Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
File:                     37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa (raw, json)
Hash identifier:          qi8CP0H8AQWZrxPwpRjdWa8VUeW1uK+6yJ0EqBga4b4=
Subject key identifier:   6E:BB:6C:CE:1B:46:19:15:F6:DF:EF:2F:82:EB:F3:01:BB:77:AD:FE
Certificate issuer:       /CN=110a5b23-7e5e-47cb-81e1-4e9068274549
Certificate serial:       010D0C9F43285849849EFDB8CB021AA95B7E3B40
Authority key identifier: D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa
Signing time:             Mon 14 Apr 2025 01:00:43 +0000
ROA not before:           Mon 14 Apr 2025 01:00:43 +0000
ROA not after:            Sun 13 Jul 2025 01:00:43 +0000
asID:                     19186
IP address blocks:        208.103.169.85/32 maxlen: 32
                          208.103.169.222/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:84:9e:fd:b8:cb:02:1a:a9:5b:7e:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=110a5b23-7e5e-47cb-81e1-4e9068274549
        Validity
            Not Before: Apr 14 01:00:43 2025 GMT
            Not After : Jul 13 01:00:43 2025 GMT
        Subject: CN=c524f9ba-46cb-4e9e-8826-d367b35a383f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:91:2e:5a:fa:6a:56:c9:1b:86:b2:a6:9b:
                    fc:c6:9a:29:25:b5:18:bb:a0:88:a8:3c:38:50:58:
                    27:98:92:45:40:24:76:e7:b5:f8:d8:af:29:24:9c:
                    53:d0:6b:d4:48:f8:20:1c:43:7b:95:27:cb:17:70:
                    4e:fe:4b:16:99:dd:cd:90:5d:41:05:09:37:f4:cf:
                    a9:11:11:3d:e3:ef:66:de:13:55:52:74:57:56:b0:
                    57:67:62:0e:dd:fc:5f:1b:d8:6b:d4:de:d2:62:b0:
                    0d:e5:75:d5:2f:e6:6a:54:1a:e6:a9:43:2a:73:a0:
                    d7:f6:11:0a:c3:28:cd:ec:fa:16:a6:f2:e4:a0:da:
                    75:c5:1c:8a:5a:08:d5:16:64:64:20:68:53:42:fe:
                    f9:23:71:72:77:d0:41:ed:d3:01:d2:36:71:8e:0b:
                    6b:b7:4d:58:69:01:1c:13:ca:ab:7d:46:2a:d8:2d:
                    9e:91:cd:b1:c5:4a:10:6a:24:6f:40:96:47:af:a9:
                    b2:1e:8d:0e:82:4e:9c:db:2d:42:47:61:ea:47:17:
                    b8:a0:9b:db:f7:c0:28:83:98:b7:f3:ca:9d:d6:4f:
                    57:62:88:91:c2:79:34:41:37:5b:36:64:cd:40:ef:
                    ed:10:04:63:29:78:a4:85:66:0a:9d:42:6d:d1:fb:
                    94:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:BB:6C:CE:1B:46:19:15:F6:DF:EF:2F:82:EB:F3:01:BB:77:AD:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/37232b7a-fbbe-3b90-ab74-dbf704fcd6c9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549/110a5b23-7e5e-47cb-81e1-4e9068274549.crl

            X509v3 Authority Key Identifier:
                keyid:D7:6E:E5:FF:07:90:4B:35:26:51:BF:CC:96:CC:6D:9D:FE:9B:0E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/110a5b23-7e5e-47cb-81e1-4e9068274549.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.103.169.85/32
                  208.103.169.222/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:78:76:a3:1e:47:fc:ed:9a:eb:5e:0e:ab:3d:56:84:81:5b:
         71:29:74:f1:49:9b:4f:76:02:80:f4:9b:0b:4a:d9:a3:db:e1:
         eb:11:95:e0:e2:bf:fb:d4:d6:d3:d6:06:e0:6c:58:e9:71:e2:
         89:d5:f9:db:30:1b:7b:65:5f:2d:18:57:a3:8a:c2:be:52:8f:
         3d:3f:01:51:bb:79:a6:a3:43:22:b6:b6:57:15:d6:c8:d5:4f:
         45:9d:ed:88:c0:47:bc:96:e1:d1:10:12:99:22:7e:c9:91:ca:
         6f:01:60:b9:a6:5b:25:38:48:24:79:71:94:a2:53:14:18:af:
         37:fb:c2:31:0f:5e:ce:e9:9e:09:db:d2:c8:f1:c8:97:f9:3e:
         67:98:b0:c4:f3:2f:1d:e6:66:db:69:66:46:1f:6c:e5:52:eb:
         53:d0:c2:0b:b7:44:db:76:77:20:69:6c:7a:df:bd:ce:0a:3d:
         ac:58:7c:39:ec:28:c6:47:ae:2e:c8:7c:b1:73:0a:f6:91:bf:
         58:89:be:80:ca:76:62:f3:10:0e:80:cc:40:7d:07:5e:21:cd:
         12:a5:19:fb:db:d5:bc:d6:9a:a5:b5:74:79:c3:09:ec:a9:60:
         e1:e5:45:71:19:58:7f:b5:64:7e:d3:09:36:7a:34:61:fc:3c:
         16:df:a1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:18:02 2025 by rpki-client