Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
File:                     29868ec8-a31c-3e72-b508-0ea3f499badd.roa (raw, json)
Hash identifier:          ciarbI8vND+V3xZy0kItSjnYH49/vfqSr6G3lzl8Wtc=
Subject key identifier:   01:91:D4:C3:CE:F9:8D:34:78:39:45:23:97:01:7C:54:E4:ED:EC:A4
Certificate issuer:       /CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
Certificate serial:       010D0C9F43285848C581856E75B25E8488668E40
Authority key identifier: A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     394725
IP address blocks:        206.126.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:85:6e:75:b2:5e:84:88:66:8e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35d4b9db-18f3-408a-8284-1ef0ea5bc68a
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=b42a66f2-179f-4d45-b42b-39f3f82bca9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:d1:8e:37:53:f5:0e:c0:ba:77:6a:db:e4:36:
                    02:4c:ec:22:47:b2:f6:4b:97:e2:1d:f4:07:84:72:
                    57:fd:97:ea:82:10:30:f1:2e:77:80:f4:60:4a:f2:
                    5c:1f:44:66:76:5e:bb:0c:f4:31:c3:99:8d:f4:58:
                    b4:88:a8:17:fe:ff:20:8f:b2:89:24:80:46:8d:6c:
                    e1:4b:b0:94:7c:76:f5:de:fd:99:f6:cc:7e:64:ed:
                    4f:d8:e4:f7:31:87:d5:10:de:7a:82:fa:9f:9e:92:
                    aa:00:77:f5:f5:ba:65:f0:f4:fe:3a:f1:35:a7:fa:
                    9e:c4:26:0d:d5:d1:0e:d1:cd:26:85:21:bc:04:bd:
                    77:a0:c8:d9:9c:a6:2a:ac:16:b0:5f:72:9e:fe:76:
                    f8:ab:7a:91:6d:10:c4:41:18:5d:e6:52:37:07:e7:
                    7e:24:c3:fe:cd:12:fb:d8:00:7d:77:53:7f:e9:80:
                    76:cb:03:b2:46:03:db:01:eb:e1:2a:8d:04:f5:0f:
                    1c:f8:ad:c1:02:09:ff:08:f9:55:3b:f3:84:bf:8a:
                    9e:eb:db:3b:87:01:b2:34:6b:bf:3b:e6:d0:8c:af:
                    80:6c:fb:bd:d5:b4:87:cd:c4:d2:b4:ff:80:0c:81:
                    26:33:82:55:b8:0e:72:5e:91:71:29:82:e5:20:c9:
                    5f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:91:D4:C3:CE:F9:8D:34:78:39:45:23:97:01:7C:54:E4:ED:EC:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/29868ec8-a31c-3e72-b508-0ea3f499badd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.crl

            X509v3 Authority Key Identifier:
                keyid:A1:34:5D:51:A4:57:D3:40:5B:E5:EA:5A:89:4F:26:94:CA:25:15:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/35d4b9db-18f3-408a-8284-1ef0ea5bc68a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.126.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:5b:ed:d1:65:3a:2d:07:1b:6c:ac:e0:34:da:46:a7:05:25:
         cd:0d:e7:ab:f3:d5:53:fa:a4:8b:9e:b2:50:9e:0a:8f:f6:f6:
         cf:e0:ab:6c:9d:ef:35:47:dd:81:c5:19:34:88:a9:4d:1d:84:
         81:8b:2a:49:36:50:c2:63:45:db:6e:c5:ea:89:2c:3b:82:cf:
         5b:73:e8:78:cb:58:65:bf:4e:0f:43:1c:5a:4a:40:50:9b:e0:
         19:ea:d6:da:d6:58:7f:55:ca:6e:37:e5:7c:3c:6f:2d:63:b2:
         2b:20:14:7d:e8:e1:bc:59:32:f4:6a:de:11:03:22:25:6b:ce:
         71:10:77:f0:40:01:9b:bc:2a:4c:86:25:84:e4:55:44:d1:d4:
         c4:7f:1e:8e:77:1e:97:6f:89:33:fa:ba:f9:fa:3d:8d:a8:05:
         51:cb:12:45:44:d8:bc:c9:ea:d9:cf:05:69:fb:b9:e3:aa:1d:
         f9:79:45:1f:11:9d:ed:42:f1:b1:87:12:51:98:d8:50:24:98:
         63:c6:c6:9c:04:03:9e:0a:e4:00:f2:86:65:17:97:86:83:c4:
         5b:e7:ee:c6:08:21:db:28:7f:61:dd:98:28:ae:95:37:bb:13:
         8b:96:2f:81:a1:ad:b4:46:44:8b:5c:b5:dc:9a:10:ca:42:f4:
         44:ed:0f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 12:47:15 2025 by rpki-client