Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa
File:                     d063aa70-0630-306d-9f8d-14687f4a4fba.roa (raw, json)
Hash identifier:          oiOos1RsMrn0XgBMxoDuPgJouxV95YYYdU+VMOPZltk=
Subject key identifier:   42:9F:30:FA:49:28:7B:D4:94:BB:B5:87:0C:E8:F1:7D:D3:F6:E6:19
Certificate issuer:       /CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
Certificate serial:       010D0C9F43285849071BE683EE96286D5ED581C0
Authority key identifier: 36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     5744
IP address blocks:        151.207.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:e6:83:ee:96:28:6d:5e:d5:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=d42e3ebb-1d58-48d2-b05d-1cffeb143790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d2:33:9d:5f:61:36:d0:0c:cf:8f:ba:9d:ac:
                    85:0c:1d:6a:37:0d:9b:64:42:f0:c2:9a:6a:f9:98:
                    78:3d:14:a1:00:02:a4:7e:81:4f:7b:a7:21:db:fd:
                    ac:b1:a4:83:13:4b:b3:fe:7d:e4:48:de:d7:cc:25:
                    6c:c3:af:98:4a:dc:c5:b1:b3:cb:f4:20:bf:8b:ea:
                    70:fc:35:6f:67:66:f8:7f:4a:96:fb:14:59:6f:47:
                    fc:e8:37:62:f9:71:8c:49:08:fd:af:45:91:d4:3a:
                    3b:53:41:c6:92:bc:aa:b9:e1:59:a6:d2:ec:24:b9:
                    49:e7:d3:a7:c1:8b:35:29:9f:93:3b:05:b1:6d:4a:
                    ff:6f:94:96:2d:cd:23:dd:1b:8f:50:3f:8c:50:54:
                    52:0f:17:3c:24:60:7e:b4:65:57:c1:02:e7:a4:da:
                    7c:e8:8e:c1:71:f5:24:b6:ab:20:12:a7:08:b2:af:
                    77:c8:8f:31:ab:4a:52:cc:77:4a:6f:46:92:98:34:
                    15:4e:fb:6c:f4:88:2c:7f:89:e1:f4:41:6e:5b:97:
                    7f:50:d0:91:ce:60:c8:8a:a9:4d:0e:81:42:62:62:
                    01:e0:74:b7:2a:8b:5f:68:40:d0:58:e6:16:76:4a:
                    d2:69:43:5d:6d:26:ea:46:4c:6a:2d:52:c0:9e:88:
                    59:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:9F:30:FA:49:28:7B:D4:94:BB:B5:87:0C:E8:F1:7D:D3:F6:E6:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/d063aa70-0630-306d-9f8d-14687f4a4fba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.crl

            X509v3 Authority Key Identifier:
                keyid:36:61:04:B3:BA:7D:06:0E:69:64:95:06:CA:97:46:38:BE:36:FF:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8d3e4ef1-2a3b-4050-9687-a92ec83b9cb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.207.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:5a:84:7b:f2:1a:5c:38:db:f7:8b:eb:96:27:4c:c4:5e:4c:
         c8:14:eb:a2:40:0b:c3:f0:b2:56:07:db:6e:b7:72:37:ed:2d:
         f7:ec:65:66:dd:0d:cd:7b:b3:20:ee:d7:7a:70:d0:7f:6b:28:
         ca:9f:05:64:1b:4a:4c:f1:8b:f6:4c:d3:74:95:00:ac:d6:59:
         86:a7:70:64:a4:5e:db:8c:c8:c5:00:0d:f1:3f:eb:c4:a7:6c:
         1a:55:cd:31:c9:eb:e7:fa:b6:67:27:4b:58:0d:8c:27:82:c7:
         29:3d:08:4a:4d:eb:ee:3d:66:77:59:29:27:87:68:ae:c0:d0:
         c7:be:ba:df:74:85:d6:f8:27:1e:7f:62:99:ae:26:56:85:3b:
         45:8c:13:17:b4:74:14:b2:9a:cb:aa:1b:20:18:81:f5:11:e6:
         f5:c2:21:6d:5f:2b:67:d1:08:52:50:d7:aa:4a:3e:fa:8f:df:
         06:05:49:0b:67:cb:61:7f:a9:77:84:a9:05:b4:c6:c3:48:79:
         03:63:d6:8d:cb:c4:01:4d:79:2e:d4:6f:d2:d1:45:36:6c:ec:
         fb:cd:e7:06:bf:4e:d2:60:4c:c9:c4:b5:f8:e5:b1:f9:4a:3a:
         18:92:72:23:0b:f8:f0:83:b1:f6:95:d4:5c:59:d1:64:f8:4b:
         29:f0:83:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:06:54 2025 by rpki-client