Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa
File:                     b2cc346c-6300-33bb-a69b-78485d036c2c.roa (raw, json)
Hash identifier:          Kh5Fg1pUbfaBAZjKNXmCji0D6Uh71FEgMvuatqUv0Cc=
Subject key identifier:   D9:4B:BA:10:C6:6F:17:9B:79:B9:3C:96:B8:FC:5D:8F:6B:17:0D:D1
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584886B081269A77AE42ACDE5850
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa
Signing time:             Mon 13 Jan 2025 02:00:40 +0000
ROA not before:           Mon 13 Jan 2025 02:00:40 +0000
ROA not after:            Sun 13 Apr 2025 01:00:40 +0000
asID:                     26548
IP address blocks:        206.162.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:86:b0:81:26:9a:77:ae:42:ac:de:58:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jan 13 02:00:40 2025 GMT
            Not After : Apr 13 01:00:40 2025 GMT
        Subject: CN=4184a9be-53ef-4492-9cfb-05cf29a8b14f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:2f:30:d2:a1:65:02:b6:1f:5e:47:97:ba:87:
                    88:47:9b:bc:69:96:eb:a0:0e:d8:14:5e:b3:b2:9b:
                    33:11:8d:16:d9:0b:67:e5:e0:5f:2a:e2:14:92:89:
                    c6:a1:3c:f6:2b:33:10:d6:97:e2:be:76:36:58:dc:
                    57:4a:13:79:52:70:a5:2f:aa:f1:4f:a6:f6:2f:5e:
                    c0:a8:fc:db:47:c8:39:fa:d6:b9:e1:70:9c:d8:2c:
                    23:81:60:04:f3:16:c5:4e:a4:07:8a:f5:14:b4:8a:
                    34:d6:83:c4:e6:28:7f:bf:b0:24:ac:e2:00:a7:cc:
                    ee:a7:36:46:b0:b1:da:6d:24:35:c6:79:5e:1e:80:
                    75:30:b9:48:d0:b1:92:4d:2f:95:22:53:7d:9e:1a:
                    d8:33:8c:ad:e2:c1:2d:f1:55:ce:f1:b0:02:0a:75:
                    8b:c7:f9:9b:9b:4b:3d:3b:42:50:07:31:cd:d7:74:
                    5e:60:ec:c6:f4:fe:55:d3:47:c0:aa:ef:17:5c:aa:
                    91:06:5e:e0:d8:52:d4:55:65:68:86:e1:4a:8d:73:
                    22:2a:f5:ba:70:3f:30:86:f3:b5:ce:e9:97:01:07:
                    0f:8a:33:b1:92:8e:59:e3:8b:9a:e8:ef:e1:04:53:
                    95:72:6f:e6:68:6e:42:06:3f:25:f6:d1:64:16:f1:
                    6d:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4B:BA:10:C6:6F:17:9B:79:B9:3C:96:B8:FC:5D:8F:6B:17:0D:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/b2cc346c-6300-33bb-a69b-78485d036c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e6:8a:05:d2:49:74:86:34:30:82:60:d9:bb:ad:09:02:32:58:
         bf:ce:03:d7:8a:dd:15:2e:60:6c:84:81:37:39:0c:3d:a5:76:
         ca:30:a4:30:0f:9d:e9:b8:aa:96:d0:21:6f:5f:87:3b:0c:99:
         c7:c5:3f:a7:ec:f6:e5:26:93:d9:fc:e8:ed:92:8c:0f:6e:1c:
         a6:48:c4:fa:b2:61:83:3a:a9:37:a2:6c:45:1c:21:b5:6d:0e:
         83:be:11:ee:85:62:fb:2d:67:ae:85:bc:e3:cc:58:84:ae:0d:
         cd:61:d4:da:c2:45:47:e5:9d:7a:6c:d7:2f:48:09:a2:7f:1b:
         ba:6b:28:11:9a:57:96:0c:6f:31:8d:ef:bb:fb:34:eb:99:39:
         d8:55:45:09:16:04:a6:f7:45:e2:c8:56:07:8d:8d:24:07:5f:
         09:b2:b5:8d:82:ff:d7:2e:2a:0e:d6:a4:6d:82:1a:a0:b5:47:
         ce:a6:a3:64:b2:69:08:f0:56:b1:f1:15:a7:6c:70:b7:4f:6f:
         ff:a0:a5:ab:c2:b0:1b:81:69:f7:9f:96:9c:bb:40:ad:d8:87:
         92:9c:61:88:44:f8:82:80:cc:8e:62:c1:ed:13:6f:b2:61:fc:
         ee:15:67:cf:a3:65:cf:cc:dd:2f:a7:e0:ae:b5:22:ba:3d:4f:
         e2:b9:8f:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:56:17 2025 by rpki-client