Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
File:                     630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa (raw, json)
Hash identifier:          O81MUOcBYw5Y0s9Wswyfh7RSlikEJPwGez+6nC3uhuM=
Subject key identifier:   0F:9D:8F:34:44:6B:BD:7C:40:D0:F0:34:36:86:A0:6E:FD:82:0E:E5
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285848CDE10BEDED5CD65D0690CD20
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa
Signing time:             Fri 07 Feb 2025 14:00:53 +0000
ROA not before:           Fri 07 Feb 2025 14:00:53 +0000
ROA not after:            Thu 08 May 2025 13:00:53 +0000
asID:                     834
IP address blocks:        206.162.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:e1:0b:ed:ed:5c:d6:5d:06:90:cd:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Feb  7 14:00:53 2025 GMT
            Not After : May  8 13:00:53 2025 GMT
        Subject: CN=3e556f2f-aa76-42a3-9d9f-164efc1fe9db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5b:3b:8a:5c:7b:e2:d3:5a:9b:a9:ab:ea:70:
                    22:df:4c:66:e9:63:96:88:73:63:b9:30:33:70:10:
                    e0:a1:df:d7:5a:45:3b:cc:8b:3a:c7:5e:ce:51:33:
                    48:6c:e5:84:b5:6e:7f:57:71:3c:a2:3c:bd:96:54:
                    b1:ed:cc:88:a5:68:d7:51:de:55:66:1a:6f:e8:ab:
                    39:04:1d:3a:21:17:d6:e7:99:57:ba:b9:98:71:e1:
                    94:e1:06:fe:9f:7f:61:f2:7c:72:13:8d:f2:36:e0:
                    68:56:c3:08:3a:8a:7c:4b:ec:9e:61:ab:b7:0b:28:
                    64:11:a9:bd:01:ef:86:ba:27:96:a6:54:5b:f6:3e:
                    db:09:43:9c:f9:33:7a:04:e7:db:56:0c:a7:60:a2:
                    48:14:5d:8e:82:21:a3:66:ec:ff:98:95:79:6a:de:
                    e0:c1:ce:8b:50:d1:ca:29:16:69:69:cc:22:05:d2:
                    55:27:5e:3c:fa:ff:ea:db:cc:d3:a1:6f:37:58:7a:
                    85:1a:5a:97:2c:0d:10:8a:76:18:32:93:1c:87:3c:
                    59:4e:13:31:58:e8:f6:e6:83:c5:a0:68:e3:a0:c4:
                    94:1f:49:c7:8d:c3:ab:c7:ab:d6:c8:c8:08:57:77:
                    91:86:61:73:c0:9c:60:f1:7f:e5:b9:f0:28:f3:f1:
                    06:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:8F:34:44:6B:BD:7C:40:D0:F0:34:36:86:A0:6E:FD:82:0E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/630d92f5-9f8a-30c4-bbba-0c2b675c93bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:2c:ee:d8:8e:97:d3:33:99:b1:fb:1a:32:80:b8:4f:54:39:
         f4:60:84:9e:5c:8a:b6:b4:ed:c0:31:a7:c3:27:b3:a7:63:56:
         f9:2a:c4:00:7e:4c:e6:9f:43:c1:e6:20:51:54:c5:fd:d4:65:
         fa:87:49:cf:3b:05:7e:b7:47:64:ba:9a:e1:97:ce:88:25:18:
         db:dc:3a:7f:99:f2:a4:7e:67:95:99:22:e2:c5:77:14:65:b3:
         f2:a2:c3:fe:5f:a1:35:c0:6b:b7:23:39:50:cf:6f:8b:ca:f6:
         28:a7:e9:08:8a:74:22:16:73:a0:47:5b:b0:9e:9c:72:4a:d8:
         04:73:a8:21:c7:46:12:d6:26:ca:2f:2a:28:18:e5:82:7a:12:
         22:1a:12:99:97:41:c1:51:e0:36:55:38:cb:5c:6d:81:5a:63:
         7d:ec:84:e0:44:ce:dd:f1:ae:f0:8b:10:a3:86:0e:35:b0:b9:
         de:f2:f6:dd:59:a1:dc:3a:a8:35:65:1b:6c:1e:f0:8e:af:95:
         ef:38:02:b5:72:a3:8b:8d:37:78:a6:ca:6a:65:f3:0c:c2:bf:
         ce:cf:00:0e:16:4c:4c:3a:4e:8a:8a:33:51:3d:d2:a1:f7:91:
         0d:5d:eb:0f:12:00:fb:f4:35:6b:49:9e:9c:06:b5:02:66:58:
         81:af:b7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:45:40 2025 by rpki-client