4d:21:61:df:d8:fb:20:
         ce:37:94:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:11 2025 by rpki-client