Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ee42ae8-bba8-3826-a6af-ed5cdb434e5b.roa
File:                     6ee42ae8-bba8-3826-a6af-ed5cdb434e5b.roa (raw, json)
Hash identifier:          WR9BZ+0Firi6AyYfZ11mn8VGo12nOv+wKP++7UMnic4=
Subject key identifier:   97:55:9E:00:49:5C:95:A0:41:55:6B:D1:D1:FA:C5:79:9F:9A:BF:DE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858495C247648B35E76CDEED99380
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ee42ae8-bba8-3826-a6af-ed5cdb434e5b.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     701
IP address blocks:        204.178.67.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:76:48:b3:5e:76:cd:ee:d9:93:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=38c73799-fc1b-43ee-ad6c-fe0cff028c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:36:88:7e:4a:40:24:bf:69:ee:8d:ef:d6:
                    6b:86:db:6f:39:e2:a8:7d:4a:17:e8:1f:88:01:a2:
                    ce:6e:a4:2b:fb:34:d8:69:3d:14:f1:92:a0:73:a6:
                    f7:b3:3c:bc:31:b2:7d:9f:2a:b4:bd:f5:e0:eb:6b:
                    7c:f7:9c:df:38:17:a7:72:e6:15:de:50:bd:54:83:
                    b8:44:fa:ce:08:cd:b0:c4:c4:ed:76:94:4d:96:fc:
                    ab:5f:ef:11:48:db:0f:ae:a6:16:53:1f:57:8c:3a:
                    fe:ef:41:13:cd:52:95:86:63:7b:a2:74:f6:46:1c:
                    09:bd:47:52:89:9f:bd:fb:08:ae:0c:4d:95:79:47:
                    2c:e4:fb:52:ae:30:49:e9:3a:71:a7:b4:04:42:71:
                    43:94:55:dd:23:8f:34:a3:f1:2e:49:60:c0:fb:18:
                    23:05:d8:d0:f9:1c:c4:76:ff:c2:8f:9a:af:82:5b:
                    38:f9:b5:4e:99:ca:60:04:2d:4c:48:f5:f1:16:31:
                    f7:3f:c5:e9:dc:fb:9d:a5:83:30:82:b0:e5:b8:23:
                    68:d7:82:48:e8:b1:2f:86:62:ca:40:40:7e:7a:10:
                    06:0e:ff:b4:7d:3d:3c:1f:92:32:8c:4b:8e:aa:88:
                    e8:dd:98:a4:c2:e5:d9:ff:09:bd:03:2d:f3:11:81:
                    d5:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:55:9E:00:49:5C:95:A0:41:55:6B:D1:D1:FA:C5:79:9F:9A:BF:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6ee42ae8-bba8-3826-a6af-ed5cdb434e5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.178.67.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:04:d3:54:cc:52:4c:35:4b:a8:bd:ec:9b:bb:a2:0f:6f:ee:
         04:20:8b:df:c7:56:98:74:e1:72:3a:56:e3:9b:e3:b6:02:e2:
         d6:93:9d:85:18:13:21:f2:c4:25:c2:b9:77:91:41:e5:82:38:
         b1:c2:31:b4:2f:30:29:7c:26:5d:41:f4:7d:97:ae:8e:6b:55:
         51:b8:28:3c:23:76:d8:65:ab:b4:69:57:ef:4d:c2:2a:58:49:
         e2:57:5b:0e:d0:97:42:31:da:bf:d7:de:df:73:32:22:bc:78:
         03:85:28:56:36:15:4d:ca:aa:0e:2e:26:f1:dc:c0:6d:c1:67:
         a1:9f:77:6f:e5:ca:23:26:8a:a4:2d:7f:34:30:df:d1:d1:6c:
         fd:67:58:ad:06:30:a5:27:29:2e:70:c8:54:98:ab:92:3f:c6:
         a6:cb:ee:93:34:ae:1f:de:6e:ed:fa:c1:66:e6:b1:30:ab:0e:
         e6:8e:fa:5d:a7:29:ec:28:6c:d3:f8:fb:06:4a:68:36:f3:44:
         ab:58:60:dd:65:79:29:22:b2:3a:31:92:de:1f:69:2e:ce:28:
         af:e3:39:70:5d:76:c5:ef:ec:72:c9:99:f8:46:2c:af:59:0d:
         13:98:51:00:23:34:85:66:41:c2:0b:5f:ab:8f:b5:dc:40:29:
         21:ea:7b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:34:51 2025 by rpki-client