Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31f07995-6220-3eba-9b50-1df91e026deb.roa
File:                     31f07995-6220-3eba-9b50-1df91e026deb.roa (raw, json)
Hash identifier:          OEOrbNCXuSnCVU1XNyef9wExwancfHklwcCR9y3YWCI=
Subject key identifier:   61:89:99:02:7F:F9:06:96:AB:00:11:A7:3C:95:F0:AD:25:36:F3:68
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285849244E6C104D503B5576F67400
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31f07995-6220-3eba-9b50-1df91e026deb.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        206.198.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:6c:10:4d:50:3b:55:76:f6:74:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=c6eb321b-d725-4102-b624-5ba5598f974d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4c:39:a4:be:2a:98:f8:97:64:f5:2a:3b:2c:
                    c5:3b:f1:2d:f7:a1:66:79:15:59:72:46:62:b5:f6:
                    2c:23:dd:02:f8:87:15:09:46:43:0e:c6:36:b6:30:
                    ef:c9:78:67:95:33:66:02:6b:02:f1:3f:4e:67:d8:
                    cd:56:00:d2:69:f9:93:7b:d7:8d:52:23:e1:51:6a:
                    c7:b5:c5:bd:e6:16:7c:8e:c3:80:af:13:95:bf:69:
                    8a:4e:49:be:68:2e:ee:02:27:b5:91:fd:d1:2a:48:
                    ce:6d:07:fd:d0:30:6f:6e:a2:7e:f4:a2:9f:c7:35:
                    2f:c0:64:8b:63:7a:ae:80:8f:c1:0a:59:0e:46:eb:
                    ba:40:08:ed:f4:09:41:a6:71:a8:a8:93:9d:75:73:
                    d6:d6:b8:72:20:88:54:54:dd:38:28:b5:fd:04:da:
                    af:f0:a0:da:bd:9d:2f:a8:19:88:ef:6a:d6:f9:43:
                    00:81:65:de:49:80:e1:3e:46:a5:c6:0e:b2:1c:13:
                    82:b7:27:c3:98:aa:fe:73:04:56:f4:a4:c3:6e:78:
                    c2:ee:27:bc:2d:9f:3f:0f:a8:d8:d3:5c:ec:22:8b:
                    3d:88:2b:15:38:b9:15:89:39:b2:9d:be:46:f5:b4:
                    eb:ff:13:d6:6a:7c:ee:67:3f:e5:03:6d:fa:70:39:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:89:99:02:7F:F9:06:96:AB:00:11:A7:3C:95:F0:AD:25:36:F3:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/31f07995-6220-3eba-9b50-1df91e026deb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:86:73:c0:d5:99:08:61:5c:34:88:d5:4f:7d:9a:bc:e8:1d:
         5d:b7:01:c6:35:18:18:32:5f:f9:2b:d1:83:2a:07:e1:67:ed:
         91:55:e0:86:f9:43:b1:22:fb:24:be:e2:2a:dc:0d:dd:79:2e:
         77:ff:b6:e5:a4:c3:ef:e3:3f:8f:e0:c1:1d:40:91:f2:5e:f9:
         56:78:01:3e:1f:df:a0:2d:b8:8c:82:ef:55:8f:f5:64:9f:e3:
         37:f7:97:9e:b9:49:85:de:9f:e2:69:83:21:9f:c0:f2:5f:34:
         5f:0b:80:6f:64:75:4b:e8:50:b6:07:b7:2a:0b:79:20:a8:1f:
         da:47:d7:4b:ba:a6:ca:5f:5a:fb:67:9c:86:09:52:52:fe:04:
         73:e4:3b:65:30:b7:09:c5:d1:0e:d5:7e:a5:56:83:fb:5c:bd:
         79:dd:35:2d:7a:48:64:3e:09:f2:b4:3d:a5:68:14:1a:28:9c:
         ff:bc:b6:dc:32:3c:02:f4:bf:28:fb:60:a6:dd:a9:94:fb:1a:
         38:18:84:c9:7c:57:df:ba:a5:df:0e:e0:05:26:66:05:01:5b:
         00:17:9f:88:9d:20:c2:0b:c1:55:1b:23:f5:58:4f:eb:5d:ab:
         d6:49:45:54:40:1f:26:40:81:0a:b3:e4:02:00:96:b5:75:eb:
         fc:a7:a7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:02:41 2025 by rpki-client