Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa
File:                     8e39fc82-127b-32cc-b0d9-2fb55839611a.roa (raw, json)
Hash identifier:          gBTxkJ+aDo5SkMondqzSBI9CQNM6SMYoYTrex/XfzrE=
Subject key identifier:   D3:EE:BE:A5:50:92:BA:E7:FF:9F:CE:A6:BC:D7:5E:17:E7:08:D4:FE
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A212EAC95C99BE9AFFA39780
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa
Signing time:             Thu 24 Apr 2025 14:12:54 +0000
ROA not before:           Thu 24 Apr 2025 14:12:54 +0000
ROA not after:            Wed 23 Jul 2025 14:12:54 +0000
asID:                     207266
IP address blocks:        199.249.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:12:ea:c9:5c:99:be:9a:ff:a3:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 14:12:54 2025 GMT
            Not After : Jul 23 14:12:54 2025 GMT
        Subject: CN=704b98f9-75af-4887-beed-dc285387456d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:46:c0:f8:90:23:cb:9d:ae:a2:67:0e:76:
                    d8:2d:be:62:f5:b8:48:5c:15:28:24:76:e9:89:b1:
                    3c:8f:b9:2f:6f:95:ba:e1:1f:c3:23:1d:65:d8:c1:
                    71:db:3c:e3:c1:f9:60:d5:b3:6a:eb:dc:af:54:6b:
                    0a:61:4d:ee:3f:e1:df:e3:b6:cb:5b:36:78:0c:4e:
                    95:fa:5a:29:0b:34:05:03:ec:4a:62:63:49:97:47:
                    95:39:4b:4d:36:45:22:8f:18:ff:c2:6b:a1:a0:5d:
                    58:7e:cf:ef:50:46:00:8b:21:5f:1e:b5:5e:d9:26:
                    ba:b8:78:3a:c2:79:dc:33:cf:18:8f:8f:b5:4c:90:
                    45:dc:f8:00:25:47:96:3c:30:61:32:c3:3f:db:ae:
                    b3:21:fd:1b:52:7b:e8:33:8f:13:37:a9:38:b3:e9:
                    99:b3:db:57:5c:48:27:cc:c5:1a:9c:50:91:e4:d2:
                    e9:23:6d:04:47:08:b0:60:64:32:31:c9:ee:8f:0e:
                    01:02:4c:9a:4a:03:1e:ec:df:52:80:ce:4f:f9:76:
                    7b:c1:38:6a:c3:6d:b7:cf:76:92:40:c8:f3:37:70:
                    20:cf:9f:2c:f8:e5:3e:f8:eb:a6:c1:34:8f:41:40:
                    d5:7e:be:de:f7:45:7a:9d:e1:60:61:50:15:a8:ab:
                    ea:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:EE:BE:A5:50:92:BA:E7:FF:9F:CE:A6:BC:D7:5E:17:E7:08:D4:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/8e39fc82-127b-32cc-b0d9-2fb55839611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:48:6f:9a:a0:a4:f0:23:5c:ce:78:64:2e:56:34:b5:95:9c:
         63:55:0f:50:81:62:c4:cb:4d:07:17:c0:4f:cf:2f:9a:2f:ad:
         3a:66:3e:4b:47:74:cc:f3:d9:56:6b:b8:f9:67:74:13:08:d5:
         03:78:47:3f:56:cd:3d:03:67:a3:8c:bc:68:11:a0:ca:83:98:
         c1:8b:a0:6e:03:db:21:a3:fa:2f:28:a7:6d:42:c9:04:25:9c:
         65:cd:97:36:5b:30:e1:a3:a7:24:ea:6a:77:86:ab:b9:29:19:
         f1:c7:4e:70:c1:b7:73:77:6e:fa:68:bd:38:c0:55:d4:31:8a:
         d4:8d:60:77:a5:70:56:7c:2a:c9:4c:81:fa:c6:dd:ae:ee:27:
         91:53:a2:de:15:37:50:f0:cf:9d:bd:39:71:62:fd:3e:d8:7d:
         f7:f7:c5:5f:61:b8:cc:ba:20:79:4f:1a:f6:39:20:fd:42:81:
         e2:75:dd:e9:f9:ba:cb:c3:cf:58:b7:14:c8:9e:fb:d4:5c:c1:
         0d:4d:07:0a:b5:bd:ee:4b:02:6d:32:a5:85:5d:d0:24:44:6d:
         0e:d7:b5:3f:04:6e:38:7b:22:c3:ce:15:d3:92:1b:49:2b:dc:
         6f:84:12:b5:2e:65:c0:15:9c:84:8e:ac:e9:fc:a1:43:00:5b:
         1a:b0:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 18:11:23 2025 by rpki-client