Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa
File:                     ff535494-2a23-36a7-81e0-762c387df51c.roa (raw, json)
Hash identifier:          qZv6x2d6QvKVBf6nHfyhz4iQX+QxSCAqupNubyVeMqg=
Subject key identifier:   E1:AA:0B:BE:1C:0B:AA:91:B4:0D:F7:4A:0D:1E:86:C9:73:45:66:17
Certificate issuer:       /CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
Certificate serial:       010D0C9F4328584965E97049358F28D6FEE98400
Authority key identifier: 0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa
Signing time:             Thu 03 Apr 2025 01:00:46 +0000
ROA not before:           Thu 03 Apr 2025 01:00:46 +0000
ROA not after:            Wed 02 Jul 2025 01:00:46 +0000
asID:                     33146
IP address blocks:        209.222.244.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:65:e9:70:49:35:8f:28:d6:fe:e9:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae
        Validity
            Not Before: Apr  3 01:00:46 2025 GMT
            Not After : Jul  2 01:00:46 2025 GMT
        Subject: CN=6aae4eda-d521-4830-9bed-7a0c16415e4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a8:a0:8a:1a:dd:54:b1:b6:98:68:7a:07:6d:
                    6c:38:c9:a0:02:31:62:a6:a6:cc:68:f0:5f:0b:fc:
                    92:9f:0b:3f:8f:df:64:59:b9:59:61:89:f4:2b:6c:
                    3e:c8:3e:f1:4f:7f:9d:89:55:bb:fd:d8:09:e4:22:
                    7c:00:62:b1:1d:a5:10:28:86:e4:ad:3e:0b:51:18:
                    cf:9a:34:8a:1c:62:f2:39:97:97:7c:6c:d5:8e:6a:
                    d3:a4:36:31:1f:21:6a:9b:d0:45:1a:56:fb:7f:c3:
                    74:c2:a1:a2:a4:dd:9a:d8:17:ee:cf:32:a6:43:5d:
                    45:69:74:d1:88:85:2e:84:7c:fc:06:55:e9:fe:30:
                    56:a0:35:95:69:0c:d9:66:a8:e1:5a:f8:68:8f:8b:
                    a7:5a:92:93:a0:2c:b0:c9:8c:ed:0e:75:5c:f2:44:
                    bc:e0:a1:29:06:7f:14:92:3c:5b:ff:aa:19:50:5a:
                    59:5e:e2:ce:46:a5:b8:d2:c5:5f:95:a4:c4:49:84:
                    bc:59:a9:44:3e:4c:5f:bb:a1:d0:84:f4:aa:db:c6:
                    3c:5a:85:08:09:09:39:c7:7d:5b:ad:52:44:a4:e7:
                    c7:12:c2:e8:a2:3a:94:b4:c4:9e:0f:00:ce:66:d0:
                    40:79:f8:96:53:3a:16:bb:90:43:3e:0d:de:17:5b:
                    9d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:AA:0B:BE:1C:0B:AA:91:B4:0D:F7:4A:0D:1E:86:C9:73:45:66:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/ff535494-2a23-36a7-81e0-762c387df51c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.crl

            X509v3 Authority Key Identifier:
                keyid:0A:B0:34:57:51:4F:AC:C4:8B:11:7B:16:73:3E:CC:8E:F5:C6:6F:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/f1ac83b5-4cfd-4b38-b1bb-45000eeba6ae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.222.244.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:62:4c:e0:7d:82:45:08:a5:1b:24:57:ff:47:5b:3c:86:4e:
         1c:d5:d3:e7:c8:3d:55:30:29:62:62:f6:01:50:f9:9b:e7:be:
         71:d0:06:2b:8d:01:13:ff:0e:76:4d:92:e4:5f:89:18:7e:fc:
         06:f3:70:90:d2:9f:f1:51:d0:ac:b6:39:ee:e4:58:94:e7:54:
         07:99:86:d7:52:bd:09:73:05:80:fd:0d:b2:9d:13:a5:1e:ce:
         8e:b0:85:31:bc:a2:c0:65:dc:72:6c:60:35:99:59:69:48:3f:
         63:dd:e0:68:be:e7:3b:8f:59:57:68:96:2a:7f:2a:01:30:79:
         c0:9c:2d:4b:da:f2:ce:4b:fe:dc:e1:f3:2c:3f:6b:a5:0f:37:
         8c:5f:2f:7d:46:26:0f:c3:27:e4:b9:4e:ab:fd:da:d2:17:c8:
         7d:6a:b7:10:d5:de:41:76:c7:11:0f:95:cf:52:f9:15:57:c5:
         cf:08:cf:fe:1a:f7:63:bb:30:46:9f:2c:34:ef:81:78:fd:ac:
         7f:69:c2:3d:59:87:ed:a6:69:19:c9:7c:37:20:92:44:8d:56:
         75:8a:19:38:ca:38:31:8a:12:8f:0e:35:9f:46:06:a2:bc:8e:
         b5:03:8c:46:79:2b:e5:37:cf:1e:c8:21:2d:98:6a:64:19:19:
         c3:a4:55:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:37:50 2025 by rpki-client