Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb27b8-5ff4-3204-b4db-7aead07d8471.roa
File:                     66bb27b8-5ff4-3204-b4db-7aead07d8471.roa (raw, json)
Hash identifier:          DUz+73TUpOtuHRTCeg/Lk+/dPH05fb5YXkPryyJIvrM=
Subject key identifier:   F6:7E:BA:4E:1F:70:47:03:48:62:6A:93:48:E2:92:21:C5:CA:3C:72
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95447928842F6E11B02D880
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb27b8-5ff4-3204-b4db-7aead07d8471.roa
Signing time:             Thu 08 May 2025 15:41:07 +0000
ROA not before:           Thu 08 May 2025 15:41:07 +0000
ROA not after:            Wed 06 Aug 2025 15:41:07 +0000
asID:                     27544
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:47:92:88:42:f6:e1:1b:02:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:07 2025 GMT
            Not After : Aug  6 15:41:07 2025 GMT
        Subject: CN=d0b6a33f-e35c-472c-9b6d-9b631f610c17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ec:e5:5c:35:b3:31:9b:c6:5e:32:e2:90:ae:
                    a2:e5:0e:af:bf:1f:f8:9e:dd:45:33:b7:90:18:61:
                    e5:e4:f9:4a:92:00:9e:d3:08:dd:1d:31:4c:0f:b7:
                    e4:74:a7:67:eb:0a:f8:96:73:44:01:04:5c:5b:c6:
                    0c:e6:9a:2b:b3:11:fd:2b:dd:11:42:63:32:15:f3:
                    66:3a:70:3f:d0:fa:e0:f2:08:84:b4:a4:30:b0:51:
                    58:a2:dc:24:e6:ea:ee:be:79:9d:96:09:fe:74:e2:
                    e3:bb:b2:8f:d0:37:7c:3f:0b:e5:42:b5:d3:c3:30:
                    42:f9:50:11:dc:e3:ad:5c:d5:b5:32:80:9b:ed:e0:
                    72:90:58:03:66:05:7b:88:ba:3d:22:cd:04:81:6e:
                    09:44:fe:bd:db:3a:fa:f8:5e:75:7b:7c:a0:19:10:
                    d5:c4:c5:30:06:78:3c:56:4a:44:04:6b:7d:88:2e:
                    79:2a:df:b2:6c:48:a2:2d:ea:1f:2c:97:1b:38:1c:
                    bf:f4:a1:20:d8:5d:77:c3:c1:e3:6d:fc:7f:75:1e:
                    63:92:3f:83:09:58:af:dd:0d:17:0e:b5:da:30:f1:
                    5e:8e:e6:35:8b:8e:fc:c2:98:f7:e3:62:a2:99:66:
                    ed:60:c3:46:65:3f:81:49:4f:ef:74:d6:7a:5c:6d:
                    e8:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:7E:BA:4E:1F:70:47:03:48:62:6A:93:48:E2:92:21:C5:CA:3C:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/66bb27b8-5ff4-3204-b4db-7aead07d8471.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:af:2f:20:79:0f:3a:f6:bc:24:ea:45:d1:2a:29:93:6f:99:
         e4:ff:1d:47:ff:49:55:c2:55:80:7b:00:b4:24:d2:fe:c3:00:
         45:be:ae:4f:71:30:fe:72:e9:90:2e:29:8a:9a:25:c0:d4:cb:
         f4:d0:f0:45:b2:31:a8:5b:d2:d9:69:0d:45:df:76:a0:18:5d:
         f5:89:df:93:46:5b:5a:85:39:89:ae:b2:73:1b:87:b0:6c:69:
         ac:39:48:cc:b8:a8:8a:1a:52:2d:94:9c:89:a5:f2:6d:b9:7c:
         1e:70:56:92:8b:c4:dc:70:13:57:b6:92:37:a7:b7:26:20:44:
         df:b1:58:14:38:c4:1c:6f:cb:09:21:2b:35:0d:5b:ba:f7:b2:
         b3:47:86:34:74:7d:a1:e9:15:d0:4e:21:e3:de:2c:a6:91:f9:
         e1:dd:3c:bd:75:9b:28:f4:04:10:d3:78:0a:08:69:c2:c6:1f:
         71:fe:f3:5d:9a:a4:ea:c4:2a:3b:99:6e:da:79:3d:f9:26:79:
         01:6f:ff:92:35:3e:3d:4c:bf:c7:9a:ba:43:87:04:0a:0f:37:
         c2:f1:5e:e7:1c:9f:c1:50:20:17:4a:69:5f:34:9f:2e:fd:8e:
         55:de:6b:70:b3:74:dd:f0:11:f1:72:21:62:8b:6b:45:5c:db:
         16:e9:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 23:28:54 2025 by rpki-client