Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa
File:                     cf247955-ef02-3333-a489-3d4b3ad68949.roa (raw, json)
Hash identifier:          cP++HWxJsCJsKbonD3MJqBPQAmYQWxA8VoJWpLDOCXU=
Subject key identifier:   19:DD:4F:7B:5A:4C:73:F1:B1:3A:84:15:51:48:30:CC:38:50:61:9D
Certificate issuer:       /CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
Certificate serial:       010D0C9F43285849D1650F8CCE408C6556A18800
Authority key identifier: AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     7794
IP address blocks:        199.166.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:0f:8c:ce:40:8c:65:56:a1:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59adcb6d-cc06-4e2c-b5df-20bfcd83176e
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=da29c7ac-14c3-4b05-b037-f8b75257a5ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:d8:4a:cb:74:12:ff:51:1a:b8:a3:af:00:
                    b9:6f:67:b9:ba:7a:3b:4f:27:49:cb:e6:9f:c7:2a:
                    36:38:09:13:36:66:0e:10:76:2f:31:7d:c2:3c:da:
                    b3:5d:06:f5:ff:0b:b6:cf:09:9a:1a:c4:1e:b5:19:
                    26:97:0b:f7:42:d5:51:d2:7a:c4:a1:7d:ac:be:f7:
                    b1:41:7c:d7:a3:3a:11:a9:78:58:f7:c2:37:65:24:
                    d7:67:6c:fc:3c:ab:6e:f0:67:14:ea:39:b2:46:86:
                    69:1e:c4:74:ee:5e:88:82:ee:89:6c:a5:c8:8d:ba:
                    10:fe:ed:4f:94:07:b0:36:bb:af:d8:9f:24:6c:91:
                    13:80:56:04:5d:19:fd:a3:ad:35:c4:59:21:41:aa:
                    8d:f6:8d:4b:be:10:1e:f1:0c:9b:b2:e9:7e:92:ce:
                    14:f2:51:93:0f:36:dd:6a:ca:05:6f:e6:78:02:b5:
                    80:d7:d6:bd:ba:9f:92:64:3c:ce:7f:d2:89:28:00:
                    2a:94:e5:23:0f:8c:a2:a5:2e:f0:8c:97:cc:1a:45:
                    43:40:55:46:64:20:d5:d9:7c:ee:59:78:49:da:0b:
                    db:9b:33:c8:04:2a:82:f7:54:25:38:04:24:db:64:
                    2f:e6:a0:b1:22:f1:3e:14:9f:19:7f:8e:8b:1b:7b:
                    94:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:4F:7B:5A:4C:73:F1:B1:3A:84:15:51:48:30:CC:38:50:61:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/cf247955-ef02-3333-a489-3d4b3ad68949.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.crl

            X509v3 Authority Key Identifier:
                keyid:AF:87:4C:56:51:24:6C:74:D8:15:A7:F0:86:EA:58:E0:54:53:AF:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/59adcb6d-cc06-4e2c-b5df-20bfcd83176e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.166.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:69:8d:31:31:2a:86:a4:ef:cb:6a:d7:e3:01:bb:64:43:34:
         95:69:97:0d:b9:4c:fc:16:a8:69:9c:5e:bb:ba:c8:f9:4b:26:
         a7:c0:1a:cd:46:e0:ee:e7:54:45:9a:3f:3f:46:9b:bb:e9:74:
         43:16:c9:85:e1:7a:f1:72:94:37:e4:c3:d0:1c:8f:da:25:a1:
         14:39:c0:30:72:db:b1:dc:ad:00:1e:b8:fe:9b:10:b4:1e:ba:
         0a:4b:cd:3b:3f:ac:61:20:01:54:fb:86:fe:9c:c2:5e:a5:48:
         50:d1:dd:0a:0b:b3:29:f3:88:a1:49:ad:69:39:08:8c:ae:0a:
         79:dc:5e:2b:af:64:5e:a6:58:51:74:8a:fe:bd:23:e4:98:3a:
         85:e1:6c:18:db:fa:99:3e:f3:13:76:3d:b1:7a:1d:93:30:8e:
         15:7c:5d:0e:1b:7b:10:90:07:cb:4d:2b:4b:e7:d0:07:40:55:
         31:a0:06:86:5a:1d:b9:db:bf:7d:f8:ad:bc:d0:c1:a1:93:02:
         6c:4f:06:39:c3:e7:f8:51:be:e6:49:9b:a3:97:4d:be:e8:d5:
         1e:b3:3c:a4:2e:0e:d8:9d:a4:82:1e:2e:41:b2:15:d1:ba:a1:
         a6:b5:e2:b8:67:02:8d:9b:d3:85:c9:60:6c:14:b1:67:65:0e:
         da:5a:c0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 22:16:24 2025 by rpki-client