Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/031b88ff-5ad6-3ad2-a39b-2fa075676992.roa
File:                     031b88ff-5ad6-3ad2-a39b-2fa075676992.roa (raw, json)
Hash identifier:          dhVCTMiE8JeL0scLPLVBoL9PcQa+J9UTbyFcjxxxJU0=
Subject key identifier:   60:26:A0:A6:0B:74:C2:C5:99:E5:2A:FD:12:55:FB:3F:6A:B0:F6:74
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584858A045292DA7371890B32280
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/031b88ff-5ad6-3ad2-a39b-2fa075676992.roa
Signing time:             Fri 27 Dec 2024 14:00:52 +0000
ROA not before:           Fri 27 Dec 2024 14:00:52 +0000
ROA not after:            Thu 27 Mar 2025 13:00:52 +0000
asID:                     200005
IP address blocks:        170.199.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:58:a0:45:29:2d:a7:37:18:90:b3:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Dec 27 14:00:52 2024 GMT
            Not After : Mar 27 13:00:52 2025 GMT
        Subject: CN=e49290aa-57f8-4c72-89d2-376418d82fbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:c2:4e:46:c4:81:f4:93:1d:d9:0a:66:fa:d8:
                    15:95:bc:5c:bf:dc:ab:2d:35:f7:9e:f3:92:9b:5d:
                    fe:43:e4:2f:a8:a6:4f:f8:99:ef:b3:5b:41:3f:30:
                    8d:a1:2a:ca:9d:d3:30:5d:1f:f8:58:77:75:04:ec:
                    2e:cd:c4:b0:3f:81:c4:4c:23:ad:93:c7:3e:c4:86:
                    73:84:d3:8d:fc:29:b2:1a:6d:e5:8c:59:4c:49:9b:
                    cd:b9:c8:d3:e8:d4:db:85:79:1c:72:39:e2:3c:7b:
                    69:e8:46:a4:01:11:13:af:a0:f8:f4:be:91:0f:6f:
                    fb:e2:ba:56:57:2d:8a:31:61:f0:4b:3a:38:4f:cf:
                    91:c6:12:68:3b:67:8e:0c:f1:18:30:c2:8b:66:c9:
                    f3:70:e1:3d:db:84:98:24:2d:db:0a:38:77:7b:ff:
                    89:7d:a0:c0:07:88:03:a0:ae:c5:73:77:5f:a0:67:
                    fe:a3:da:b4:d4:a5:7b:e4:9f:4e:74:d0:79:ec:06:
                    5b:e7:c4:93:72:a7:41:92:6d:bc:03:c2:44:27:9c:
                    fa:37:c1:65:fa:d3:27:1d:b4:79:df:bb:1a:9c:98:
                    f1:22:51:1e:ec:eb:2e:90:e8:a5:a6:33:5e:f8:ad:
                    24:92:45:89:24:7d:06:4a:fb:f3:f6:e3:e3:a6:bf:
                    90:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:26:A0:A6:0B:74:C2:C5:99:E5:2A:FD:12:55:FB:3F:6A:B0:F6:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/031b88ff-5ad6-3ad2-a39b-2fa075676992.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.199.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:51:d2:87:cb:e0:77:f1:65:6e:af:fb:30:3a:d8:ef:01:9b:
         ba:d5:b6:11:55:e5:50:2a:e3:17:3c:61:ed:34:c0:83:39:0e:
         1b:b4:66:77:8e:83:d7:cb:02:d1:dc:a1:85:99:ee:cc:66:42:
         d1:a7:80:56:aa:e8:3e:50:7a:27:96:07:81:b0:0a:04:05:eb:
         be:80:10:80:91:8f:af:ea:13:95:06:7d:92:82:be:50:87:96:
         cf:3c:9b:3c:e7:7d:bf:b8:d2:fd:8d:dc:61:5e:28:2b:1d:f8:
         f9:65:ad:02:86:12:55:9a:93:ef:37:c2:c5:68:fc:8a:3e:67:
         55:d8:da:3d:71:6f:fe:95:ab:6b:d3:5e:04:e6:54:11:bb:48:
         9f:ea:46:40:df:2f:ab:ee:60:cc:19:75:d4:7e:7c:ba:b1:03:
         e7:06:8a:e8:92:21:10:5f:b0:87:45:9f:87:ae:b0:d5:9c:ea:
         fa:60:64:91:6c:0c:db:b7:68:96:ea:90:f3:6a:36:bd:b0:14:
         8f:3c:2d:9f:17:03:90:ab:cf:d3:91:2c:c9:87:a7:71:08:c6:
         24:a8:cd:b9:3b:9d:d9:3a:56:1b:58:4b:e1:d6:19:3c:bc:a8:
         a2:89:0a:d4:ac:30:a5:68:89:b2:b8:e7:81:27:0f:3a:ce:dd:
         86:12:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 07:17:46 2025 by rpki-client