Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa
File:                     b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa (raw, json)
Hash identifier:          JkUgJ0Idv34GT+4gpFIQvyKrEq7eVkP3evNCycEWSfk=
Subject key identifier:   AC:78:50:6B:0B:0D:EE:82:77:92:A4:C2:60:60:05:E4:9F:99:DA:AA
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829DF8C1BA41D4590A165C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:df:8c:1b:a4:1d:45:90:a1:65:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=0285aed9-7d64-4a9c-a590-247afc8976bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:14:d0:70:24:b8:04:5d:d2:bd:09:4a:48:
                    41:68:f4:2f:9a:43:cb:bc:8f:8c:e2:0d:72:b3:1d:
                    1d:b2:ae:6a:bf:fe:1d:22:81:01:38:91:f6:d0:81:
                    9a:2f:c6:c4:9a:39:4d:92:57:9e:61:f4:43:f8:0b:
                    4a:2f:4a:37:2e:a6:3c:68:3a:6a:0c:5a:ca:5f:8d:
                    c8:d9:30:62:c4:21:a0:f0:d2:e0:dd:d9:36:23:bd:
                    64:81:63:8d:4c:84:05:8a:6c:c3:34:84:90:a3:23:
                    09:68:53:23:58:a3:e7:45:aa:e2:8d:66:33:fb:0b:
                    1a:13:a0:c3:60:54:6f:f8:8b:2a:44:24:21:e4:83:
                    6c:33:15:b9:eb:d6:d1:6e:73:a0:38:55:11:9c:30:
                    52:92:48:98:e6:37:fd:be:cd:0e:8f:61:6e:4d:e7:
                    08:d5:12:c7:7d:7e:c7:67:d3:86:0e:1c:06:2c:bb:
                    0b:44:b1:35:60:77:e1:19:f6:a1:8b:76:1b:bb:ee:
                    50:6a:17:28:f8:e7:0d:ba:a7:ae:1d:6c:80:9a:a2:
                    4b:2c:54:ca:71:d2:24:77:0f:c9:67:58:8c:cd:38:
                    23:f8:03:ea:94:b5:5a:97:cc:f6:dc:fa:47:78:db:
                    16:42:0c:75:e4:50:3b:18:66:a3:9f:0b:68:f1:bf:
                    e2:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:78:50:6B:0B:0D:EE:82:77:92:A4:C2:60:60:05:E4:9F:99:DA:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/b0ff161c-594d-3ca8-83cd-01424a8a9f8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:a0:fb:b6:b9:74:2c:7a:44:81:26:58:ff:90:34:9b:2f:f3:
         da:c1:77:52:79:34:a1:2b:09:93:e6:e4:07:8c:51:10:99:76:
         10:ae:e2:c2:ca:b5:be:f0:82:34:14:75:72:3d:38:c4:c4:b6:
         b9:e5:6a:8d:0f:eb:d2:4b:2f:68:bf:20:02:31:b0:ac:fd:4b:
         3c:3c:0d:23:03:fc:33:3f:4a:08:da:cf:66:eb:0c:15:3e:8c:
         23:f5:b2:a3:9f:f1:4b:ec:8c:7d:09:3d:71:40:93:82:d8:62:
         11:63:65:23:1f:85:06:f4:f1:1e:f6:da:b7:15:c6:27:42:f2:
         2f:9e:b6:13:ff:e4:f9:0c:55:88:39:82:fc:d4:85:5f:4a:57:
         a2:9f:70:48:41:2e:3c:6d:70:80:69:99:d1:9d:5f:c2:7a:9f:
         33:d6:51:56:ef:a8:5e:18:f5:07:8f:7e:1d:7e:7e:c5:48:0b:
         dd:19:9e:aa:83:72:51:e9:35:5b:4d:9b:bc:13:33:bb:77:3d:
         82:f3:0c:db:da:4e:6d:7e:ac:26:42:b4:b6:0a:80:73:99:51:
         c8:e4:e5:3a:a4:7b:1d:db:6c:5c:2f:07:2c:9b:b5:a8:66:fa:
         a9:40:b8:fb:2b:7d:3e:b1:92:2f:1f:65:5a:59:48:75:cb:ff:
         ed:33:61:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:13:50 2025 by rpki-client