Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa
File:                     71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa (raw, json)
Hash identifier:          qipUUrv0ilicKQZQx9E/5OGzl6+lYAZyBHFkwTZ33wE=
Subject key identifier:   22:0D:92:4B:B8:17:2A:7D:A6:E9:F6:7E:5B:E1:E5:17:BE:62:FB:19
Certificate issuer:       /CN=7398f99d-b512-4640-b38b-2c84db430afb
Certificate serial:       010D0C9F4328584996C485DABC9F6D1CED4D15E0
Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        206.204.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:85:da:bc:9f:6d:1c:ed:4d:15:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=6c667095-ee8f-4d84-9a35-9122f6d00ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:48:87:a6:c4:6f:e9:7b:83:54:6c:4d:5b:4c:
                    e6:95:20:74:08:c4:96:db:4e:1a:5f:e8:21:f7:e7:
                    be:f0:31:76:c4:f9:21:48:b7:ff:cc:a7:31:f5:38:
                    43:3a:b8:8d:34:4a:4a:2a:66:21:8a:0d:99:a0:ec:
                    cb:5e:4b:5e:0a:8b:7c:f7:40:ad:01:6a:d0:ad:8d:
                    88:6b:dc:cc:81:ce:dc:3b:75:5b:59:e2:d9:8a:eb:
                    05:48:65:82:bb:74:67:3e:b5:0a:c0:14:8b:f1:a6:
                    9a:89:55:08:f2:39:de:d7:1f:dd:52:ad:b2:73:92:
                    3f:21:72:c7:45:9c:43:a3:4a:56:9c:80:6a:0f:75:
                    08:4a:8e:88:c1:1b:d1:88:96:1b:05:b8:81:e8:b9:
                    9d:d5:88:68:d9:48:c3:69:df:22:9f:3c:37:d3:be:
                    ed:c1:20:82:93:b3:0b:6b:74:f4:f3:fe:1d:b2:a6:
                    49:21:b2:4a:50:4b:9f:2c:da:1a:64:b8:e6:27:23:
                    ba:a8:87:69:8b:3c:b2:7d:f6:8c:94:c1:48:a2:42:
                    27:52:6e:ea:fc:c3:a8:e8:23:62:0b:d0:29:68:32:
                    f8:90:63:a5:02:c4:10:cf:ae:df:64:0b:db:f7:6d:
                    ae:88:78:c1:f9:c2:e8:b8:c6:23:20:50:a0:f5:bf:
                    dd:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0D:92:4B:B8:17:2A:7D:A6:E9:F6:7E:5B:E1:E5:17:BE:62:FB:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl

            X509v3 Authority Key Identifier:
                keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:23:37:2a:2d:8b:56:07:28:d3:05:f1:e6:59:59:cb:c0:b7:
         de:f3:24:05:81:3a:a1:67:ae:0d:79:a4:38:34:ac:b8:15:26:
         b2:55:d3:81:03:18:5e:a5:c3:90:7a:68:29:ec:c0:9c:f4:ed:
         a8:4b:f9:d3:a2:c5:2c:37:fc:1f:1a:5b:f5:27:9c:e9:d5:6c:
         b5:e4:ff:e4:ac:20:fe:ba:6e:96:d1:9b:93:6a:eb:58:28:17:
         c0:a3:77:8f:52:96:9a:8c:c7:46:5a:6a:fe:15:d1:c1:59:47:
         fd:55:b5:84:9a:59:a5:8f:bd:5b:06:53:8d:0b:5f:9a:d3:66:
         bc:05:2f:29:1a:50:b4:dc:20:73:3d:1c:03:99:26:18:c0:d7:
         8e:89:14:37:b9:96:a3:71:2c:5d:40:18:9a:fa:98:41:fe:38:
         6f:b4:45:bd:3c:5c:7f:27:51:51:c5:f2:bc:ec:de:3e:18:29:
         36:f2:76:a8:fb:b6:84:08:13:f9:b8:39:74:03:b7:bc:82:ab:
         fa:15:6c:c2:57:3c:41:e7:19:c5:59:20:2e:48:2c:ca:c2:15:
         24:f3:18:ff:30:ba:a4:fd:9b:0e:69:42:ee:81:5c:9b:5b:7a:
         e5:d0:dc:26:0a:6a:3e:1e:bb:42:c5:59:c2:84:17:61:b0:b4:
         49:43:2c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:51:28 2025 by rpki-client