Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
File:                     3a2c937e-43a7-3104-9c15-c14d170576fa.roa (raw, json)
Hash identifier:          ly/tLeTFZP1kPZKtUe41IkTxcLIQrrikfO5tMLuTNwQ=
Subject key identifier:   0F:46:0C:07:50:49:1D:6A:3C:8D:DC:7C:DE:7C:7B:52:4D:06:22:10
Certificate issuer:       /CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
Certificate serial:       010D0C9F432858492184079F1479E3404B554318
Authority key identifier: 61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     376
IP address blocks:        206.167.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:07:9f:14:79:e3:40:4b:55:43:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba533d7-0e29-41f6-8679-d93c39c3b1d6
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=538dd73f-3b02-4b10-9aaf-edbb0c46d72f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:ac:fd:b6:af:4d:d1:33:0f:a2:af:7e:e0:
                    9c:48:c8:d0:57:9a:e9:41:e4:67:98:ec:b3:49:8d:
                    0d:59:f0:a3:58:d8:a8:64:31:91:ac:fd:b1:40:83:
                    1f:b5:38:cc:a9:91:e6:4f:c3:60:3c:57:93:55:b7:
                    df:7c:17:8d:4d:06:d5:d0:e8:6b:f4:a1:2d:3f:65:
                    37:50:f9:d8:88:45:8d:23:9b:f2:51:65:9b:51:a2:
                    ab:71:9d:bb:3a:5a:b6:75:68:5c:69:5e:ee:02:11:
                    d8:7b:78:64:cd:55:7d:39:a5:95:f4:5e:8e:80:9f:
                    5a:7c:70:3f:13:8b:c9:b2:e2:2d:5c:e7:53:2b:17:
                    72:10:bc:e3:a0:ea:61:21:61:c8:9c:3e:c6:9c:eb:
                    10:60:67:b2:6e:91:ca:b0:f8:bd:0a:e4:f2:c0:d2:
                    d6:35:79:79:a9:09:4f:cc:d5:cd:f8:5a:86:c2:61:
                    ad:aa:48:7a:79:fb:5b:43:a9:58:e3:0c:91:45:e6:
                    10:be:3b:e0:b2:96:69:a5:60:66:7f:1e:de:5b:2f:
                    31:68:38:32:80:45:ea:f5:9b:21:dd:8b:66:e4:1c:
                    75:92:00:29:f7:fc:e6:41:e2:ad:e2:4a:1c:7c:aa:
                    a7:94:c2:7d:cf:38:12:ae:99:46:1c:eb:56:82:c5:
                    4c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:46:0C:07:50:49:1D:6A:3C:8D:DC:7C:DE:7C:7B:52:4D:06:22:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/3a2c937e-43a7-3104-9c15-c14d170576fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.crl

            X509v3 Authority Key Identifier:
                keyid:61:4E:15:BE:98:2C:A8:10:20:8C:51:DC:A4:DD:75:86:C3:4F:90:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/7ba533d7-0e29-41f6-8679-d93c39c3b1d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.23.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:80:c6:5a:ba:c8:76:ae:68:7d:14:9a:da:a2:3f:bb:af:d7:
         69:4d:bd:81:80:85:ec:a2:4f:0a:36:93:20:68:90:a6:89:28:
         81:e0:47:6c:d3:ed:79:41:c6:83:06:27:f9:31:73:38:d6:12:
         07:52:3b:cc:66:f8:b7:97:59:08:48:df:2b:9e:cb:b7:64:e2:
         db:d5:79:00:a1:c6:e3:d7:27:1a:87:fb:0a:2a:80:09:fa:79:
         de:8f:63:46:b7:66:c3:b2:d8:be:a8:98:a0:3d:7f:2a:47:56:
         6d:f7:f4:4c:72:65:93:a4:ef:85:7f:83:1e:e1:d1:b9:09:5e:
         0d:93:10:48:bc:ef:af:50:84:a0:98:3b:79:fb:70:45:de:d0:
         f4:03:f0:e7:c8:e0:e2:c4:9c:92:a7:44:6d:f5:1a:dd:18:13:
         3f:16:91:a2:8a:bf:2d:b4:52:07:c7:38:51:c3:37:de:99:ea:
         8b:62:64:d4:2a:ae:e7:d3:9b:86:d9:67:e8:6b:27:ba:d9:d8:
         be:52:88:94:92:cc:69:6a:f6:73:11:77:75:5e:97:c3:93:96:
         e9:5b:68:a9:1d:3c:03:0d:14:f2:9e:42:2b:4f:59:6c:b0:1e:
         37:e6:62:33:10:27:73:1b:c9:b8:cd:5e:91:5f:84:cc:20:01:
         58:3f:89:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:16:20 2025 by rpki-client