Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa
File:                     dd261199-356b-307b-8c42-eac053b036ac.roa (raw, json)
Hash identifier:          7yX+hFzf2ycYYMQe8jgnWSzarKyVh7eJWEwXuEu6mGI=
Subject key identifier:   8A:0B:CF:B2:41:3C:76:A9:10:55:EA:22:B7:AF:63:3C:C9:73:15:D9
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285849CE9A51990667234B091F5B80
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        142.202.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:51:99:06:67:23:4b:09:1f:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=529cc448-dc0e-453c-bc26-18a431196b8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ae:b8:26:c7:22:a1:db:73:f2:86:12:38:f2:
                    9f:06:a1:49:29:bb:2d:2b:a0:77:b3:77:77:90:06:
                    fe:76:4f:38:c5:5f:3a:cf:b0:bf:32:f5:ba:53:0f:
                    5f:52:ca:45:4a:e6:af:ca:59:4a:2c:bc:4a:bf:e7:
                    0d:d7:87:fe:f1:d2:ee:c0:15:eb:a6:ce:f1:2d:aa:
                    26:55:79:b3:98:a3:a3:e7:ff:20:45:f7:bf:f1:a7:
                    37:6f:cb:63:c1:4a:1d:1a:30:a6:71:18:77:1b:90:
                    c3:7f:35:23:bb:23:38:bd:b1:b7:63:51:d4:aa:8d:
                    26:17:0a:28:92:ce:13:cc:0a:7e:40:b1:10:52:8a:
                    a7:15:96:cc:5f:53:5b:53:97:96:af:29:38:f6:61:
                    54:9a:4d:17:33:af:0c:9d:9c:09:75:72:6d:34:05:
                    e8:e6:36:69:f8:4b:d5:87:41:29:73:a4:75:93:c8:
                    e0:8d:e7:1e:49:f7:c0:14:87:44:af:d0:df:13:90:
                    be:9c:01:3d:ad:20:5c:91:80:26:b8:2f:76:a3:40:
                    ac:26:4c:45:f3:ae:65:5d:ae:5f:83:37:8f:16:af:
                    59:2c:bd:de:c9:a8:27:22:46:11:b7:9f:11:93:3c:
                    dc:95:85:61:b4:e0:5a:16:e4:74:8f:5c:55:b6:e6:
                    f0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:0B:CF:B2:41:3C:76:A9:10:55:EA:22:B7:AF:63:3C:C9:73:15:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/dd261199-356b-307b-8c42-eac053b036ac.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:c7:34:ac:c8:21:61:18:2c:d6:cb:9c:91:e4:84:a7:9b:98:
         f9:94:ae:61:1e:05:9f:1e:84:d6:41:1a:6b:7b:e5:00:d9:ae:
         6e:89:16:4b:1b:2e:d5:6f:6f:b5:e9:6f:f6:46:6b:c7:9f:0c:
         ae:eb:94:5f:4e:2c:2e:6a:12:9b:65:ac:6e:8d:7b:05:f2:8e:
         dc:a2:c5:00:c4:07:20:1d:d2:de:d1:35:3f:d9:ba:f3:61:dd:
         b8:fe:9c:ba:2a:ed:59:5c:47:28:2a:93:87:1a:30:94:66:58:
         a8:d2:d3:05:5e:31:cc:cd:0f:2d:47:c7:a4:d2:1f:69:2a:9d:
         07:52:bf:7e:38:90:9f:e7:c2:d8:ca:51:d9:ab:d0:b4:b2:21:
         74:51:9d:17:36:51:89:0d:63:10:5d:99:95:28:cf:9f:2f:e3:
         68:1f:7b:bc:42:62:05:c0:38:19:1f:4b:40:bf:57:65:7a:e9:
         e8:44:9d:5d:11:a9:f1:31:8a:12:00:bc:c6:d8:20:fc:4a:ae:
         45:01:bb:03:b7:1b:31:8e:17:1c:bb:56:d3:2f:99:ca:0b:f5:
         32:f9:77:33:50:e1:e9:e9:29:4c:86:1c:83:51:33:ae:f1:11:
         39:b2:42:e3:f8:3c:a8:30:2e:ff:40:a4:10:9d:8d:ce:e6:a5:
         16:9b:82:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:28:18 2025 by rpki-client