Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa
File:                     eebdb88b-3032-3ce5-8494-c2359744e382.roa (raw, json)
Hash identifier:          HPh843pf1VG+T8ANJC9zib8Lre8w/Lo4JaRACoOlXaA=
Subject key identifier:   05:43:0C:DB:43:03:42:ED:5C:94:6B:A2:BC:88:1D:0C:DB:50:DE:3C
Certificate issuer:       /CN=6341495d-ab3a-4984-a14c-2944926df2c2
Certificate serial:       010D0C9F4328584A56004A30C24A632DCD336F80
Authority key identifier: 76:15:D4:FA:C5:B7:9B:11:8B:00:53:7D:39:D9:3F:29:A7:E1:DE:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa
Signing time:             Sat 28 Jun 2025 01:00:48 +0000
ROA not before:           Sat 28 Jun 2025 01:00:48 +0000
ROA not after:            Fri 26 Sep 2025 01:00:48 +0000
asID:                     8075
IP address blocks:        168.208.48.0/24 maxlen: 24
                          168.208.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Jul 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:56:00:4a:30:c2:4a:63:2d:cd:33:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6341495d-ab3a-4984-a14c-2944926df2c2
        Validity
            Not Before: Jun 28 01:00:48 2025 GMT
            Not After : Sep 26 01:00:48 2025 GMT
        Subject: CN=3b079fef-6d0e-4ae6-b968-da3f55f9637a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:86:63:fb:aa:70:eb:96:90:73:a2:32:fb:b5:
                    3d:aa:26:b7:c3:88:76:84:46:4e:e8:6a:18:73:76:
                    5a:82:88:38:ce:23:c7:c3:f6:67:5d:91:92:f6:58:
                    3d:53:b4:85:44:a9:68:b4:a2:54:ec:15:09:4b:94:
                    82:b4:29:3d:a6:f9:20:d0:b2:0c:bd:6d:2d:ed:e8:
                    78:7e:c1:a9:fb:77:ef:8b:95:65:c4:36:de:92:47:
                    9d:e9:75:73:b9:bc:9b:74:0a:96:31:9c:af:02:4a:
                    02:5f:91:2a:ba:78:f5:88:a6:f2:a0:1c:50:e0:9b:
                    24:46:11:c8:ab:f6:e0:9e:11:73:dd:f3:92:3f:11:
                    0b:43:e4:e2:c6:e8:97:19:02:86:d6:f5:fc:24:80:
                    98:4e:43:69:28:12:23:a5:b5:a0:9f:39:8d:9a:6d:
                    31:f2:6d:0a:ed:d3:c6:e5:05:40:9b:13:f4:6b:74:
                    cc:99:ad:fb:7e:1c:ff:36:26:e6:08:b7:34:aa:f2:
                    e0:bf:65:d4:19:88:dd:33:03:ab:2a:38:f4:5f:be:
                    1c:91:42:3c:d6:78:71:2c:fe:5a:4d:18:45:8c:76:
                    7f:36:79:66:aa:a8:fd:c6:dc:48:13:91:af:cf:09:
                    d8:31:aa:6a:7d:c0:d2:b1:91:06:e5:23:96:ac:56:
                    21:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:43:0C:DB:43:03:42:ED:5C:94:6B:A2:BC:88:1D:0C:DB:50:DE:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/eebdb88b-3032-3ce5-8494-c2359744e382.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2/6341495d-ab3a-4984-a14c-2944926df2c2.crl

            X509v3 Authority Key Identifier:
                keyid:76:15:D4:FA:C5:B7:9B:11:8B:00:53:7D:39:D9:3F:29:A7:E1:DE:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/6341495d-ab3a-4984-a14c-2944926df2c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.208.48.0/24
                  168.208.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:cb:5b:30:c6:f7:2c:28:4f:3a:27:ec:50:bb:b2:ab:94:28:
         1b:09:96:15:08:bf:0d:19:89:cf:d7:ea:af:88:ae:19:3c:6d:
         70:64:66:8c:2a:19:fe:9f:ae:80:4a:67:34:b6:fa:11:ea:e4:
         c6:66:d7:b6:b3:9a:63:14:a6:a5:f7:90:1c:ea:30:8c:06:d2:
         13:2c:2c:42:59:94:f1:cb:d5:ba:d5:eb:55:25:bc:a2:7c:60:
         a9:08:b0:9a:37:ae:77:c0:94:84:9a:cb:6c:e8:7e:5e:ed:2a:
         4d:02:97:ec:b3:b3:fb:02:e0:02:95:6e:42:21:73:63:d7:61:
         62:80:d7:38:6d:e8:25:11:ca:f4:d6:4c:f9:d2:90:fb:f9:60:
         6f:f2:bf:fe:44:cf:37:9b:49:92:8c:21:d8:4b:d0:2e:bf:5d:
         d7:b3:2c:c7:50:3b:e1:e3:3f:36:cf:07:e9:10:b9:b7:d6:2e:
         54:c3:44:87:70:14:b7:d8:1b:ff:af:69:3e:04:7e:86:a8:eb:
         75:24:ca:c7:37:33:7d:9a:77:84:04:46:bd:31:ec:ee:f0:12:
         88:cb:26:af:30:4b:4f:cb:46:05:c3:4f:22:19:bc:98:1c:2f:
         d7:dc:02:5e:a9:f1:d3:19:ca:72:a9:7b:47:4c:be:1f:18:cf:
         8e:8f:90:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:05:53 2025 by rpki-client