Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
File:                     446abe31-2685-30a7-992e-ef5bdffad3fc.roa (raw, json)
Hash identifier:          fUd4NfdJk3Kk1qYco+O+sjCwWaPZ06zVVANy/RHdZ3k=
Subject key identifier:   A6:33:63:52:98:FC:28:DB:36:32:50:E7:F4:EC:2B:BE:D3:4C:F8:1A
Certificate issuer:       /CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
Certificate serial:       010D0C9F432858493C0941BEB5B6B28D10B92300
Authority key identifier: 32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     26380
IP address blocks:        216.119.208.0/24 maxlen: 24
                          216.119.209.0/24 maxlen: 24
                          216.119.210.0/24 maxlen: 24
                          216.119.214.0/24 maxlen: 24
                          216.119.215.0/24 maxlen: 24
                          216.119.216.0/24 maxlen: 24
                          216.119.217.0/24 maxlen: 24
                          216.119.218.0/24 maxlen: 24
                          216.119.219.0/24 maxlen: 24
                          216.119.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:41:be:b5:b6:b2:8d:10:b9:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7daddf1f-a775-44aa-b3ca-3520f73993ed
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=939975bb-aa5f-4b91-b356-1eadbe757a46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:cf:6a:7c:8c:43:59:a8:f1:ad:50:a9:8e:76:
                    84:13:08:50:97:b4:c5:ee:9c:63:b8:42:4f:43:35:
                    92:4d:55:88:9c:a0:49:88:86:c9:04:39:da:df:59:
                    35:12:43:37:f1:65:3b:42:5b:91:89:79:65:06:61:
                    ef:90:eb:4f:2e:4d:d2:ac:d6:3e:7e:d1:d1:eb:7c:
                    46:82:1f:74:dd:8f:44:ce:9a:5e:16:24:12:8b:46:
                    f8:25:f3:c3:73:7c:5f:35:02:ef:76:5c:a9:54:b4:
                    39:3e:67:da:75:31:b7:1c:cf:42:ec:bc:c7:11:4b:
                    89:8e:22:be:26:3a:83:04:a3:e9:42:3d:63:6b:d5:
                    11:08:91:fa:ce:74:ab:fd:13:87:68:69:57:06:52:
                    e5:ac:3f:22:33:72:df:5c:f7:30:36:4c:02:1d:3d:
                    9c:5e:71:bd:4d:43:9e:ed:96:21:60:75:1f:e6:4e:
                    e8:14:3b:da:e0:d5:23:4a:ef:0a:59:b7:b1:80:86:
                    7d:6c:bf:ca:df:65:b4:b2:d4:90:48:4d:84:b9:d8:
                    62:01:80:28:1e:48:5a:be:da:d9:a0:44:ea:25:1b:
                    51:c1:d7:3a:45:3c:68:f4:6b:2e:9d:59:41:aa:9d:
                    1e:89:4d:4c:d5:ff:47:2e:61:6b:0d:5c:55:3c:9c:
                    ac:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:33:63:52:98:FC:28:DB:36:32:50:E7:F4:EC:2B:BE:D3:4C:F8:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/446abe31-2685-30a7-992e-ef5bdffad3fc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed/7daddf1f-a775-44aa-b3ca-3520f73993ed.crl

            X509v3 Authority Key Identifier:
                keyid:32:50:48:99:D0:D8:21:79:01:23:50:DE:2F:A2:3C:5A:5B:1A:D9:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/7daddf1f-a775-44aa-b3ca-3520f73993ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.119.208.0-216.119.210.255
                  216.119.214.0-216.119.219.255
                  216.119.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:69:03:5e:e3:f3:d1:38:69:1c:19:ab:cf:c6:42:56:d1:4a:
         70:e3:ec:de:0e:b2:47:db:d6:48:6f:10:4a:e7:1e:4f:ab:24:
         93:4f:dc:91:10:66:99:f3:8e:61:4c:ee:58:bc:53:82:09:b9:
         ef:61:68:49:ab:42:94:06:56:3d:3c:03:82:ad:89:39:92:43:
         e3:77:01:36:ba:40:69:a4:e6:93:44:3f:04:0e:59:00:7f:35:
         36:73:f8:66:0e:a8:5a:99:1f:d0:91:95:68:f8:15:e1:71:6d:
         11:5f:3b:a7:f7:f6:b4:92:a6:5b:4c:00:08:bd:a4:fc:a3:e7:
         fc:5e:8a:b9:f9:65:25:30:de:0d:18:44:8e:89:99:ef:ef:65:
         03:68:d7:c0:93:4f:68:00:62:76:c6:62:74:73:2c:76:4d:cc:
         b4:ee:12:9b:3d:d4:06:6a:97:e4:34:a6:db:11:f6:35:c0:12:
         1d:7d:de:3c:85:20:80:46:e2:48:24:9f:14:38:79:33:32:ec:
         e9:49:49:5e:14:e3:e1:df:b4:78:2c:c0:1b:f4:72:b6:c1:da:
         93:90:89:46:94:90:d4:03:c5:eb:98:f2:17:72:70:e7:fd:27:
         72:c2:ae:16:59:bc:c0:10:b0:f8:51:84:10:c5:87:a3:18:5a:
         5b:0b:b2:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:08 2025 by rpki-client