Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa
File:                     f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa (raw, json)
Hash identifier:          BfjqV7Wce1FDGAI22F0wejrN3apVGIUayfjQdbxQGC0=
Subject key identifier:   3A:28:38:BD:10:45:42:3F:87:0F:42:AF:02:76:31:65:D9:B6:CF:59
Certificate issuer:       /CN=01bdf71e-eea5-4e2f-890a-d2ea4d527d19
Certificate serial:       010D0C9F43285849A61F382AD8395CA0280F5500
Authority key identifier: C5:55:49:1B:EB:A8:FA:DE:2B:66:B7:84:E1:43:9B:D5:F2:94:1C:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     36363
IP address blocks:        208.81.56.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 08 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:38:2a:d8:39:5c:a0:28:0f:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01bdf71e-eea5-4e2f-890a-d2ea4d527d19
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=6a8751da-409b-4658-a0de-60084e4de916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:13:ea:11:85:48:ba:77:b3:a6:d4:af:19:6e:
                    ec:3c:5b:2e:fe:eb:25:e8:57:06:42:ca:41:93:33:
                    36:89:8e:66:f2:9e:f4:e6:62:49:7c:31:c9:ce:32:
                    05:f7:ca:82:c1:ef:fa:57:e1:95:2a:71:fc:9e:23:
                    b5:76:e4:0e:0f:9d:82:c1:bb:d3:75:e9:ea:25:42:
                    dc:1c:c0:4f:5a:11:14:13:34:e4:04:13:4e:e0:00:
                    0a:4e:0a:7c:af:a7:e4:23:ed:52:28:7f:08:ee:e7:
                    bb:91:89:17:d3:50:e3:63:80:23:b0:c0:ee:fe:3a:
                    95:d1:10:76:9c:52:df:d8:80:e5:25:cc:87:dd:76:
                    91:bf:82:ee:b3:04:8f:fd:25:73:ff:75:13:6b:04:
                    5a:77:2c:6a:e0:8d:d8:67:2a:4c:23:d5:60:4a:88:
                    d3:7d:94:7d:4b:1b:0e:41:66:ae:b4:4c:e0:8a:66:
                    1d:ce:2f:d1:d2:21:25:8e:39:0b:d5:fd:92:d6:89:
                    2c:19:a2:9c:c7:72:64:b0:73:ac:05:91:d1:bc:80:
                    73:a4:ed:b9:46:df:64:b3:f5:fc:4f:4e:4e:7a:a3:
                    c6:4b:23:f6:cd:82:dc:1b:d0:dc:e9:c5:61:3c:6a:
                    72:13:be:ba:29:0f:d0:68:a6:88:64:e8:3e:9f:54:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:28:38:BD:10:45:42:3F:87:0F:42:AF:02:76:31:65:D9:B6:CF:59
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/f26992d0-ecba-3b2c-a2f1-b0ef581aeceb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.crl

            X509v3 Authority Key Identifier:
                keyid:C5:55:49:1B:EB:A8:FA:DE:2B:66:B7:84:E1:43:9B:D5:F2:94:1C:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/01bdf71e-eea5-4e2f-890a-d2ea4d527d19.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.81.56.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:b7:b8:d3:27:0d:47:51:bd:d9:1f:b8:2d:d9:9f:1e:0f:25:
         79:57:28:1d:a0:02:92:df:22:ef:a5:da:89:82:34:ff:c0:59:
         10:4d:db:e6:2b:f2:6d:d2:73:ae:c8:3d:ab:cf:72:08:54:f1:
         e9:fb:79:fa:19:f3:1d:dc:83:d7:6a:4d:93:53:88:41:64:31:
         0a:17:fc:75:b8:c8:57:1a:2d:25:36:02:4b:a9:9c:19:ce:04:
         6c:09:c6:61:6a:af:c2:f0:88:2a:fc:8f:25:27:1c:51:40:00:
         03:03:e6:1e:1e:c4:bd:b2:b7:e2:4e:91:0f:3e:f3:3d:ce:07:
         fa:ed:38:20:7f:e7:9d:75:85:d1:97:f7:b6:97:e5:a2:26:fa:
         d8:06:54:75:5b:57:66:23:13:c1:1c:9e:f1:20:ef:a0:52:69:
         bc:13:9a:4d:e5:47:fc:cb:31:42:5c:4e:78:fe:bd:90:b0:0a:
         1e:28:b4:8c:22:0c:72:cf:c7:ba:ee:d8:fa:fa:6b:53:94:dc:
         59:72:cd:9f:42:0c:d4:b4:87:7c:a3:3e:cc:c8:ca:db:9a:05:
         a5:45:9d:e5:46:71:1b:78:42:5b:b4:6b:54:28:89:44:92:54:
         ab:7e:c0:a6:44:f4:a1:87:fb:b6:c0:33:22:fe:2f:d3:5e:4c:
         25:9e:ca:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 04:47:57 2025 by rpki-client