Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f4533442-23a4-364b-9b11-ee490e16f22c.roa
File:                     f4533442-23a4-364b-9b11-ee490e16f22c.roa (raw, json)
Hash identifier:          8sCMm1yWF0gnfu5pbtQJpDYIDCrOGkrPSktZTR7dfCI=
Subject key identifier:   3B:C9:AE:CF:83:1C:CA:E2:07:D4:F2:67:85:C8:79:C9:5D:CE:B0:E6
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584961B99A0A4DB043E6D0DDBE00
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f4533442-23a4-364b-9b11-ee490e16f22c.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     16462
IP address blocks:        206.12.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:9a:0a:4d:b0:43:e6:d0:dd:be:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=ae248a92-7929-461c-87b7-404efbec5ff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4c:2d:d2:37:7b:80:58:e7:bf:5f:27:4d:4f:
                    9c:95:b6:6e:63:a6:d5:d9:3d:14:42:b9:9b:c5:1d:
                    b3:ea:f3:dc:01:87:1d:29:5d:ff:91:ac:ee:89:5c:
                    e0:cc:e6:35:a5:7c:66:b6:4f:f0:d5:f7:bc:2f:04:
                    a1:f7:f6:16:77:f8:da:97:c2:26:7f:fd:56:70:02:
                    ba:91:f3:26:64:13:7a:82:f6:c1:17:a5:d4:8b:ad:
                    53:b2:93:ab:0d:ef:9f:5c:68:54:d2:7b:0f:a0:1d:
                    52:52:ab:b9:20:0b:5b:93:93:76:5a:57:53:4d:98:
                    12:5c:93:d5:d9:34:51:e7:1f:e7:46:18:58:3e:e3:
                    0f:6f:1b:57:8e:1b:3e:c5:b8:ad:77:28:36:ef:26:
                    17:b2:aa:94:5f:b2:ea:67:56:6c:7e:a5:57:93:85:
                    14:d2:af:0e:46:10:f7:3b:fa:b8:a7:80:e5:ad:07:
                    6e:d5:98:40:d5:f3:5b:7a:46:d0:c1:a8:33:f0:97:
                    58:8e:dc:2b:ed:5d:bb:6a:99:b4:b5:24:cd:c5:ea:
                    47:6c:a3:da:24:42:f0:4a:53:5e:a8:e1:67:52:e5:
                    34:58:29:18:86:7f:ed:65:75:87:fb:0d:3e:d8:57:
                    f3:c5:7d:00:4d:79:d1:83:06:54:41:40:47:5b:92:
                    e5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:AE:CF:83:1C:CA:E2:07:D4:F2:67:85:C8:79:C9:5D:CE:B0:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/f4533442-23a4-364b-9b11-ee490e16f22c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:26:d6:3f:f0:60:61:d2:d3:2a:60:94:b2:87:10:37:cb:27:
         62:74:ed:7d:90:76:7a:ae:39:2c:a7:40:25:c8:91:92:a6:87:
         a9:9b:7e:ff:01:19:e5:04:82:65:ef:e9:0c:13:cf:dc:92:c6:
         1d:0b:f0:f2:54:35:a6:0f:28:2f:f9:ea:4c:ee:c9:f4:1a:bd:
         ce:0c:b2:c3:60:ac:aa:a0:df:5d:74:7b:5c:d0:fd:dc:41:31:
         85:1a:cc:44:52:cb:66:b0:63:72:d8:a6:bb:35:04:c2:dc:b4:
         a8:09:9e:98:ee:c5:e9:cd:f6:9d:bd:59:6d:bd:aa:2e:3a:3d:
         67:67:ab:ba:f4:cf:fc:4d:c2:d1:75:82:53:23:1f:f9:f4:7a:
         6d:05:1a:ea:17:41:e3:17:8b:07:da:67:1f:0c:d3:87:37:6e:
         ec:11:1f:cc:be:e5:fb:de:74:80:d9:98:87:6c:86:84:84:ee:
         4c:b4:11:c7:07:35:c0:20:e9:11:6e:93:b9:67:c6:ea:ca:43:
         10:26:ae:c8:62:26:09:6f:c2:26:16:1e:05:7a:7b:12:c8:dd:
         b1:84:fb:43:a9:b8:05:c5:c8:8c:b5:40:f0:73:44:b6:97:39:
         86:39:27:42:a6:7d:03:c8:54:26:bf:05:db:a4:b9:60:20:b9:
         46:a7:f1:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:28 2025 by rpki-client