Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/b6572778-c0e8-3257-a14e-06190e8464d6.roa
File:                     b6572778-c0e8-3257-a14e-06190e8464d6.roa (raw, json)
Hash identifier:          9FCnFkkR1NkKoiqrvpupDrLgP61qYRaP0Ei68dFH3eo=
Subject key identifier:   5D:DA:63:9F:18:CC:EC:55:F9:E8:85:07:50:1F:33:41:E5:A5:7B:3B
Certificate issuer:       /CN=9512e4e8-1b19-4250-996e-7d86c6963211
Certificate serial:       010D0C9F43285848C6E63262FED097DAE1404EF4
Authority key identifier: E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/b6572778-c0e8-3257-a14e-06190e8464d6.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        198.204.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:32:62:fe:d0:97:da:e1:40:4e:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9512e4e8-1b19-4250-996e-7d86c6963211
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=ee35c317-8726-4261-8c26-08a9479e902d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:af:0a:a6:52:fc:06:79:a7:76:d0:d2:63:
                    ad:0d:c7:07:60:25:f6:9e:9c:01:4c:64:c0:c7:e9:
                    b8:70:5b:e3:3b:03:67:ed:66:28:b3:11:93:35:1f:
                    26:c1:6a:32:f5:a5:4e:ce:8c:c0:00:f1:a5:99:4e:
                    39:e7:a0:e1:a1:60:b1:12:88:5f:54:f7:9c:99:74:
                    05:aa:a4:d1:2a:6d:fe:e2:d7:fa:21:10:10:c2:29:
                    e0:6e:db:0e:6f:9d:80:83:6d:52:fc:58:06:de:80:
                    6b:1c:e0:ed:1e:2f:72:36:14:4b:78:20:2d:c6:86:
                    9c:8f:44:f7:4b:73:69:7c:35:ef:5c:1e:28:de:7c:
                    02:77:f9:19:c8:37:5c:1a:5e:b2:ab:c8:1c:a4:cc:
                    a3:0f:4e:ee:2a:9d:18:5d:27:79:88:f1:43:55:3c:
                    d8:c9:75:43:a9:c2:b1:8e:13:cd:bb:74:44:87:58:
                    b0:7e:3a:4a:10:a7:7b:f3:d7:91:b0:f1:20:22:1a:
                    4e:c9:c3:4e:2b:5c:c3:b8:47:03:99:87:cc:bd:53:
                    28:c2:49:e8:79:ef:ca:f2:38:98:e8:43:60:95:ab:
                    c6:1d:c0:7b:25:72:d1:d0:b6:73:7a:83:1d:25:fe:
                    20:13:6f:1c:94:0a:33:32:09:b7:64:5a:8e:de:c1:
                    e5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:DA:63:9F:18:CC:EC:55:F9:E8:85:07:50:1F:33:41:E5:A5:7B:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/b6572778-c0e8-3257-a14e-06190e8464d6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211/9512e4e8-1b19-4250-996e-7d86c6963211.crl

            X509v3 Authority Key Identifier:
                keyid:E6:87:4B:4A:F4:E4:FC:EE:A7:7A:68:BE:30:80:4A:8C:8F:03:91:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9512e4e8-1b19-4250-996e-7d86c6963211.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.204.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:80:31:6d:c7:30:9f:b2:be:46:f4:7c:1b:67:af:21:5e:8a:
         0d:a2:bb:3f:29:5d:fd:d7:12:4b:06:1f:c9:a4:73:b7:d7:83:
         c0:00:6d:4c:56:c3:ea:6a:67:5c:c0:7e:ac:83:be:aa:88:4e:
         7f:7f:bb:81:dc:11:e9:b6:15:be:77:5e:f4:bd:ab:75:76:d2:
         1f:56:fb:7d:f2:6d:7e:e0:7d:14:ab:75:ce:06:a4:7b:a2:97:
         8c:56:97:93:7f:32:22:f3:6e:c5:18:f5:55:4c:c8:59:22:16:
         2a:70:64:33:5e:12:45:a6:d8:85:b4:4f:66:65:de:c7:c0:83:
         df:2a:30:50:c6:f4:56:ee:e7:06:ed:a2:8e:7f:5f:b1:7f:d0:
         a0:58:42:34:9e:65:a1:49:76:b2:5e:91:35:74:60:1f:22:df:
         f7:38:cc:20:ab:f2:10:5b:3c:10:64:e5:29:5a:fc:3a:eb:57:
         c0:fa:c6:ee:8a:5e:83:ec:93:66:94:c1:93:7a:98:95:54:73:
         24:ca:69:f6:9b:3c:9f:29:e6:9c:fd:c3:0f:4d:ed:c3:14:70:
         c7:33:fc:89:d6:6a:24:f2:d3:7f:e6:8b:20:f9:c9:3e:e1:4c:
         03:43:04:6e:60:b2:44:23:54:32:a2:37:81:f9:4f:aa:eb:d7:
         9c:13:bb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:38:57 2025 by rpki-client