Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa
File:                     66e45a7d-1f5b-3734-935a-1f34866304be.roa (raw, json)
Hash identifier:          edt4zlpWcGwoiL50u8xsD7BxeVfbARRKqor51o5mD2I=
Subject key identifier:   3F:0B:61:A2:EA:37:EC:4B:1E:D4:88:62:AB:87:57:19:C6:9A:7F:37
Certificate issuer:       /CN=66108100-1fc2-4d23-b89e-3e81cc652270
Certificate serial:       010D0C9F43285848EF6164EE7A4777B8C8579774
Authority key identifier: 4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     13984
IP address blocks:        206.124.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:64:ee:7a:47:77:b8:c8:57:97:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66108100-1fc2-4d23-b89e-3e81cc652270
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=4decfc82-9915-47ca-8afb-671fddffdef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:b9:3d:b3:b1:1e:5e:55:5a:99:d2:d2:3e:
                    d2:28:e9:8b:2c:9f:83:56:a4:63:07:33:3a:6c:79:
                    19:d1:27:a0:d6:4c:ba:95:2a:0b:92:68:8f:f6:c4:
                    2e:14:bd:ba:d1:fa:fb:9d:d3:f9:61:66:6d:a5:d2:
                    f2:5e:2c:46:14:29:4d:d6:1b:a7:43:39:94:fe:2c:
                    42:2c:85:9b:82:1c:d8:16:99:e5:31:9c:3e:8f:1f:
                    95:48:a8:53:af:92:7e:2f:2a:98:9f:c1:29:65:dd:
                    37:67:65:75:8d:09:e5:7f:ac:78:53:b8:77:f9:ee:
                    20:f1:76:0b:7a:80:46:90:9f:51:fe:ea:d9:42:92:
                    8b:26:7b:4c:ee:46:07:8f:99:f0:33:2e:4b:e1:5e:
                    18:60:92:33:ba:fe:96:7a:1e:fc:ee:de:11:26:32:
                    ce:70:72:b2:69:6d:7d:a8:39:dc:56:77:50:bc:70:
                    fa:84:97:6c:49:d5:50:98:6a:04:af:71:bd:e2:51:
                    bf:09:f4:d2:4e:8b:b3:7f:ff:dc:ed:79:42:99:ff:
                    9f:ff:b9:31:38:e3:97:8d:40:cc:2d:bf:5e:da:c2:
                    0e:fb:9f:5a:03:9a:17:77:f2:6e:6f:f2:7e:d0:b0:
                    0c:33:31:ad:41:a2:57:96:3b:86:f8:28:70:0f:73:
                    aa:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:0B:61:A2:EA:37:EC:4B:1E:D4:88:62:AB:87:57:19:C6:9A:7F:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66e45a7d-1f5b-3734-935a-1f34866304be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270/66108100-1fc2-4d23-b89e-3e81cc652270.crl

            X509v3 Authority Key Identifier:
                keyid:4B:FB:9B:26:37:29:8C:89:2F:14:BD:D2:0B:59:D6:B0:EE:63:00:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66108100-1fc2-4d23-b89e-3e81cc652270.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.124.173.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         20:4d:48:78:6a:f4:62:d9:25:ef:46:36:bd:97:b5:5b:db:03:
         0c:91:4d:64:59:5a:6a:e3:08:96:2c:70:37:ef:1f:36:74:f7:
         07:65:76:2b:0b:41:2b:7d:fa:bb:de:46:2b:68:86:51:9c:40:
         59:3c:8a:8a:b9:f3:63:84:37:1f:1c:1b:b1:5f:c6:a0:f8:e5:
         f9:9f:ed:9a:01:e7:7b:14:28:01:47:7d:bd:64:27:ac:bb:53:
         ea:18:b1:57:76:71:b4:c4:68:09:6a:b5:cd:f0:2c:b2:1e:02:
         7d:19:6b:ea:ee:f9:d2:a2:92:25:83:bd:70:ee:01:45:bf:26:
         63:5b:84:a8:a4:db:41:b0:cb:ae:b4:8c:47:56:d2:28:45:64:
         25:3e:90:dd:68:2b:5d:43:cd:01:f0:f8:b9:50:6b:a5:31:f7:
         11:f2:41:22:fe:79:8d:95:31:0c:5e:ef:dc:7c:71:c7:04:43:
         60:aa:6b:67:72:1a:48:ea:f6:b1:a8:20:17:92:b3:85:82:44:
         0c:c5:17:1d:37:ad:f8:fe:bc:0f:fa:8f:83:59:06:f8:af:4d:
         8c:7c:3b:da:9c:ed:47:49:08:92:2f:36:b1:9f:32:27:84:b2:
         5f:5f:9a:4a:c9:f5:04:ae:0a:d5:4b:42:34:c5:5d:10:09:a6:
         00:a2:8a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:05:21 2025 by rpki-client