Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa
File:                     d2e123a2-9096-32e7-a270-69e079c6d056.roa (raw, json)
Hash identifier:          Lsu2AC23mSEO6+PqC8xujO2rOHWSmfbJ24gw47CJASI=
Subject key identifier:   89:AA:46:06:2E:52:A4:D2:15:5B:5C:9E:7F:7E:40:8B:C5:B4:DE:4A
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285849A4BB7572D6CC097570B6BC80
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     15169
IP address blocks:        173.194.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:75:72:d6:cc:09:75:70:b6:bc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ea8a49a9-f528-4cca-9a90-3104922bfd4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:49:de:03:c1:ee:11:e5:aa:99:c4:66:9e:
                    e7:4e:63:2c:e9:99:f5:69:64:42:29:71:41:c4:a6:
                    8d:18:14:cd:d2:75:be:65:6b:e7:e9:90:e1:27:09:
                    ab:06:7e:74:c6:ec:a8:9e:18:53:59:14:2e:fb:81:
                    a0:9c:bc:99:8f:e3:6f:a8:67:5f:74:75:73:64:91:
                    be:e9:98:4c:d9:34:52:c9:50:7b:cf:15:a6:10:c3:
                    9e:8d:e5:18:c1:94:08:25:84:f1:f3:29:36:25:35:
                    8c:d4:4b:c7:cb:aa:3e:a7:fe:c9:2c:ba:c0:eb:60:
                    f7:41:02:49:8b:c2:ca:68:f2:9d:61:58:b8:5b:af:
                    ce:c4:45:a0:3b:57:8b:3e:67:67:92:ba:9c:84:71:
                    c4:da:9d:2a:65:d3:19:57:81:b1:38:b5:6a:39:89:
                    cb:0b:84:f5:52:d7:58:54:64:8b:72:08:31:43:23:
                    ee:db:86:85:86:6a:8f:45:49:5d:a3:36:4a:89:41:
                    7b:c7:62:45:7f:7f:bc:44:84:fd:89:d6:0c:9b:7a:
                    88:a4:bd:bb:05:e8:13:ae:16:be:eb:90:a0:39:75:
                    dc:c6:8f:19:7a:e6:40:b2:bb:73:04:0d:c5:5a:a1:
                    95:26:27:59:53:51:ca:b8:c9:d0:cd:c4:4c:91:b9:
                    6d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:AA:46:06:2E:52:A4:D2:15:5B:5C:9E:7F:7E:40:8B:C5:B4:DE:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/d2e123a2-9096-32e7-a270-69e079c6d056.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.194.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:ac:f1:ff:9c:0b:aa:f8:59:d7:3e:c6:0e:5e:5f:45:df:18:
         41:9b:5f:8d:54:1b:32:eb:2d:d9:b9:00:cb:f9:e0:a8:e4:77:
         35:7f:85:12:43:07:a1:19:d9:e1:d3:c7:8d:8b:ec:89:cc:d1:
         d4:41:dd:19:eb:4b:c5:4a:da:ef:5a:45:c9:23:3a:97:e2:99:
         0f:dd:5c:bd:99:32:67:ac:53:d2:0a:16:c1:bb:65:47:b1:41:
         4d:8f:88:2d:72:f2:8a:54:1b:71:15:59:78:12:d1:b4:46:d6:
         d2:36:8a:3b:74:2c:5b:30:a0:74:77:90:c2:19:4e:8d:a5:45:
         80:1f:0e:59:2f:4f:d0:3e:1b:7f:5d:39:f6:bc:16:a1:b3:10:
         8a:25:96:c2:20:6e:d3:a8:57:09:87:60:e6:6b:3d:04:f6:e7:
         57:24:74:a5:0d:f0:de:f9:73:c0:99:63:e2:62:1d:55:cb:64:
         12:f1:cd:2e:d7:69:7c:29:3e:b5:4d:7d:5d:dd:af:1e:6a:04:
         c2:d9:3c:24:ec:8a:38:95:b6:47:b2:b7:d5:96:d0:bd:82:1f:
         91:be:b1:1d:b1:83:c3:13:be:e0:d8:9e:a1:85:fb:7a:28:f7:
         f4:d4:61:a6:1c:16:f2:2f:06:26:bb:fb:42:53:8e:f2:78:3a:
         bc:79:45:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 20:56:08 2025 by rpki-client