Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
File:                     4433889e-7469-326e-ba6b-e9db4a76686b.roa (raw, json)
Hash identifier:          xO+uVYcRj3snJq14tkhEfCGiiUl9Cb2K9Sdnr2yGVos=
Subject key identifier:   BE:3B:8C:A9:9A:95:6A:57:A5:AE:07:30:9E:50:F4:DC:44:5F:DE:D3
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C5821FA1BF7522FC64D80400
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.244.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:1f:a1:bf:75:22:fc:64:d8:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=f902cb53-9e01-4bad-81fd-10dca97da9ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d8:2b:25:22:ee:c4:e0:81:6a:4e:f8:75:13:
                    33:21:6f:1b:71:ac:35:49:38:52:b3:b2:08:3f:61:
                    4e:46:ca:94:07:44:a9:e9:fe:21:46:87:82:b9:45:
                    1d:3d:84:da:32:33:6f:20:e0:78:4e:19:9b:da:5c:
                    a3:80:ca:88:75:c3:7a:14:c1:5b:6f:b1:4b:a3:c9:
                    72:d3:df:91:13:fc:8a:29:ca:3b:3f:39:e5:d9:36:
                    1b:06:31:69:17:98:d0:96:87:37:df:bf:13:20:88:
                    91:a4:d6:25:fb:83:1b:fb:c7:f3:6c:bd:24:14:52:
                    cc:84:61:66:0f:a4:f9:8f:ab:be:44:af:37:8c:32:
                    2b:da:83:40:c1:1f:ff:7c:19:d6:08:92:9d:03:a1:
                    26:15:b4:2e:23:dd:31:ab:89:db:8c:67:a0:37:c0:
                    7a:0c:99:c5:51:d8:b4:31:93:40:95:b2:aa:15:ee:
                    e6:8f:88:6d:1b:eb:80:3a:12:d2:ea:7a:27:08:37:
                    d5:96:1c:8e:ab:79:f9:32:c5:6b:08:06:5e:11:a6:
                    36:14:24:51:af:65:e4:c8:d0:98:e7:8e:95:8b:00:
                    5b:e5:66:34:9e:47:52:52:1a:2f:5b:23:38:27:0a:
                    98:64:e5:d4:97:df:51:c9:b1:dd:05:41:9a:86:df:
                    34:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:8C:A9:9A:95:6A:57:A5:AE:07:30:9E:50:F4:DC:44:5F:DE:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/4433889e-7469-326e-ba6b-e9db4a76686b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.244.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:0f:1c:93:73:41:97:a3:71:25:aa:9f:c9:3d:8f:33:bb:83:
         3f:dd:35:5f:56:fa:fb:e5:e8:89:52:96:4a:4a:7e:90:78:8e:
         33:85:5d:1d:03:81:23:f4:6b:9e:6c:aa:24:e4:8f:ce:5b:87:
         a4:e3:21:9c:50:ed:83:5c:60:c8:df:f9:1b:ca:21:7e:ec:c4:
         06:f9:15:f1:63:9e:e7:3e:ee:de:28:20:7c:7c:57:f1:97:e0:
         0f:5d:c2:8c:58:7a:e7:cb:89:f6:f9:cf:04:9f:81:06:81:fd:
         ce:e1:d3:d7:0a:19:32:0f:b6:e0:57:78:f0:73:0e:e5:c0:f1:
         90:99:d2:64:93:bc:54:cd:4c:ea:6e:39:db:c0:36:10:8b:c9:
         2e:cb:53:f5:0b:b4:ab:70:24:89:43:eb:24:3e:a8:e0:a0:a0:
         c0:f6:15:40:bd:ce:c0:4f:30:b4:a4:48:c2:ce:94:6b:fc:f3:
         21:17:e9:d9:88:d9:03:1a:c5:de:3f:08:0d:dd:fa:08:78:14:
         c7:35:88:22:57:fc:06:08:2f:8b:65:24:6a:70:02:11:87:3b:
         a0:14:0c:d2:61:a5:0a:b8:a0:27:dc:4d:02:55:8b:e5:94:ee:
         91:5b:75:e5:8c:0d:96:81:da:db:f7:84:e4:55:42:e4:da:a4:
         63:f1:83:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 23:17:12 2025 by rpki-client