Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/6d4b4d6c-6db9-3d24-a42f-2728ea21d9ea.roa
File:                     6d4b4d6c-6db9-3d24-a42f-2728ea21d9ea.roa (raw, json)
Hash identifier:          7EnRZjLiHY69dAZ8JxxmqKbUG8KEsOH3GmkZp/ztauc=
Subject key identifier:   4E:D8:A3:11:DC:48:16:2F:B0:A4:02:97:8C:65:F6:27:21:3D:DE:63
Certificate issuer:       /CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
Certificate serial:       010D0C9F43285848748B2213773B11D77366C9A0
Authority key identifier: D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/6d4b4d6c-6db9-3d24-a42f-2728ea21d9ea.roa
Signing time:             Mon 06 Jan 2025 14:00:52 +0000
ROA not before:           Mon 06 Jan 2025 14:00:52 +0000
ROA not after:            Sun 06 Apr 2025 13:00:52 +0000
asID:                     48254
IP address blocks:        206.130.112.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:74:8b:22:13:77:3b:11:d7:73:66:c9:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967a98b0-100f-4e69-8a9f-bceadb7e9aae
        Validity
            Not Before: Jan  6 14:00:52 2025 GMT
            Not After : Apr  6 13:00:52 2025 GMT
        Subject: CN=3ae6f86b-c109-4339-84ad-127e387c7f74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:18:08:0d:b0:16:24:01:f8:29:7a:73:c7:bf:
                    81:29:d2:be:4e:b3:81:ca:9a:4f:5b:3b:b0:f5:f0:
                    ac:16:7d:16:4c:4c:59:12:74:9a:41:fc:de:1f:0c:
                    96:91:a5:1c:e3:56:ed:95:2d:61:4f:5c:2f:b6:b9:
                    e3:34:20:80:ff:a9:18:af:77:d4:02:12:07:97:03:
                    8f:b8:e5:fd:07:d1:9b:0d:e1:55:e5:2c:ca:9d:f5:
                    31:92:a9:81:7f:6f:4c:0e:6d:28:ce:b1:fe:47:bd:
                    71:1a:e6:1f:2b:ba:69:1a:a1:1a:21:33:cb:8a:a2:
                    01:e5:93:23:ae:c8:1f:1e:e1:bb:6a:63:d7:27:1e:
                    ec:11:cc:31:ed:fa:36:db:f4:2c:2f:93:7b:58:5b:
                    06:13:cd:b5:b5:62:b4:97:aa:df:05:60:4b:f4:30:
                    81:f6:42:28:a7:a6:c6:8a:ef:a7:da:9d:7e:24:ce:
                    fe:79:10:fb:88:90:33:52:81:47:e3:2d:25:08:82:
                    79:6f:0b:dc:21:cc:53:7f:5d:8d:be:1b:77:88:5d:
                    c2:c9:51:d4:eb:e3:c4:8a:fb:f2:e6:7c:37:15:6d:
                    80:df:aa:79:dd:93:33:e3:1e:87:12:17:cb:c7:92:
                    17:e1:93:e5:80:7f:f4:53:bf:76:6c:d9:2c:a2:09:
                    5d:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D8:A3:11:DC:48:16:2F:B0:A4:02:97:8C:65:F6:27:21:3D:DE:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/6d4b4d6c-6db9-3d24-a42f-2728ea21d9ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae/967a98b0-100f-4e69-8a9f-bceadb7e9aae.crl

            X509v3 Authority Key Identifier:
                keyid:D7:58:38:BE:C8:09:07:F1:E1:A0:15:B7:87:BF:21:AC:00:49:39:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/967a98b0-100f-4e69-8a9f-bceadb7e9aae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.130.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:22:a3:c2:13:ad:d8:ea:bf:0a:7b:a3:f4:62:0e:a9:57:48:
         4c:66:2d:42:0c:be:ae:df:28:d0:65:59:f2:fa:bc:21:64:76:
         3e:f4:7d:61:e2:50:ef:bd:5b:b4:32:04:ee:71:06:ae:c8:52:
         f1:a9:6f:17:d6:17:ef:6d:9f:5c:b5:74:5a:da:71:8d:e6:a7:
         b8:ec:59:98:8b:d1:76:75:26:40:cd:28:a9:9b:b0:8c:12:bf:
         38:af:de:32:d0:2e:e8:58:14:05:4b:5e:13:b1:cc:c0:74:29:
         9b:46:99:8c:40:06:d9:c3:5b:d7:be:b3:47:47:04:c3:97:89:
         a0:b5:5a:c9:9e:50:99:25:70:c3:22:57:c5:dc:b1:fe:a3:c3:
         7d:3b:93:52:26:d9:cc:29:61:ee:42:58:38:39:6e:db:e8:6e:
         59:76:2e:40:f8:0a:c3:f2:86:fc:ee:88:7a:39:92:b7:0c:79:
         52:59:cb:43:34:84:c4:e4:d1:4b:62:19:7d:ed:61:21:c7:69:
         3e:47:ac:c3:b5:16:a9:b6:bc:d3:81:93:ca:f3:b4:e1:6f:dc:
         0e:dc:40:59:8b:85:53:d2:7c:a2:cb:08:61:ec:0b:db:28:51:
         b7:d4:9f:34:0d:c2:dd:6f:e7:92:d5:33:62:53:44:61:e1:14:
         00:be:88:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:40 2025 by rpki-client