Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa
File:                     45e59513-dc26-3e04-abf8-7d34500e5091.roa (raw, json)
Hash identifier:          IfoxCuN6IXjfTqmVnOgrua8HR1qRFawL4iMv7nsgrCc=
Subject key identifier:   66:2E:8A:CD:A3:64:55:11:9B:43:40:D4:4A:69:0A:86:5A:25:B9:7B
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F432858498E648375803315376B782600
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa
Signing time:             Thu 17 Apr 2025 13:01:00 +0000
ROA not before:           Thu 17 Apr 2025 13:01:00 +0000
ROA not after:            Wed 16 Jul 2025 13:01:00 +0000
asID:                     11810
IP address blocks:        216.185.208.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8e:64:83:75:80:33:15:37:6b:78:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Apr 17 13:01:00 2025 GMT
            Not After : Jul 16 13:01:00 2025 GMT
        Subject: CN=e59578e5-4235-4b86-b0d0-9e6cb3815536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b2:65:e3:e9:dc:49:91:dd:b9:82:da:1a:2b:
                    3e:e8:01:25:87:f7:a7:e5:37:84:b8:d5:c9:be:9c:
                    c8:7a:8a:53:75:b0:6e:fe:cd:ba:d7:31:d9:7c:fb:
                    fc:45:04:75:8e:20:79:a7:cc:a6:1d:27:39:f8:f9:
                    dd:61:0d:e5:72:7d:c8:d4:22:24:f8:2f:17:0a:34:
                    1d:e7:b0:18:84:8b:f0:bd:3e:7b:ad:09:b6:ef:f4:
                    35:7a:a4:dc:8d:24:7d:71:ef:8b:16:a5:53:6f:f4:
                    59:50:c1:17:7e:04:3c:c1:de:06:81:e0:3c:ab:3d:
                    34:1d:b7:2b:68:8c:35:2a:ae:b3:b4:9b:3f:04:9c:
                    9a:3b:ea:47:f1:5b:54:1d:94:29:9d:49:0a:c2:15:
                    52:b8:25:31:b3:8a:a2:86:09:68:e8:86:54:03:c0:
                    31:08:04:37:90:d6:82:f9:34:7c:65:2c:82:28:de:
                    dd:9e:c4:ad:94:33:40:a2:5d:b6:72:12:18:f3:a7:
                    00:67:4e:94:22:30:6b:b1:d7:3f:43:4d:b9:79:c8:
                    8c:5a:98:19:95:69:52:9a:52:5d:b2:aa:da:f5:83:
                    38:36:54:e0:89:18:de:34:f6:a0:fe:50:c6:5b:30:
                    13:9a:10:b7:81:f7:44:58:ca:39:87:bc:eb:0e:8c:
                    70:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:2E:8A:CD:A3:64:55:11:9B:43:40:D4:4A:69:0A:86:5A:25:B9:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/45e59513-dc26-3e04-abf8-7d34500e5091.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.208.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c2:2d:36:0b:e9:e4:72:83:32:78:c0:8a:60:a4:86:4b:0e:
         54:da:3e:f9:fa:6d:fa:ee:14:74:1b:a2:a1:77:2b:8a:a6:98:
         53:fa:13:ae:1c:14:fa:60:55:0f:54:2c:19:ae:83:f5:e1:c8:
         8e:f9:a5:0c:84:c0:a9:6f:77:5f:d9:15:69:e3:a5:f0:a1:e2:
         f1:c9:dd:31:1c:45:84:52:b7:02:8b:ed:54:e2:b5:50:14:b2:
         6c:6b:17:4d:bb:2f:63:0d:63:41:e0:f1:c1:ac:3b:a6:ce:53:
         36:bb:7f:84:f4:f5:de:ac:ee:b4:d8:a4:4a:35:48:92:f8:59:
         f8:29:1c:91:f7:64:6f:e6:48:b6:91:5c:42:1b:66:e8:05:d4:
         5c:3f:10:83:94:7a:f1:a0:46:4f:ac:48:84:f6:aa:81:e0:b3:
         93:f7:e9:fc:a7:ba:36:dd:a3:4c:48:85:1a:5f:46:0e:b0:54:
         5d:98:77:8f:21:d8:c0:8b:74:be:87:aa:c0:f6:6f:35:21:39:
         26:53:aa:30:21:fc:73:ca:81:05:6f:5d:b4:bc:67:3e:be:1a:
         2f:e7:78:67:59:3d:11:7d:b4:27:33:3d:54:85:7d:df:41:84:
         c6:94:d8:f6:33:53:ad:bc:aa:12:d1:0b:82:ff:54:c3:d8:4e:
         2b:9b:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 06:41:18 2025 by rpki-client