Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/802ce518-7ed2-3d88-8e46-3e2f5bb2c40e.roa
File:                     802ce518-7ed2-3d88-8e46-3e2f5bb2c40e.roa (raw, json)
Hash identifier:          X5qnb3SANObKQfW7XEQ0/doX6FWtDIb8DllzwO49ab0=
Subject key identifier:   61:3A:11:60:E2:33:B9:35:E3:11:15:7F:E2:E7:D3:31:EB:9F:B2:CC
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F43285848A996470BC10E4F0D8006A0C4
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/802ce518-7ed2-3d88-8e46-3e2f5bb2c40e.roa
Signing time:             Sat 25 Jan 2025 14:00:52 +0000
ROA not before:           Sat 25 Jan 2025 14:00:52 +0000
ROA not after:            Fri 25 Apr 2025 13:00:52 +0000
asID:                     397215
IP address blocks:        204.74.108.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a9:96:47:0b:c1:0e:4f:0d:80:06:a0:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jan 25 14:00:52 2025 GMT
            Not After : Apr 25 13:00:52 2025 GMT
        Subject: CN=2fae607d-2642-4fcf-b5d9-d1d806fbd86f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:b3:c0:6d:f1:5f:06:f0:b8:93:42:0a:02:b6:
                    71:f0:51:6c:e6:48:46:21:09:7d:77:b4:bc:d1:82:
                    9c:89:84:df:92:1f:7c:89:ff:59:26:fe:b0:2c:85:
                    ae:83:85:db:4a:17:8e:51:77:8a:be:96:17:73:a1:
                    f7:b1:8a:1c:75:9e:28:34:e9:bb:84:a7:72:91:6e:
                    16:75:ba:84:27:e5:f1:b3:50:86:7f:ad:8a:b4:a3:
                    56:c7:f4:53:f6:af:55:10:7b:82:d1:02:e0:27:5a:
                    c5:6c:e7:95:85:e2:0c:94:34:08:a4:e6:be:d8:9d:
                    30:0d:20:a0:86:ad:e5:d4:e0:cd:94:0d:68:c2:82:
                    82:f7:e5:0f:cc:d6:d0:56:09:0b:56:e4:02:ca:31:
                    f3:e9:21:fb:d4:0c:42:86:87:02:d1:0c:53:69:72:
                    c4:60:29:94:43:bf:56:ef:87:aa:c6:c8:69:fc:7d:
                    61:86:ad:59:2b:e8:8d:b4:fc:60:85:81:94:6c:5d:
                    48:5a:40:40:6c:b2:f2:40:c2:5c:2e:12:70:45:2c:
                    66:df:b1:a1:11:77:7f:8b:3e:d3:86:ab:b9:67:77:
                    e7:84:ee:f2:22:87:2a:5f:15:a7:f5:7b:f2:fa:c6:
                    cc:bd:f7:fe:b8:03:04:1b:07:b7:9d:c4:71:74:7a:
                    0d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3A:11:60:E2:33:B9:35:E3:11:15:7F:E2:E7:D3:31:EB:9F:B2:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/802ce518-7ed2-3d88-8e46-3e2f5bb2c40e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.74.108.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:98:13:d1:65:db:61:1f:48:ae:ff:e3:66:f5:5e:6f:70:4c:
         c4:78:83:1c:9b:ec:87:c7:3d:78:8f:32:52:5e:49:82:0d:db:
         c3:a7:eb:bb:e2:f8:dd:7a:4b:ab:89:bc:0e:0f:fb:5d:f1:df:
         bb:33:11:ae:62:86:94:29:81:8a:a8:67:de:45:e3:cf:3d:32:
         c6:1e:b1:a7:ac:b4:83:eb:1f:e9:0e:34:60:2f:b7:f5:82:d7:
         6e:a7:72:c6:d5:3b:f8:da:1e:25:30:fb:44:8d:97:16:9a:3d:
         b0:bb:d4:79:ba:9e:2d:7d:f9:c0:3a:e7:e1:4d:72:c2:1a:fe:
         68:e6:bd:e3:1f:ce:fd:29:7c:4b:61:65:c8:b8:55:e0:88:c7:
         0c:e8:60:94:51:1d:7b:32:42:2c:b5:11:6f:f2:71:0a:aa:62:
         5e:44:d0:16:65:ad:bd:f7:d5:72:f0:0f:3d:a1:12:c3:95:0f:
         34:12:4b:32:75:29:ad:f4:5b:6b:ba:6b:91:ee:52:60:68:bc:
         a9:3a:46:56:40:f2:79:cc:25:15:25:cc:1f:70:8d:c2:08:71:
         35:73:b1:ad:d6:70:ff:88:3a:51:99:f9:a3:eb:80:17:41:04:
         47:88:e5:37:52:64:95:82:16:19:e6:a4:dc:d2:c3:ce:f8:9e:
         75:17:7d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:46:40 2025 by rpki-client