Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58e9407b-5061-30c3-a73c-e456e57d6d78.roa
File:                     58e9407b-5061-30c3-a73c-e456e57d6d78.roa (raw, json)
Hash identifier:          Y5yD+hiP3KCcKzb9pJY0t8b8aLoQPfpYsOeGNgrsvyM=
Subject key identifier:   71:42:75:9C:11:40:C3:8C:33:69:07:5F:D2:A3:DB:06:9F:C1:E1:20
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F90338CAB9B28C87B7780
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58e9407b-5061-30c3-a73c-e456e57d6d78.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     17359
IP address blocks:        208.92.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:90:33:8c:ab:9b:28:c8:7b:77:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=24445ff2-f236-462f-950a-13bae28ab9ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:b1:61:1b:9e:78:f7:ed:ce:4f:3a:6b:1d:e8:
                    30:a9:94:86:76:a9:fd:c1:35:2e:0b:60:38:b7:40:
                    9e:5f:02:4a:ab:b1:32:b3:e7:5b:2e:a5:15:ea:ff:
                    d6:92:d6:be:d1:02:86:d8:e3:89:05:af:61:33:4a:
                    46:57:96:87:79:6b:fc:cd:f6:f1:ae:ab:1d:af:02:
                    a0:4c:ca:3e:5a:48:7a:db:52:3c:b3:91:22:f8:bf:
                    46:ff:24:f3:1e:db:d2:1c:62:88:3d:ff:b3:20:8f:
                    45:73:ed:13:c4:d8:6b:a5:01:de:a6:62:28:af:57:
                    99:dc:f7:fc:7d:c1:c3:74:93:82:4e:06:9b:f9:bd:
                    41:3f:d8:cd:07:64:6a:e5:7a:c5:f1:e6:7a:16:8f:
                    2a:a7:a5:7b:02:a8:49:70:07:59:eb:63:31:ed:bf:
                    2a:c5:ff:21:fe:0c:fd:99:9d:d7:47:4b:3b:e6:60:
                    1a:23:74:db:e0:28:35:72:f3:75:92:0d:12:7f:3a:
                    38:7a:6f:ad:70:ef:d5:f8:76:93:a1:6c:36:33:5b:
                    56:fb:a4:9a:93:02:d3:b4:65:58:3d:3a:72:70:2f:
                    8f:af:e5:83:bc:7e:96:36:da:4e:11:20:07:b9:b1:
                    0f:9a:8c:1c:79:af:f3:6c:bb:91:81:76:74:5e:3f:
                    30:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:42:75:9C:11:40:C3:8C:33:69:07:5F:D2:A3:DB:06:9F:C1:E1:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/58e9407b-5061-30c3-a73c-e456e57d6d78.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.92.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:8a:97:de:4b:c9:01:6a:2d:4b:85:5a:2c:b4:64:19:78:37:
         22:e4:71:7b:a1:98:39:ca:6b:21:f6:8f:62:35:e0:c7:ef:4d:
         d6:3c:3a:6a:f8:71:ea:f6:dd:ed:67:7d:1a:41:03:b2:4c:dc:
         ac:be:65:82:a2:de:c4:6a:1e:3f:8b:23:e2:f3:17:c9:37:ef:
         34:d4:b4:59:c2:db:bf:ba:4a:52:d4:66:3f:d3:be:10:81:f7:
         ee:6c:1d:38:5f:62:db:fd:12:bf:18:4a:88:1e:22:e8:eb:39:
         3b:55:36:e1:24:d9:07:3a:23:46:2e:bd:a1:51:1a:9a:c7:fa:
         07:0d:30:89:b9:c3:1d:a3:67:71:e5:dc:02:44:80:18:87:a4:
         5f:3c:fc:6f:c7:bc:e3:d8:c6:ee:43:b6:34:bf:72:a8:23:cb:
         c9:b9:3b:16:63:de:d0:a9:e5:d8:52:f3:1c:d1:a5:c7:1f:6c:
         80:59:f6:4b:25:b8:cb:4a:aa:b3:dc:65:bc:e6:ab:4a:93:63:
         a0:33:1f:6b:eb:94:4a:db:66:cf:ae:94:9d:1b:69:48:e8:e9:
         83:0f:59:c3:b9:de:0d:83:5a:c0:5e:a0:57:19:c9:43:29:0f:
         ae:83:a9:86:78:27:67:0a:32:8d:4e:80:34:f6:ad:51:26:73:
         fa:11:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 20:57:34 2025 by rpki-client