Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa
File:                     7b955745-927c-3c7f-9d47-e4d308f4614a.roa (raw, json)
Hash identifier:          YgIv5TU/sw7kVuTN6B9nLUiJSqgY/aiaQrPXEpaTeU8=
Subject key identifier:   A7:01:84:C9:37:FC:7D:F6:5B:51:C2:40:4F:C8:CD:9B:B0:BF:02:CF
Certificate issuer:       /CN=c186a276-9141-41da-babe-4559d2c6d734
Certificate serial:       010D0C9F43285848DD3BAD70FF294BFD97377060
Authority key identifier: 6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa
Signing time:             Thu 13 Feb 2025 02:00:40 +0000
ROA not before:           Thu 13 Feb 2025 02:00:40 +0000
ROA not after:            Wed 14 May 2025 01:00:40 +0000
asID:                     15305
IP address blocks:        206.168.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:dd:3b:ad:70:ff:29:4b:fd:97:37:70:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c186a276-9141-41da-babe-4559d2c6d734
        Validity
            Not Before: Feb 13 02:00:40 2025 GMT
            Not After : May 14 01:00:40 2025 GMT
        Subject: CN=89d98d7f-4860-4be0-b67b-4881e3100d15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4e:96:50:07:04:47:a7:87:5e:81:a7:d1:b7:
                    c9:8e:3c:ee:cc:f5:3b:a2:64:bd:f6:c1:97:67:55:
                    d3:ba:8b:7a:85:2a:45:0b:bc:4c:71:bc:c0:33:a5:
                    10:91:f6:c2:f2:68:4d:89:6a:81:75:d8:30:91:a5:
                    27:1e:8d:36:95:1e:14:04:6d:f2:e0:21:95:7a:52:
                    e8:1a:c6:72:ca:a2:b7:61:69:19:bd:01:42:dc:b6:
                    de:a8:2f:c7:a5:4f:5e:7a:98:18:ea:48:18:66:df:
                    73:3a:82:74:cc:5c:ae:3f:63:4b:b7:cf:ad:48:79:
                    38:73:f1:cb:18:0c:64:1a:80:eb:fb:58:58:36:e8:
                    10:8d:73:d2:74:4f:94:c2:77:2e:a6:0c:0a:dd:97:
                    16:c9:5b:39:b8:91:c0:42:4b:dc:be:33:5d:36:c1:
                    16:1e:e9:88:af:c6:93:10:ac:b9:9b:bf:5f:26:05:
                    79:fa:6d:5e:7a:4b:f9:e9:d6:f6:97:e0:da:0f:58:
                    ca:cd:67:cf:1e:60:08:65:a5:e0:26:b3:85:ce:da:
                    71:af:c7:6d:17:9e:3e:76:e5:87:ff:36:ab:6c:c8:
                    b1:33:2f:2b:71:f8:68:12:83:41:a5:c9:e6:66:5c:
                    1d:81:28:35:09:04:05:5b:36:8e:2d:32:5b:28:9d:
                    46:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:01:84:C9:37:FC:7D:F6:5B:51:C2:40:4F:C8:CD:9B:B0:BF:02:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/7b955745-927c-3c7f-9d47-e4d308f4614a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734/c186a276-9141-41da-babe-4559d2c6d734.crl

            X509v3 Authority Key Identifier:
                keyid:6C:FE:2B:F5:D3:36:AE:52:F1:93:C6:CC:F5:86:D0:4E:13:17:6E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c186a276-9141-41da-babe-4559d2c6d734.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:64:c1:0e:5f:c5:70:ff:1b:1f:31:5a:b6:fe:39:f0:1f:bb:
         22:d1:f5:e6:c4:c1:d0:d3:72:60:b2:5c:d0:42:28:b1:c2:b9:
         4f:cb:9a:8c:60:d9:20:35:cb:d2:ad:05:63:9e:b4:25:bf:93:
         a2:5c:61:a2:2f:db:9d:cb:d9:f8:ef:4e:0c:b8:db:04:04:06:
         92:eb:e6:a7:67:03:2a:34:95:bf:ed:40:35:b4:1e:73:eb:61:
         11:b5:cb:91:90:25:c4:de:e6:ef:4f:2f:03:a8:e7:5a:10:09:
         a0:d0:dc:d0:7f:c8:1e:40:b8:4c:0e:f6:28:b0:34:94:91:42:
         dc:a2:49:4c:83:13:55:70:d7:3c:8b:8b:70:ec:ef:ec:bf:42:
         54:ba:b6:d3:72:8c:72:fb:2d:41:fa:51:94:7e:6e:d2:db:54:
         c6:f2:4d:93:61:25:a7:cc:e1:ec:91:34:60:24:b2:52:e9:e2:
         09:23:45:7e:81:54:c7:5b:d4:82:b2:4a:6f:25:58:79:60:d2:
         12:00:6a:1c:ba:83:90:6d:19:02:7d:f1:90:80:25:4e:85:4d:
         76:31:70:64:d7:14:6a:91:8d:f3:75:49:d1:9f:ac:e1:5f:cb:
         e2:4b:b2:77:90:ed:48:63:04:01:b0:2e:a0:d7:3b:8e:ae:69:
         12:57:89:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjdO61w/ylL/Zc3cGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE4NmEyNzYtOTE0MS00MWRhLWJhYmUtNDU1OWQyYzZk
NzM0MB4XDTI1MDIxMzAyMDA0MFoXDTI1MDUxNDAxMDA0MFowLzEtMCsGA1UEAxMk
ODlkOThkN2YtNDg2MC00YmUwLWI2N2ItNDg4MWUzMTAwZDE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk6WUAcER6eHXoGn0bfJjjzuzPU7omS99sGX
Z1XTuot6hSpFC7xMcbzAM6UQkfbC8mhNiWqBddgwkaUnHo02lR4UBG3y4CGVelLo
GsZyyqK3YWkZvQFC3LbeqC/HpU9eepgY6kgYZt9zOoJ0zFyuP2NLt8+tSHk4c/HL
GAxkGoDr+1hYNugQjXPSdE+UwncupgwK3ZcWyVs5uJHAQkvcvjNdNsEWHumIr8aT
EKy5m79fJgV5+m1eekv56db2l+DaD1jKzWfPHmAIZaXgJrOFztpxr8dtF54+duWH
/zarbMixMy8rcfhoEoNBpcnmZlwdgSg1CQQFWzaOLTJbKJ1GGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKcBhMk3/H32W1HCQE/IzZuwvwLPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2
YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5ZDJjNmQ3MzQvN2I5NTU3NDUtOTI3Yy0z
YzdmLTlkNDctZTRkMzA4ZjQ2MTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzE4NmEyNzYtOTE0MS00MWRhLWJh
YmUtNDU1OWQyYzZkNzM0L2MxODZhMjc2LTkxNDEtNDFkYS1iYWJlLTQ1NTlkMmM2
ZDczNC5jcmwwHwYDVR0jBBgwFoAUbP4r9dM2rlLxk8bM9YbQThMXbiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMTg2YTI3Ni05MTQxLTQxZGEtYmFiZS00NTU5
ZDJjNmQ3MzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqhTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABdkwQ5fxXD/Gx8xWrb+OfAfuyLR9ebEwdDTcmCyXNBCKLHCuU/Lmoxg
2SA1y9KtBWOetCW/k6JcYaIv253L2fjvTgy42wQEBpLr5qdnAyo0lb/tQDW0HnPr
YRG1y5GQJcTe5u9PLwOo51oQCaDQ3NB/yB5AuEwO9iiwNJSRQtyiSUyDE1Vw1zyL
i3Ds7+y/QlS6ttNyjHL7LUH6UZR+btLbVMbyTZNhJafM4eyRNGAkslLp4gkjRX6B
VMdb1IKySm8lWHlg0hIAahy6g5BtGQJ98ZCAJU6FTXYxcGTXFGqRjfN1SdGfrOFf
y+JLsneQ7UhjBAGwLqDXO46uaRJXiUs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:08 2025 by rpki-client