Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
File:                     94ceadef-1e5b-31a7-a38d-5365f1cab273.roa (raw, json)
Hash identifier:          2cqfDbpHq/qvT7i45SwKAzEJAbC6Ce15MKp3r/fm++Y=
Subject key identifier:   1C:CF:B5:25:CA:4A:B4:4B:73:AB:49:FB:C0:55:A4:20:34:6F:A4:1B
Certificate issuer:       /CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
Certificate serial:       010D0C9F432858498CFF16024CD2351755E45F00
Authority key identifier: BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     399575
IP address blocks:        206.204.232.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:16:02:4c:d2:35:17:55:e4:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=369ffc8b-b2fc-4341-9d46-e374bfe90ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:fd:26:b0:8b:74:6c:47:1e:ef:17:47:1b:
                    85:a5:27:33:94:ee:eb:d0:f5:71:6e:73:25:82:14:
                    d1:79:de:e1:f3:38:d6:ab:42:5f:1b:26:3f:fb:2e:
                    62:0f:e1:b4:40:04:f8:18:2e:4b:13:b1:1a:e7:87:
                    3f:55:b3:fb:d0:ae:d5:59:0d:dc:78:ee:e2:37:53:
                    cb:12:83:a1:21:68:91:a6:0f:ae:bd:aa:93:f6:d3:
                    b6:60:4b:f0:54:2c:7b:bb:6a:60:68:e0:07:5f:bf:
                    0d:30:2d:20:d5:0d:5b:74:b7:2b:77:80:aa:f4:b9:
                    c0:05:df:c6:39:8c:4c:dd:05:cf:a1:00:7f:57:21:
                    87:bc:3f:4c:3b:a4:fc:11:ae:cf:d9:a2:15:07:0d:
                    88:64:df:68:b3:bc:33:42:9b:24:95:52:37:52:82:
                    d1:db:f2:ce:e5:dc:5a:fb:ed:e4:27:c1:b1:56:2b:
                    94:38:a7:43:2c:1f:6a:7c:6a:94:84:1b:e9:84:a0:
                    05:3f:6d:83:ae:6c:09:2f:85:bf:56:e5:50:7a:61:
                    2a:1d:ad:b2:66:f1:9e:a9:79:5f:79:dc:27:11:9b:
                    5d:8e:f4:8f:05:19:ff:d4:9b:16:b0:8d:b0:c8:bf:
                    00:2f:85:88:38:0a:3e:ad:ec:0d:39:d4:4c:a3:0a:
                    4d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:CF:B5:25:CA:4A:B4:4B:73:AB:49:FB:C0:55:A4:20:34:6F:A4:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/94ceadef-1e5b-31a7-a38d-5365f1cab273.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.crl

            X509v3 Authority Key Identifier:
                keyid:BB:D5:BB:B4:B1:32:AD:0C:18:D1:E6:01:13:03:0C:C1:4D:34:B8:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/65f87fc3-fc79-4db9-95bc-b2d84c4cf8ca.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:73:05:27:2e:71:07:34:9e:e5:87:fe:33:19:af:e5:47:0c:
         4c:28:5b:20:92:f7:a7:97:05:e2:70:53:1f:01:e3:cb:92:60:
         9f:d3:27:0f:1c:ac:c3:40:34:37:d9:6c:4b:21:ff:09:36:0c:
         d3:19:db:18:b9:7d:da:ce:b4:b9:52:c9:3e:da:cf:c1:4a:24:
         17:8f:e6:62:88:62:77:1d:c0:09:e8:eb:b5:51:f3:c0:c2:26:
         a6:82:0e:58:d3:02:45:e4:6e:fd:53:02:3b:6e:fa:30:a3:d1:
         41:43:44:4e:30:78:84:9c:e5:e9:fb:19:68:08:6a:d2:97:14:
         1c:d2:5f:e6:7a:90:2f:0f:e0:f5:9e:99:eb:77:64:02:4b:97:
         d4:de:58:06:50:94:2b:d4:dc:60:05:6d:42:33:8a:56:ad:5f:
         8e:22:fd:22:ca:32:03:be:75:72:a0:de:66:5d:65:4a:e4:2c:
         23:34:3d:7c:f2:be:17:7a:5c:be:8d:05:f0:f4:c9:72:38:e5:
         c4:5a:9e:14:ca:b5:d4:48:a9:d9:d9:3b:28:7f:b7:a0:5b:0a:
         64:c4:6f:49:11:5d:94:4f:72:58:16:12:23:71:cf:be:59:09:
         34:5f:c2:be:af:28:51:9c:57:78:49:e0:82:b9:4d:54:68:73:
         9b:4c:41:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:37:19 2025 by rpki-client