Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
File:                     b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa (raw, json)
Hash identifier:          VGSbuJDNBGrcWkd0KGRD7yX73i2rO/zqyjQxSqlUgBU=
Subject key identifier:   C5:53:D2:CF:BC:BE:C4:64:EF:37:D2:6A:0E:E5:9A:E7:A3:2F:BE:CE
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F43285848908094E0EC62F06570F54D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa
Signing time:             Thu 16 Jan 2025 14:22:22 +0000
ROA not before:           Thu 16 Jan 2025 14:22:22 +0000
ROA not after:            Wed 16 Apr 2025 13:22:22 +0000
asID:                     174
IP address blocks:        207.230.3.0/24 maxlen: 24
                          207.230.4.0/24 maxlen: 24
                          207.230.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:80:94:e0:ec:62:f0:65:70:f5:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Jan 16 14:22:22 2025 GMT
            Not After : Apr 16 13:22:22 2025 GMT
        Subject: CN=16dd78bf-6fd3-4bd3-b8c9-fafb25b20a88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:83:7c:9d:a1:f3:52:75:91:87:37:36:32:c9:
                    74:d8:a8:39:ac:41:0e:17:55:41:e5:b9:22:f7:cc:
                    b8:9a:c9:55:1e:9f:a3:36:ff:b0:13:fe:8f:ef:1c:
                    fc:ea:f4:14:a4:8e:ef:d8:25:42:ac:34:3f:dd:16:
                    aa:8c:ef:f5:46:8d:37:5b:65:a4:7e:18:6c:45:7c:
                    e4:62:7a:3f:18:f3:cc:73:c3:b6:11:64:40:47:85:
                    ef:a7:1f:92:4b:8b:8b:f6:98:aa:ac:38:0b:af:92:
                    24:34:7f:c3:37:50:b4:03:44:af:10:1f:8b:3b:72:
                    cc:ea:68:49:ee:11:6f:aa:44:9d:50:c7:ca:ce:c0:
                    59:95:c1:7d:a6:8b:75:98:ef:cf:0c:f6:0b:28:b6:
                    77:73:ba:93:4b:fd:df:76:41:bd:61:3d:2b:af:41:
                    f0:85:23:56:81:a3:4b:b8:49:82:cb:89:16:7a:00:
                    2c:07:f8:5f:72:71:de:e6:b7:f5:26:ce:72:8b:75:
                    2f:0c:e4:a1:c6:10:17:19:0a:8d:59:65:03:74:7b:
                    cc:e1:99:21:56:e3:78:87:30:7d:19:4d:0d:14:a9:
                    8d:5d:6d:96:bd:11:c0:e5:5f:99:39:5d:57:4e:7c:
                    51:2d:91:90:b0:41:e2:78:26:49:39:6e:8a:a2:65:
                    34:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:53:D2:CF:BC:BE:C4:64:EF:37:D2:6A:0E:E5:9A:E7:A3:2F:BE:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/b8f232e3-9bf8-38bf-9a45-efbc1cbcfe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.230.3.0-207.230.4.255
                  207.230.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4a:bd:23:46:24:d3:55:28:48:8d:60:fe:cd:2a:a6:d3:dc:
         f7:93:ec:52:80:76:86:5f:df:43:b7:0b:34:97:83:34:a2:5f:
         5d:3e:12:5b:88:6a:7c:32:d7:b4:ba:97:9f:ef:53:38:c6:a0:
         ce:78:d4:d0:5f:5a:f3:f9:fd:85:b8:b6:f6:a6:2c:31:36:18:
         6d:94:9b:95:19:72:48:8c:5a:70:56:bf:06:b9:72:b6:19:13:
         f4:77:91:6d:d0:fd:f3:da:f2:b6:b0:5e:45:0c:e3:c6:b6:88:
         90:ec:a1:5e:d9:21:53:40:d3:db:66:fb:a7:68:9b:ca:fd:a1:
         9c:3f:a9:17:53:43:95:7d:67:45:d7:ec:d7:ed:f0:34:ae:f7:
         c9:c0:56:93:9d:39:e5:d4:be:0c:1f:90:29:90:e9:3c:87:fc:
         2c:ee:9f:6a:41:43:09:c2:e3:4c:a5:a4:59:61:db:46:e6:52:
         e9:e0:16:19:f0:30:68:a7:83:17:6e:67:de:06:3b:b2:fb:45:
         70:aa:ac:9c:bb:61:5d:dc:4e:22:fb:4a:26:99:07:8d:eb:8d:
         e2:d6:a7:71:b2:9a:05:33:c6:b9:61:0d:2a:60:51:02:90:91:
         6f:e5:59:98:36:d9:ec:92:66:c9:80:57:47:28:a3:13:94:ae:
         ea:3f:44:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 10:59:53 2025 by rpki-client