Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22c1046a-8f7b-3339-bf19-980414823807.roa
File:                     22c1046a-8f7b-3339-bf19-980414823807.roa (raw, json)
Hash identifier:          l5JUBtiKk/Htai5jHtBj3QICmuWuptns9BgPrC9LF/A=
Subject key identifier:   F4:A7:5F:1A:99:4F:8F:24:09:DB:5C:EF:BB:01:08:AF:BE:7B:36:34
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F432858498CFF1AF04EF9EB8DEA1F2330
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22c1046a-8f7b-3339-bf19-980414823807.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     203
IP address blocks:        216.240.196.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:1a:f0:4e:f9:eb:8d:ea:1f:23:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=f5b958ce-86a5-42b4-8784-42d0b76b3d87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:2d:e3:ce:78:ff:5d:b3:86:50:b7:ea:6b:dd:
                    8e:81:a3:9a:ca:d0:03:fd:a1:2f:06:11:7b:bc:80:
                    fa:57:e5:9d:f1:a8:70:31:ce:ce:67:9f:90:a1:fe:
                    c1:88:62:b0:8f:9c:6c:9f:c9:c0:6f:2f:f0:6f:96:
                    5d:7c:36:86:0d:ed:36:4f:57:93:2b:8b:2e:f0:66:
                    bd:0a:64:0b:24:2a:8c:ae:0a:60:22:66:e1:40:84:
                    57:c8:75:b2:b6:13:9b:d3:e8:8f:7c:42:57:ab:88:
                    94:1c:88:77:25:0f:ed:6a:11:48:8d:3f:77:17:c9:
                    20:a8:07:74:07:0c:ac:1c:06:79:c0:84:ab:c4:28:
                    de:95:cd:60:14:4d:6f:85:f0:d9:6e:95:e2:e1:5f:
                    4d:9e:77:4e:ad:41:77:3e:90:ba:e2:0b:91:aa:1f:
                    c4:3e:65:92:96:c1:43:0f:ad:68:0b:2b:42:c3:25:
                    1f:df:75:c4:93:42:13:7e:0b:fe:c3:84:fa:93:0d:
                    b0:59:bd:12:40:1f:df:b3:0a:1d:23:19:5b:f4:24:
                    f8:88:6f:26:97:f5:af:cc:ba:e7:e5:e4:75:b4:b4:
                    ee:a2:e5:bd:7d:ff:89:8d:37:2c:aa:42:12:9e:9c:
                    8a:4b:41:ef:35:f2:15:61:76:3b:de:eb:d7:fe:57:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A7:5F:1A:99:4F:8F:24:09:DB:5C:EF:BB:01:08:AF:BE:7B:36:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/22c1046a-8f7b-3339-bf19-980414823807.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.240.196.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:9c:b4:c8:18:66:16:4c:5b:c3:5e:fd:f5:15:e9:3b:a8:34:
         b9:bb:1c:3f:ac:2a:15:c6:30:be:45:5d:70:c5:0d:bf:dc:90:
         47:16:39:9f:ea:c8:57:a6:b5:5c:f4:3c:f0:cd:09:ce:7c:a2:
         0b:1f:f1:d7:0c:d1:65:b3:72:40:9b:89:2e:29:d9:c1:92:b7:
         39:70:e2:8c:42:25:e3:a9:29:4d:8f:41:55:d9:3d:14:be:9c:
         f1:e4:48:a0:fd:df:79:cd:29:c0:ac:ac:93:43:d9:22:dc:f6:
         d0:50:5e:28:9d:d9:73:39:2c:40:79:85:12:a6:4c:65:c3:03:
         a8:7d:75:c3:14:54:29:bd:ba:cc:19:d6:db:71:e4:2e:76:80:
         9b:40:5c:55:63:a2:7b:ad:c6:5f:ac:6e:67:39:93:4d:b2:b2:
         52:cc:9e:59:32:19:ec:12:a4:5b:42:a1:fe:ae:aa:03:30:49:
         93:52:44:3b:e6:3a:cc:a6:8f:4a:c8:ad:f1:cb:32:5b:4c:09:
         14:e7:e2:da:67:84:89:a1:ac:4f:3c:66:50:e5:df:f3:47:2c:
         ff:b9:1d:59:51:b6:7d:49:2a:db:5e:85:36:cb:33:c6:c1:40:
         4b:35:96:94:d6:fd:21:7d:26:67:08:b9:d1:0e:e4:df:28:8b:
         08:7b:75:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:27:08 2025 by rpki-client