Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/6b88225d-6983-3598-a42b-6ee267107a04.roa
File:                     6b88225d-6983-3598-a42b-6ee267107a04.roa (raw, json)
Hash identifier:          dhFtJBD5dxt3ItolyU1Xgg/UvhhKonek+5MjPbOYAvc=
Subject key identifier:   17:2C:F4:79:69:83:20:47:BF:0B:2D:24:8F:AC:AD:48:93:51:28:D4
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584965E97B5BDB503879B3272DA0
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/6b88225d-6983-3598-a42b-6ee267107a04.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     26548
IP address blocks:        206.162.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:7b:5b:db:50:38:79:b3:27:2d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=4fbd3bd0-ac4c-497a-ae5c-ec95aa381e47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:e8:6c:6b:bc:ce:55:80:20:d3:7d:39:07:aa:
                    51:10:08:06:16:92:6f:b7:a2:d1:27:e1:c6:28:c3:
                    9d:3b:ec:82:5f:75:f7:d0:87:d3:f3:cd:4c:bd:cb:
                    85:f8:dd:b6:ac:78:cf:8d:7b:19:ed:05:d6:61:2a:
                    c5:3f:0a:27:ba:42:7f:c3:01:03:d6:9b:be:ff:ec:
                    bd:bb:4c:e5:63:5a:16:8e:0b:31:ad:77:3e:5b:d9:
                    89:4c:eb:48:57:90:22:1d:56:da:89:ad:51:97:b8:
                    d1:18:7a:72:26:bf:e7:75:81:e0:34:e5:1a:eb:36:
                    f4:21:4b:1a:d4:96:64:2f:48:34:49:a3:c3:e3:f4:
                    1f:c7:38:57:cb:ae:9f:aa:7d:cf:7a:be:5c:13:9a:
                    6f:ff:c1:70:f9:cc:41:6d:8b:25:df:01:63:b2:5f:
                    d2:42:47:c7:26:c2:0a:8d:90:45:f0:23:2e:79:b5:
                    22:6e:d0:80:19:ae:81:27:e1:d3:eb:b5:2d:95:d8:
                    20:92:73:a5:6c:ec:2b:f5:b4:d9:03:d7:09:2c:ae:
                    0d:c1:d6:12:87:f2:a1:67:0a:5e:81:58:f3:44:40:
                    88:dd:44:bb:10:be:dc:e7:58:cc:f1:2a:be:c6:48:
                    82:0b:a0:0e:9d:6b:f1:0e:e1:e3:f6:37:ff:ac:57:
                    53:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2C:F4:79:69:83:20:47:BF:0B:2D:24:8F:AC:AD:48:93:51:28:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/6b88225d-6983-3598-a42b-6ee267107a04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:97:58:00:b7:cc:74:ad:61:ce:9b:73:5d:af:ac:70:f6:4b:
         6e:57:39:63:79:3e:ba:7a:27:b6:25:01:97:c0:f3:28:2f:28:
         81:eb:96:32:b1:b5:f2:0f:36:15:23:86:a5:df:22:82:d0:40:
         06:ba:9c:dc:90:18:7d:a6:56:9f:7e:14:57:32:14:d1:72:d9:
         a3:dc:2a:e3:58:2c:d4:62:d3:fb:bf:c5:85:de:3b:5c:45:b1:
         7c:50:a2:8b:44:6b:56:c5:7a:0a:e2:91:a7:d8:71:29:cb:c6:
         31:85:9f:e5:7c:52:99:f0:1c:6a:9b:fb:14:12:58:b5:8d:ff:
         e9:18:90:8a:e6:89:e7:e9:9f:08:9c:9b:6c:18:39:98:2e:d3:
         35:e5:9f:bb:aa:66:3e:7f:78:3c:71:02:c9:e7:a0:3e:75:be:
         e9:7e:2c:e4:65:bd:96:12:ae:ad:1e:7c:d3:af:44:58:97:ea:
         8a:03:95:14:12:4c:06:ef:19:3a:f4:84:ab:b3:95:e3:22:40:
         52:82:03:ab:16:93:39:32:ac:5c:67:59:20:ea:03:0e:be:e6:
         84:08:09:6e:85:38:d0:6d:2f:ab:6d:f3:63:e6:89:5e:ad:3d:
         6e:bc:99:2b:b3:9c:84:a5:ec:34:8d:31:d7:68:c7:4b:13:7c:
         1f:a2:17:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:49:24 2025 by rpki-client