Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa
File:                     53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa (raw, json)
Hash identifier:          hZgBNor0sDUhh/g18kgjrqQK1HDNgOKnz5z/Zpi+nhY=
Subject key identifier:   7C:9F:17:27:73:94:7E:D5:EA:3A:87:EF:FA:57:7E:70:CA:7B:52:07
Certificate issuer:       /CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
Certificate serial:       010D0C9F43285849E91FA5D43943BC9EDB36B700
Authority key identifier: F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     396849
IP address blocks:        206.198.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 05:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a5:d4:39:43:bc:9e:db:36:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24fa05bf-5b46-4a55-bd55-4891d21cb24f
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=889eb187-becd-45d1-8140-1a306ce37374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8a:92:9b:14:ef:8c:bd:30:1c:b6:26:85:72:
                    5a:43:7a:c7:1e:8b:0d:0c:b5:32:59:09:78:6c:80:
                    b3:21:c1:dc:a0:2e:10:33:12:d0:ee:fd:36:20:33:
                    06:ab:97:04:d6:07:b6:37:58:bf:ef:d9:06:3d:4a:
                    15:cf:cc:9b:9f:48:f3:39:37:0a:79:d2:2b:1f:89:
                    fe:9d:d4:4a:2a:3b:71:d1:2e:5b:1f:f5:ef:5e:c4:
                    a4:24:68:b3:c7:82:a4:51:ad:a3:53:24:27:0b:1f:
                    cb:c1:3e:af:be:81:cc:f6:c2:72:44:ce:06:db:d6:
                    ae:0f:72:5b:30:22:fd:3a:5b:e1:ed:2b:7b:45:6c:
                    d4:b8:47:ca:07:33:1c:d8:58:17:de:18:1a:a7:44:
                    29:81:9e:26:9f:b3:8d:11:e0:77:1f:60:4b:2a:25:
                    d9:eb:14:a4:08:41:18:56:14:e9:64:b1:16:a7:ff:
                    55:11:59:f8:0d:d4:71:75:de:61:1b:a1:df:a8:56:
                    91:11:b1:1e:9b:05:f0:b9:e6:95:9f:d4:56:e6:fe:
                    70:65:ab:41:51:cc:b8:80:ee:0d:87:24:73:39:97:
                    aa:44:d8:a0:e6:56:2d:13:d6:7c:3c:98:7d:37:7d:
                    d8:e1:e1:85:c7:4f:f0:e6:12:24:76:69:a1:85:00:
                    9d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:9F:17:27:73:94:7E:D5:EA:3A:87:EF:FA:57:7E:70:CA:7B:52:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/53cd4ba6-63e5-39a8-96e2-ab5e423408e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f/24fa05bf-5b46-4a55-bd55-4891d21cb24f.crl

            X509v3 Authority Key Identifier:
                keyid:F7:6F:8C:D8:57:DC:73:3D:90:CF:C1:F9:F3:DF:C0:38:A5:E8:74:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24fa05bf-5b46-4a55-bd55-4891d21cb24f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.198.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:ac:6c:cc:0c:a6:5a:d2:0d:92:20:52:d6:0f:8e:16:37:0c:
         87:6b:b5:5a:42:b0:12:9f:14:b3:76:b7:04:b2:23:a6:aa:b7:
         33:f2:fc:b5:66:26:58:44:65:68:c6:84:6b:35:8b:46:55:d2:
         0a:c0:c8:47:95:91:96:15:fb:54:3e:bb:19:73:01:a3:a9:9f:
         c2:79:00:78:e2:b1:91:e4:cc:16:44:53:bb:1d:5b:c4:bf:89:
         bc:f1:0c:2a:ec:a6:dc:8d:9f:61:be:b4:3c:52:92:99:35:69:
         d2:5d:4b:34:dc:5c:a0:4b:4e:18:4f:c5:40:64:47:45:45:31:
         0f:9e:43:a0:1b:ed:36:b7:6e:fc:f5:f1:ce:ea:67:11:ac:9a:
         5e:6c:33:5c:13:bb:b4:39:d7:1e:e3:c4:af:a6:0a:a6:c3:70:
         48:f1:c9:cf:08:0b:2e:d9:d1:d2:b3:31:ee:30:b5:a6:bc:94:
         f5:2d:66:28:19:a2:08:11:b2:b6:7d:34:d2:f2:37:6e:c9:45:
         47:f6:03:74:25:a8:f4:5a:95:4f:23:a0:5a:e5:d9:05:11:c3:
         1b:2f:f5:39:59:f7:26:72:39:e3:a2:9d:a7:c8:22:2c:07:2c:
         e9:b8:f6:c5:97:ce:95:2d:10:92:79:a0:3d:e5:64:c9:92:98:
         94:40:08:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 06:48:01 2025 by rpki-client