Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
File:                     7f0af303-ef66-3494-9c38-8f672671fb76.roa (raw, json)
Hash identifier:          ZxEpx3l7b88dlk7XAYAQBgwtOAxE7tptkhwZHw5J73k=
Subject key identifier:   B1:12:3E:AD:5E:B5:D3:5E:08:36:D3:7B:8F:92:98:17:11:0A:2A:B1
Certificate issuer:       /CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
Certificate serial:       010D0C9F43285849E225271D16D8F566C29B0300
Authority key identifier: C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     22799
IP address blocks:        24.207.0.0/17 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:27:1d:16:d8:f5:66:c2:9b:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6fb18968-7aa5-41e5-96b6-c45c25a566e8
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=fd03fd18-2110-44bd-9849-8dd2cace6d3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e0:93:82:7c:ef:e6:59:b3:09:97:40:31:f1:
                    1e:20:ba:4b:0d:05:df:6e:f6:3c:58:5a:1d:6b:f9:
                    51:5f:a7:b9:89:12:76:a6:65:3c:6a:7d:40:64:54:
                    4c:f1:0c:d1:23:63:ae:98:6b:d4:13:d7:26:69:69:
                    46:65:98:e6:0e:31:be:e2:3a:5b:7d:7a:63:57:4f:
                    4a:96:f0:24:b9:be:9f:f1:c6:5a:b1:26:d3:a4:ff:
                    96:ad:3c:69:8e:66:91:b5:17:a3:f2:0c:fc:64:20:
                    2a:78:90:20:d3:1a:84:7b:8c:ee:18:ae:ef:e6:4b:
                    3d:48:c1:ca:ff:e9:3d:2a:de:73:c0:e4:fd:27:68:
                    25:19:7c:5f:74:9c:7f:af:f6:12:84:a7:4d:90:e2:
                    c0:10:f7:db:4e:af:38:73:e6:5d:9a:34:6e:30:44:
                    a5:29:a9:1a:49:37:9a:e4:dc:78:16:03:82:a5:2f:
                    78:06:af:0b:71:83:3c:58:69:12:fd:9a:18:91:82:
                    96:a5:8b:2c:1e:f3:48:df:c2:14:1d:15:80:7e:c6:
                    fd:73:ae:f5:f7:b8:5a:6c:f0:6b:87:b3:e1:d8:4e:
                    05:46:4f:9e:e9:f6:97:ac:e3:f2:17:c8:1c:e7:c2:
                    d0:26:b8:33:af:b4:04:ce:b4:01:b7:71:73:f6:0b:
                    07:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:12:3E:AD:5E:B5:D3:5E:08:36:D3:7B:8F:92:98:17:11:0A:2A:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/7f0af303-ef66-3494-9c38-8f672671fb76.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8/6fb18968-7aa5-41e5-96b6-c45c25a566e8.crl

            X509v3 Authority Key Identifier:
                keyid:C6:9F:AC:EA:70:7D:E0:51:AB:C5:1B:82:39:4D:0E:73:3A:A2:A1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6fb18968-7aa5-41e5-96b6-c45c25a566e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.207.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:4b:6e:b6:35:d2:bb:73:e3:54:4d:6a:03:f5:9e:4b:21:16:
         76:72:d0:b7:48:94:7d:2a:00:5f:78:7a:82:56:1c:5d:02:98:
         fe:e1:74:3c:dc:92:50:66:ff:9e:bd:b7:82:9f:d8:ed:08:64:
         5d:c5:fe:58:5a:c7:a7:bd:3a:ce:1f:92:be:97:7e:82:2e:fc:
         87:04:8a:d1:d0:df:91:23:a0:c6:77:42:1a:b8:42:97:eb:bb:
         33:64:a6:81:d4:2a:1e:b8:3c:d5:d7:6a:98:62:32:a0:40:14:
         93:af:93:24:4e:1e:84:f2:d3:93:39:53:79:4a:3a:2b:ae:58:
         62:f0:2a:7d:97:09:1a:8c:71:23:ff:e7:68:ee:5b:b8:ee:28:
         d8:b0:ae:9e:a7:bc:23:ef:30:e0:85:25:8f:cb:fc:92:1a:14:
         8d:97:2d:e9:85:ad:0d:4a:39:c7:dc:12:63:52:13:ac:44:ca:
         21:9a:a3:8a:1d:81:af:3c:43:51:71:80:76:95:3a:67:0c:23:
         be:da:41:df:b2:3c:72:54:51:b8:1a:57:ed:16:a6:f5:27:97:
         46:bd:e8:df:de:fd:8b:eb:4c:75:1e:23:73:16:51:f3:b9:d4:
         d1:bf:e2:a0:37:54:e5:f9:35:a1:d0:04:9d:83:c7:92:27:4a:
         18:70:02:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:51:43 2025 by rpki-client