Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa
File:                     b6bab6f6-1332-3f01-9c8f-b956989936f8.roa (raw, json)
Hash identifier:          /qj/oZAYs57xtCiSceklL2rMRWI+EJYgFeQojkkM57g=
Subject key identifier:   17:0D:DE:6C:17:2D:D4:05:1E:CD:36:E9:D3:48:08:53:E5:10:BB:45
Certificate issuer:       /CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
Certificate serial:       010D0C9F43285848CDB483D11696BB0499AD7840
Authority key identifier: 97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa
Signing time:             Fri 07 Feb 2025 12:31:19 +0000
ROA not before:           Fri 07 Feb 2025 12:31:19 +0000
ROA not after:            Thu 08 May 2025 11:31:19 +0000
asID:                     18934
IP address blocks:        142.202.68.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cd:b4:83:d1:16:96:bb:04:99:ad:78:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=349213f7-28e2-4fa1-8491-78e3580cdb7f
        Validity
            Not Before: Feb  7 12:31:19 2025 GMT
            Not After : May  8 11:31:19 2025 GMT
        Subject: CN=bc68bff9-d81b-48b6-9971-4298723d2f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:16:14:e2:b8:1b:4e:8e:19:ef:7b:9c:06:b8:
                    3e:c8:0a:7a:12:2c:48:57:91:9c:30:5c:d0:b9:52:
                    82:b1:21:63:78:f6:ff:ad:5a:07:f1:46:bf:8d:4c:
                    43:55:d9:73:f4:c3:78:ef:ea:d5:bf:df:42:bb:34:
                    29:10:12:4d:d3:b7:ef:72:97:e1:47:5b:74:96:25:
                    79:ae:a3:b8:33:6b:c3:28:44:4f:10:37:7b:6c:95:
                    05:10:33:f3:23:01:10:cc:d2:e7:7a:bb:7e:06:f6:
                    9b:2e:68:cd:49:e5:b6:3a:e0:b0:59:e5:20:0d:0d:
                    9a:f9:a5:ed:cd:00:ea:50:09:fb:12:cb:14:dc:81:
                    cd:69:8e:7c:09:8a:14:5f:d4:e9:62:be:f3:cc:25:
                    81:af:61:c7:ea:35:83:c5:f5:c6:e8:7b:5f:a2:ba:
                    71:41:7e:09:07:a0:24:08:de:34:a7:17:7c:5e:8e:
                    25:ad:83:00:43:50:75:24:58:34:60:52:7d:79:b3:
                    44:be:cb:bb:ec:ad:27:fe:5f:49:a1:49:e7:3e:f1:
                    d9:03:61:57:9e:b5:04:fc:ce:58:89:21:f1:5a:88:
                    b7:04:64:03:cf:aa:10:38:19:e7:5a:25:24:af:68:
                    4a:52:5f:56:74:ec:6d:1d:a7:b6:54:c9:a9:8b:5a:
                    d7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:0D:DE:6C:17:2D:D4:05:1E:CD:36:E9:D3:48:08:53:E5:10:BB:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/b6bab6f6-1332-3f01-9c8f-b956989936f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f/349213f7-28e2-4fa1-8491-78e3580cdb7f.crl

            X509v3 Authority Key Identifier:
                keyid:97:5E:9F:A9:CC:61:D5:8D:DC:07:ED:E0:44:7D:5F:DD:89:2D:F4:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/349213f7-28e2-4fa1-8491-78e3580cdb7f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.68.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:b7:25:69:a2:04:27:f5:04:8c:7f:66:34:6b:f6:ba:86:63:
         c8:8a:78:43:d9:e4:b8:cd:0f:43:48:e6:b2:b2:1c:0a:e3:2b:
         b7:d2:c6:28:f8:75:3e:34:53:34:a0:bb:06:96:16:79:78:1c:
         8b:94:44:0a:12:ca:89:47:bb:73:9f:50:55:df:c7:5e:41:46:
         4e:20:77:f4:61:8d:46:0c:da:04:3c:6b:23:e1:93:5e:f2:74:
         e6:21:93:b4:e1:68:0a:96:a0:49:c8:72:69:32:9f:cf:4d:1c:
         c2:cc:6e:c8:90:e8:17:5c:5c:ac:39:29:e7:f5:57:bc:39:6e:
         34:54:8e:06:3a:62:0f:4f:8b:f4:8f:13:78:f2:16:1b:15:54:
         1a:72:2d:c2:31:dd:39:53:7e:d4:cd:e7:80:46:80:86:b1:03:
         84:33:b9:30:34:24:78:25:fc:e0:e5:f0:cd:82:aa:87:ef:01:
         c7:78:ec:45:76:e0:1d:ee:f5:96:e4:b8:db:d6:67:ab:a0:fe:
         0a:a5:50:a8:7f:94:b8:bd:94:88:97:22:9f:31:91:b9:f1:a6:
         c2:07:89:4e:93:da:18:ad:5b:46:c1:7b:b7:08:39:fc:27:57:
         1c:cb:f5:9f:5c:ff:c3:7e:d3:d0:e7:04:b7:86:50:c6:04:a6:
         da:9c:98:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:55:32 2025 by rpki-client