Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c3002785-2bbf-38b6-abd6-514bb372d3dd.roa
File:                     c3002785-2bbf-38b6-abd6-514bb372d3dd.roa (raw, json)
Hash identifier:          f7m8CdsDre+u2jUiUvGNqBCUFpUP+0Q91t4YlYU7v7g=
Subject key identifier:   82:41:36:53:D2:09:C8:E0:F4:55:17:F8:E5:3F:0B:22:3F:F7:13:18
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285849A4BB6B41AA92FB225CA726A0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c3002785-2bbf-38b6-abd6-514bb372d3dd.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        208.117.246.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:6b:41:aa:92:fb:22:5c:a7:26:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=87ade2b7-9500-49bc-a1ad-607e02930692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:03:57:db:52:74:80:72:15:53:07:3c:16:6c:
                    ef:d7:08:4b:1b:23:c3:ea:a2:b3:92:10:ce:21:71:
                    85:5c:e5:99:01:2c:f5:16:6c:f3:53:75:22:a8:8c:
                    ed:ff:6e:a4:fc:53:b8:0b:94:f8:ce:d2:cc:7d:97:
                    59:a8:63:4d:fb:7a:e5:23:1e:4e:bb:cc:c6:b0:4f:
                    6d:95:28:67:91:19:2f:b7:27:74:cf:c1:35:cc:c2:
                    6a:9a:41:18:a3:d6:a4:0a:5e:5e:44:1a:25:79:04:
                    b9:51:3a:82:34:3b:61:af:b2:8f:d9:d8:0b:f7:15:
                    82:91:3a:b4:0d:d8:28:29:dc:9e:a9:c6:30:66:13:
                    a2:01:24:f5:a9:80:c5:c6:b2:1b:3f:f0:25:9a:cd:
                    f5:41:2c:14:33:1d:c8:a4:5c:b4:11:65:55:96:54:
                    b7:a7:cc:fd:eb:72:40:07:84:5b:ca:b6:bf:0f:40:
                    79:d8:35:57:04:eb:1e:29:b6:b6:fd:9d:c8:31:09:
                    df:f5:2d:8c:0a:71:f1:aa:4e:88:24:f6:83:ee:de:
                    1a:f6:1a:48:59:bf:75:64:4a:c6:79:d4:33:7d:d6:
                    31:69:e1:8e:c4:cc:40:25:ba:96:70:e5:7d:9c:80:
                    7f:e7:8f:05:66:50:fd:63:94:2d:1d:d0:65:d4:bc:
                    9e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:41:36:53:D2:09:C8:E0:F4:55:17:F8:E5:3F:0B:22:3F:F7:13:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/c3002785-2bbf-38b6-abd6-514bb372d3dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.246.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:95:13:a4:4a:66:19:f5:68:f8:90:9e:56:67:dc:98:33:7f:
         e3:97:ca:33:50:57:6e:a7:10:5f:92:6d:c8:15:c3:d5:45:4d:
         a2:99:3f:85:ad:31:4e:8d:8b:63:ba:a4:c8:d1:11:26:77:dd:
         fb:2e:54:e3:b6:48:eb:25:7d:40:63:b9:05:32:5e:44:06:7e:
         2d:8d:04:ac:79:ab:64:48:8f:eb:32:67:b3:82:61:46:20:93:
         37:81:55:7e:73:8d:a2:f6:6d:d1:0e:80:16:b1:49:ca:66:57:
         a9:44:7e:56:08:73:6e:dd:43:f9:ad:20:01:1c:eb:88:52:cc:
         50:fc:f5:ad:cc:25:e2:f1:88:f4:76:64:64:64:d0:16:0d:fc:
         44:07:f6:00:d8:cb:b3:97:f2:0a:36:15:a1:4b:05:64:6f:78:
         49:d5:98:41:dd:3e:bf:27:3a:ec:e5:bd:4e:b1:4c:6c:ba:69:
         2c:e4:7b:ce:80:55:dc:fe:a0:2e:f9:16:79:2c:08:22:5f:69:
         3a:92:31:c4:8f:74:54:42:fd:09:da:41:f0:01:e6:bd:c4:e0:
         9d:7d:4f:19:87:d8:08:55:2b:23:25:f9:55:c8:5b:83:38:aa:
         61:bf:d2:15:90:d9:af:f1:61:99:d8:6a:b0:d0:f6:51:5a:a9:
         aa:19:e5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 02:00:19 2025 by rpki-client