Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
File:                     3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa (raw, json)
Hash identifier:          WkkUuRv3onoX4lD9ezZIqt8YkjKlRI8yozzcEzqqLOw=
Subject key identifier:   52:E7:C6:5C:91:3B:E1:D0:6E:33:DF:96:9E:E8:CE:CE:60:5D:A3:45
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285849A4BACA930E40020EBDEF1880
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        208.117.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:ca:93:0e:40:02:0e:bd:ef:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=ef2bc6dd-bfef-4a8d-88e6-f36c6fbd12c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:42:5f:b4:75:78:94:b3:4b:72:5d:ce:bb:f8:
                    f0:aa:e9:c1:dc:2b:67:ed:85:77:b0:98:8e:bb:3a:
                    db:4e:29:a2:39:e0:70:d0:be:03:24:29:08:72:bb:
                    90:18:cb:a1:fc:87:4e:e1:48:4a:ac:9e:b3:31:c4:
                    9b:83:ef:32:af:d0:ad:c3:f0:e0:91:a2:35:7e:2b:
                    44:16:1b:38:35:09:dc:60:e1:ec:5f:82:28:1a:b7:
                    1a:bf:2a:26:09:80:87:e8:46:16:c1:bc:8e:7c:d3:
                    b7:6b:4c:6f:cf:66:3b:85:99:f3:55:ec:d9:a2:d8:
                    0b:8c:1f:73:1c:e5:2d:b6:b4:a2:3b:4e:cd:75:c1:
                    63:d0:7f:4a:f8:b4:21:6e:3b:ec:ee:14:89:d9:5e:
                    20:d1:20:18:87:77:b9:c7:39:93:3c:40:b8:4c:48:
                    9e:19:6b:6d:4e:be:95:b9:5c:af:48:22:fa:7e:79:
                    a2:a7:3b:02:7a:cf:b8:9c:c3:bf:d4:43:de:f1:01:
                    13:04:c3:53:80:87:aa:e8:2e:1a:21:d9:4c:5c:51:
                    9d:c8:27:9f:4b:1e:9b:e5:54:d3:f8:b0:e8:be:45:
                    a9:fa:5c:83:09:e0:41:f7:d0:8c:7a:ac:86:fc:7e:
                    bb:61:3d:73:a6:15:81:c3:e4:bc:1c:1e:b9:40:e4:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E7:C6:5C:91:3B:E1:D0:6E:33:DF:96:9E:E8:CE:CE:60:5D:A3:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/3298f122-5e93-3fd2-a5ee-4b25fbaf12ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:c6:f6:21:ff:58:c5:bc:ea:21:52:e4:ac:21:07:aa:de:6d:
         fb:48:dd:04:74:2c:55:6f:a1:ea:7f:7f:60:a9:e3:3b:92:95:
         3e:56:21:4c:5a:3b:dc:69:a0:9f:5a:5c:61:fa:d7:2e:4a:1e:
         d7:93:63:c6:d1:6f:60:a1:ee:bd:13:71:13:d5:4a:56:37:81:
         cf:9f:d9:7c:6f:5c:ee:46:a7:d0:64:a5:78:08:08:3e:52:0e:
         76:4c:f8:bc:0b:41:90:11:ee:cf:0e:c4:dd:8b:28:cb:28:84:
         ee:3e:d7:33:3d:29:50:3c:78:7d:a6:ae:19:7d:1a:eb:85:6d:
         8a:b2:9b:67:f5:af:54:f6:0c:67:14:b5:f3:24:a7:8e:ab:a7:
         1c:d4:5d:50:86:25:e2:e3:a1:bc:ea:48:00:95:e7:57:26:b8:
         4a:e2:17:07:95:af:7b:a6:a2:d6:19:39:00:7d:88:25:56:b1:
         24:bf:9f:9b:09:61:e4:33:b5:3c:7e:34:4b:54:94:01:0d:3f:
         3d:b8:df:5d:c6:1b:74:14:fe:b0:bc:8d:54:18:96:e2:e1:12:
         18:fa:f6:7c:d8:c5:a1:5a:9c:f3:96:9d:9e:9a:b2:34:62:b7:
         00:21:fe:f8:fc:cd:9b:80:4c:a0:7f:85:3e:d7:33:99:4d:6f:
         3d:1c:82:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 13:33:13 2025 by rpki-client