Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa
File:                     6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa (raw, json)
Hash identifier:          PYS44IPvV/f9lzp8mlzE4lpwspsh1S9DVn5KIy4AS7E=
Subject key identifier:   E6:8A:DA:BA:E8:F4:42:BA:0C:45:26:D6:D5:59:85:68:41:81:9C:EA
Certificate issuer:       /CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b
Certificate serial:       010D0C9F432858499AF480983D9747E94D0EFBC0
Authority key identifier: B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        167.234.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:80:98:3d:97:47:e9:4d:0e:fb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a403f6b-0f61-4db4-a8ff-0b4adc6a313b
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=d363dd11-fe3a-44e2-aed5-66e21c88eb46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:c2:0d:c1:2a:34:34:9e:77:f4:82:4a:34:5a:
                    a7:2c:ac:54:8d:ed:3a:67:ff:e6:17:63:82:99:91:
                    d2:25:e0:eb:c8:5c:ee:c6:6d:73:3b:ba:c5:fa:0f:
                    42:08:c6:31:7b:83:ec:41:99:ec:d4:c3:6b:44:ba:
                    c1:61:3e:d0:08:33:b6:82:93:92:2f:3c:e6:0b:80:
                    1f:19:1d:28:29:77:64:99:3f:13:86:ac:c3:f2:30:
                    e5:a3:fa:e8:9e:66:8d:8f:7e:1d:6c:f0:2c:84:5b:
                    5d:45:43:ce:3b:36:08:40:c0:29:c4:7b:e1:f9:57:
                    eb:87:2a:90:ba:ba:e1:86:a3:46:55:f9:83:a2:33:
                    c2:85:a5:41:10:94:66:53:d9:13:33:23:f4:92:ab:
                    fe:38:eb:05:99:5f:a2:03:9b:66:d4:f6:ac:07:77:
                    a5:77:98:e8:55:6b:31:ec:5e:23:89:47:6f:e7:a0:
                    cc:c7:70:f2:01:73:7a:85:cf:64:bf:53:f2:25:6c:
                    b2:a6:e1:ef:4a:a7:07:1c:a0:96:a8:1f:9b:6d:3c:
                    31:87:3c:4d:ae:06:72:95:0a:4c:18:1f:31:19:60:
                    c8:c9:f3:94:75:11:de:f7:7d:7b:f6:17:ae:5d:fa:
                    e5:00:19:e0:6e:2b:53:b0:0a:5c:55:f9:6e:3c:10:
                    b7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8A:DA:BA:E8:F4:42:BA:0C:45:26:D6:D5:59:85:68:41:81:9C:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/6af70fc9-e35f-3aed-86b9-2cfa2a46f348.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.crl

            X509v3 Authority Key Identifier:
                keyid:B7:04:AF:64:46:1E:8E:22:DC:1C:BF:03:28:37:D5:CB:C0:8C:C8:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0a403f6b-0f61-4db4-a8ff-0b4adc6a313b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:5d:2b:3c:5e:5a:a3:0e:35:d7:c5:cf:a9:16:15:31:9d:1c:
         c5:b3:2d:d8:d4:3e:bc:05:45:6b:14:32:63:c2:b4:d7:14:6c:
         46:1b:ea:b1:c3:02:d0:9a:9d:7a:1c:3b:f7:65:32:2f:1d:93:
         ee:74:eb:8d:06:7a:5c:3b:13:68:61:0e:ee:83:fd:de:71:8f:
         d7:1c:42:25:84:9d:f8:cd:32:f5:34:5a:c7:7d:6a:f4:e9:72:
         3c:a3:c7:b8:ab:0c:42:eb:c5:60:ff:cd:5d:a1:0a:f0:ba:e6:
         1c:7f:99:02:dd:de:26:2a:3b:42:40:04:52:54:2d:bf:6c:19:
         eb:e4:d9:c4:01:4b:3b:18:97:ee:39:66:56:b6:21:f3:ae:c1:
         37:54:d7:cf:0c:e0:77:0b:94:cf:cc:42:e6:05:80:4b:c6:14:
         f4:f6:33:2f:bc:9d:55:22:1f:e8:be:1a:6f:7a:26:65:3b:e3:
         03:cb:60:cc:67:ef:da:2f:b8:4c:b6:64:36:2b:2e:78:ec:42:
         73:2a:46:77:09:5f:a9:28:66:f9:e1:72:5f:42:00:a4:ef:c6:
         bb:52:18:27:fb:99:bb:21:39:bb:42:4e:3b:df:85:3b:41:2d:
         3b:89:9a:a1:c0:45:9c:b0:38:80:cb:90:1b:d6:55:61:cd:b0:
         e8:b0:48:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:51:06 2025 by rpki-client