Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
File:                     022d8988-9d2b-32ce-97c6-f993375ebefa.roa (raw, json)
Hash identifier:          L2d4izhrztIZXriOAlIbOGt/EWtOamAlpuCkrxhfd0w=
Subject key identifier:   FD:E1:3C:EF:EA:C5:0C:97:95:9A:07:85:8A:17:5C:0E:FF:50:C2:23
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F4328584917DC25374936AA8D64150E40
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     398233
IP address blocks:        67.214.119.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:25:37:49:36:aa:8d:64:15:0e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=51b1a7a7-bbec-457c-9234-bf7a9f723369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:95:70:03:f0:2e:4c:04:df:9f:b6:46:13:b1:
                    1e:bc:59:28:50:6d:58:1f:53:17:4d:30:10:59:c9:
                    bf:0a:29:14:57:c8:13:bd:04:08:4b:55:37:61:b4:
                    00:4b:b9:1d:1c:e4:17:69:ff:6b:f2:21:08:f9:10:
                    d1:20:33:0b:8b:64:e4:80:ef:4b:fa:4a:b6:74:8e:
                    7e:70:92:29:0a:f9:3d:39:cd:18:17:b8:02:86:c0:
                    0d:68:a5:fd:b3:4c:11:9f:9b:6b:d7:07:82:cd:54:
                    d6:1b:d3:7c:2d:5f:0d:19:7a:49:52:99:72:63:cf:
                    cd:be:48:eb:80:2d:40:bf:2e:21:e3:d6:9d:94:e5:
                    61:76:ee:a3:4e:8d:c0:94:22:60:ef:e4:68:98:43:
                    6f:1b:71:9b:26:77:e8:c9:c9:a2:09:a5:8c:71:39:
                    0b:54:d0:61:c9:ec:9b:e9:d7:71:89:59:fd:8b:af:
                    62:fe:05:b7:04:97:07:ce:0b:61:49:21:3f:40:5a:
                    de:5c:93:b8:5a:df:3d:17:64:e2:22:02:06:a3:68:
                    eb:23:ea:36:43:48:11:d4:7b:2b:29:e4:3c:20:f9:
                    21:e6:0b:82:7e:26:c2:cb:e1:fd:5f:06:22:7a:23:
                    42:c5:f6:a9:3f:22:85:46:b8:2e:fd:64:69:7d:4b:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:E1:3C:EF:EA:C5:0C:97:95:9A:07:85:8A:17:5C:0E:FF:50:C2:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/022d8988-9d2b-32ce-97c6-f993375ebefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.119.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:13:4f:94:2b:93:68:71:92:21:26:57:de:a7:71:b9:3d:bf:
         e5:a2:af:ab:98:1a:20:c8:b1:bc:e6:43:47:d4:b1:a6:09:c9:
         28:3e:23:70:24:86:75:01:28:20:1b:6e:3e:16:ee:99:ed:01:
         31:5d:17:68:8f:a6:f1:ba:b7:76:35:91:2d:9c:12:c3:df:a7:
         c8:cd:e8:24:5e:43:89:15:19:34:a8:a8:0c:3b:fa:2d:cd:c6:
         12:7c:3c:1d:82:b0:cb:63:a2:36:01:b7:1b:9c:8b:24:2f:12:
         1d:e3:89:52:a6:5d:6d:a2:68:4f:c6:eb:4f:e3:60:e1:7a:06:
         31:a6:bc:38:e2:f4:af:29:e7:83:21:c1:ae:9f:32:a6:d1:e2:
         61:46:b8:49:36:89:fa:39:d9:05:0e:3d:40:99:6f:0e:86:f5:
         f4:6f:f5:d3:54:02:2d:87:3c:95:aa:c3:f6:bd:14:a1:75:a7:
         14:79:b7:bb:54:1b:90:24:de:4c:bc:ee:4c:aa:c4:a1:67:28:
         78:cd:29:e2:93:3f:2d:97:2d:5c:db:27:2c:e0:eb:1d:e8:e6:
         c6:4f:70:71:20:4e:99:bc:69:ea:3e:72:d2:be:ce:42:76:e6:
         6d:4b:42:97:b9:ad:59:86:e3:a4:2a:1b:6e:85:7b:27:53:d8:
         02:06:b6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:12:23 2025 by rpki-client