Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
File:                     d99b52cf-3f59-3923-9d2f-f64a1233a235.roa (raw, json)
Hash identifier:          Mwe3MfQytu3xchrZdtwgbmwy+tQd0jkNaqPDQJzYFfE=
Subject key identifier:   88:73:ED:34:1C:38:48:96:DA:E1:0C:0C:20:2C:A4:D0:4F:47:4E:32
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285849A4BB5CEA910C0B0B9C4EBAC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     36040
IP address blocks:        208.117.238.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:bb:5c:ea:91:0c:0b:0b:9c:4e:ba:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=400fadd4-a6af-4353-9453-1409ef6bb07b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:b3:84:52:34:ae:42:16:30:d2:d3:50:4e:
                    29:76:7c:cb:f8:e7:9a:b7:42:27:8f:f5:62:1d:da:
                    3e:36:bc:bc:89:bc:7b:ba:47:fd:a2:60:56:62:4a:
                    8d:c2:7f:1f:e8:df:21:74:03:96:95:88:b4:13:24:
                    79:7d:11:6e:a1:31:d2:f3:cf:f3:d1:06:e8:d9:3e:
                    41:ca:ef:06:23:8c:3a:df:69:57:8f:18:25:30:09:
                    73:27:aa:5a:a7:ed:50:93:cb:f4:12:2e:25:f2:97:
                    0b:98:1d:06:90:b1:f4:d9:93:56:9e:1d:a3:c2:01:
                    de:d1:67:40:8b:80:bb:c6:1b:f3:3d:86:ef:18:1f:
                    e8:8c:3c:77:37:10:d9:48:e3:eb:40:b5:1c:33:fb:
                    e2:79:e9:5d:0c:61:5a:f0:a4:90:b2:29:a8:ce:3d:
                    76:78:00:3d:d8:fd:c5:36:8a:37:f5:5a:41:72:4b:
                    91:51:c1:0f:2a:6c:5c:27:f8:6d:12:30:44:5b:c1:
                    e9:e8:94:8d:10:97:8f:88:65:93:77:35:0c:6e:8d:
                    12:53:d2:4b:7a:97:88:7c:65:f5:00:81:62:2d:1a:
                    02:0d:5d:32:d0:d1:48:4f:56:aa:22:55:30:8d:b5:
                    e3:8c:ff:82:bc:69:15:2c:9f:10:ac:9e:6e:3f:f2:
                    65:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:73:ED:34:1C:38:48:96:DA:E1:0C:0C:20:2C:A4:D0:4F:47:4E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/d99b52cf-3f59-3923-9d2f-f64a1233a235.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.238.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:6b:7b:78:81:f2:69:a6:e8:69:df:a5:55:6a:e4:0b:10:fe:
         1a:1b:8e:63:94:df:9c:0f:af:6b:9a:50:7a:2a:60:f9:6c:ae:
         21:8d:b5:76:29:4e:48:69:7f:5b:f0:f5:a8:11:31:6b:70:28:
         60:b6:c4:31:75:84:98:a6:e3:b5:0e:03:24:bb:fe:76:bb:e9:
         02:ec:95:f8:4e:e9:bc:24:9b:c2:2d:a1:bb:40:a5:69:cb:d3:
         04:9e:bd:87:0a:d5:a6:e7:14:1f:67:fe:7d:db:35:95:98:b9:
         43:d6:16:2a:d3:8d:30:5e:6a:89:9d:4a:9a:a6:3f:73:11:2e:
         73:22:9b:05:26:85:91:21:e3:ae:27:0f:30:df:5b:ae:3e:7c:
         77:8f:0b:6e:be:e4:73:a8:a8:a6:c0:d8:21:d4:3b:bf:cf:2f:
         07:d0:01:22:0d:2c:2a:e4:8c:da:be:f7:b2:38:48:6c:fd:34:
         0d:00:95:45:65:a2:52:bf:ae:87:3d:31:c6:b5:d5:97:fa:25:
         1c:ca:e9:20:3f:a3:2c:70:8f:0d:93:b2:6d:f5:bd:a7:20:c6:
         85:97:41:1d:88:88:7f:17:95:6c:ff:a0:38:63:35:87:25:c2:
         40:d1:00:6f:a4:27:bd:bf:f2:82:c5:f2:67:61:e3:49:ff:09:
         7a:71:fd:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 02:23:40 2025 by rpki-client