Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7f97e8-d1b3-32cf-8f56-b1ac04b0de88.roa
File:                     7f7f97e8-d1b3-32cf-8f56-b1ac04b0de88.roa (raw, json)
Hash identifier:          5KLFlvozuR3EZg9K4oCFIMMF1lkbnhyszG9SxXGjdYg=
Subject key identifier:   BB:0F:67:A8:65:E3:A3:1B:D3:4F:B1:03:6B:D2:7D:5F:D8:2A:4B:CA
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95446C9F63A01FCDDC87080
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7f97e8-d1b3-32cf-8f56-b1ac04b0de88.roa
Signing time:             Thu 08 May 2025 15:41:07 +0000
ROA not before:           Thu 08 May 2025 15:41:07 +0000
ROA not after:            Wed 06 Aug 2025 15:41:07 +0000
asID:                     20362
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:46:c9:f6:3a:01:fc:dd:c8:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:07 2025 GMT
            Not After : Aug  6 15:41:07 2025 GMT
        Subject: CN=151f809b-57f3-47e9-a810-b88d05e43211
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:76:4e:cf:e1:ab:74:cc:fb:10:14:30:c1:9c:
                    3b:cd:82:1e:92:0e:58:ff:9b:67:0d:f8:89:29:f4:
                    27:e6:a6:03:ae:65:8e:56:78:6f:a9:80:d1:3f:68:
                    ae:53:5f:16:f6:35:5d:db:d6:f7:21:f4:60:12:bd:
                    3c:8c:94:17:4e:6f:09:fb:06:2f:6f:6e:1f:bb:a8:
                    33:7a:cb:0c:09:36:25:bd:e2:b4:75:54:81:54:20:
                    10:da:00:c9:70:78:fe:36:fd:f8:cb:72:f2:f0:b1:
                    f8:70:89:0d:45:f5:94:6b:ac:be:30:d3:8f:c2:06:
                    19:ac:52:5c:a0:ea:87:e0:42:b0:e3:54:16:cb:ba:
                    bb:93:83:70:04:10:1b:5a:46:49:dc:42:20:54:24:
                    f6:90:a0:da:e1:e4:a1:3b:9b:d7:8c:d2:48:e6:3c:
                    6c:88:54:d6:01:57:9a:3c:f4:5b:5a:d9:3e:e3:4c:
                    44:54:b8:95:96:0b:7e:2c:bf:1d:25:6a:75:0b:9e:
                    75:87:17:4c:fd:6a:41:74:15:dd:a5:a7:b5:c3:d9:
                    fa:c8:8f:5e:34:33:9e:10:20:2b:16:8f:77:96:51:
                    c7:c2:64:3a:14:20:a8:6c:41:be:f1:e4:c1:4b:37:
                    42:3b:e1:8e:aa:02:75:1b:ff:ef:63:1a:59:78:eb:
                    4f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:0F:67:A8:65:E3:A3:1B:D3:4F:B1:03:6B:D2:7D:5F:D8:2A:4B:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/7f7f97e8-d1b3-32cf-8f56-b1ac04b0de88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:eb:87:46:e8:12:b5:70:f0:d1:a6:cd:89:a6:f6:7a:e8:ec:
         f4:8f:92:ce:71:81:ae:a4:38:35:3a:b0:28:1f:aa:d6:96:ba:
         8f:0f:50:ae:54:fc:b9:35:54:a5:d4:23:66:7f:fa:f9:e9:ed:
         05:58:0c:e3:0f:3b:ed:bb:ba:9d:2f:27:b2:5b:92:4c:24:52:
         0a:b7:f5:0e:19:32:91:08:89:f4:b5:4a:d0:d9:e1:0f:89:3c:
         56:dc:fa:52:f5:ab:82:14:68:39:e1:d4:58:d0:f2:32:05:79:
         34:2e:5f:fa:64:6a:cd:e4:f1:73:d1:42:57:16:eb:47:0b:49:
         f8:26:64:67:38:d1:7f:71:f5:66:4c:7f:ac:bd:55:71:6b:e6:
         5e:d2:35:87:18:33:72:10:12:55:d7:0e:70:18:96:89:5c:e5:
         e3:04:09:bb:6e:c0:51:19:43:0c:29:1f:12:12:7d:28:a0:43:
         95:3c:82:f3:59:e2:a5:71:3d:76:da:0e:f9:28:78:e6:52:13:
         f8:f4:63:d9:8c:09:43:dd:53:b0:a3:3d:7a:54:a3:14:d0:cc:
         c7:23:19:39:f1:e6:d2:de:bb:cd:d0:8b:13:bb:65:d4:9c:a4:
         96:55:41:5b:bb:21:51:b0:37:4f:95:e0:64:ef:ad:4e:3f:ad:
         fd:c8:88:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 06:18:36 2025 by rpki-client