Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51edf42b-2e52-3724-a02a-294e78a2161d.roa
File:                     51edf42b-2e52-3724-a02a-294e78a2161d.roa (raw, json)
Hash identifier:          soPUHLEj37a291daQGAy3Z5uhOIVejB7RSnksPko6H8=
Subject key identifier:   7E:7E:4D:BD:A0:C2:1A:E4:B5:44:6B:C2:70:5F:8B:D2:DE:DC:9D:9C
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584921346A475630B970DBD4A2E0
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51edf42b-2e52-3724-a02a-294e78a2161d.roa
Signing time:             Sun 09 Mar 2025 10:21:07 +0000
ROA not before:           Sun 09 Mar 2025 10:21:07 +0000
ROA not after:            Sat 07 Jun 2025 10:21:07 +0000
asID:                     211272
IP address blocks:        216.208.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:6a:47:56:30:b9:70:db:d4:a2:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:07 2025 GMT
            Not After : Jun  7 10:21:07 2025 GMT
        Subject: CN=fbfa0892-0e4c-4e94-8416-a2c7924c05b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:74:ab:07:78:36:6f:65:70:11:fb:9e:65:40:
                    78:ad:42:c0:f5:28:70:06:3c:2d:6e:3b:5d:89:0a:
                    75:6f:a9:4e:bf:8b:36:5c:4c:98:e9:65:5a:fe:62:
                    d9:0a:d3:91:2f:3a:84:db:00:8f:ea:20:dc:1c:57:
                    ac:68:c4:a5:12:b3:1f:52:61:f4:03:6e:15:95:a6:
                    b3:53:4f:33:53:8f:5d:92:f4:7f:23:df:df:7f:d9:
                    3c:7b:e8:42:e0:66:e4:38:c3:a8:5a:7c:43:ae:c8:
                    36:84:3f:b2:e9:f0:46:a2:ac:d9:29:67:67:ba:22:
                    30:bd:83:74:cc:85:4f:cc:e2:88:06:b8:ee:aa:bc:
                    17:e8:23:0b:1d:a3:33:23:19:3f:55:1e:18:c7:68:
                    10:47:e8:0f:89:34:8d:2f:3f:ee:59:de:08:5b:a3:
                    8c:43:70:51:66:47:11:be:25:2f:28:e6:98:9d:a1:
                    e5:6f:5b:ce:b4:cc:2f:40:38:f4:b7:9b:0e:fb:02:
                    ed:40:2c:36:66:fb:88:6e:47:a3:ae:fe:cb:be:e4:
                    33:f4:7a:83:01:fc:7c:30:a8:f9:b2:66:51:3b:8c:
                    b6:08:30:80:7f:5d:45:2b:3f:8a:b0:2a:d2:bb:51:
                    6a:c4:bc:1c:68:ef:25:f8:9b:79:04:3e:43:04:cf:
                    45:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7E:4D:BD:A0:C2:1A:E4:B5:44:6B:C2:70:5F:8B:D2:DE:DC:9D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/51edf42b-2e52-3724-a02a-294e78a2161d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.208.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:c9:2c:49:28:42:b8:28:93:cf:09:9a:a6:e3:60:02:b4:0b:
         2f:ef:48:4a:85:66:f6:f2:ef:c4:72:20:f2:0b:16:0a:fd:22:
         da:5e:ef:55:f9:60:48:f9:32:90:03:30:8d:b4:a3:52:07:47:
         12:a3:94:37:6e:51:49:2d:2f:ff:b0:12:db:ba:00:58:a6:94:
         68:3c:0a:99:2f:be:5b:b7:7e:af:8a:c9:3e:b4:12:e9:5e:39:
         81:4d:a5:b5:f9:e7:e5:4f:7f:cb:a8:d0:7c:e7:47:34:e4:3a:
         bd:e2:93:26:c9:97:8c:1b:30:ae:7b:33:7d:65:f1:eb:ea:12:
         9a:32:a6:31:8b:2c:f9:07:15:dd:90:a2:c7:61:3d:83:51:c7:
         b3:35:5f:43:17:3f:3d:cc:d3:48:2c:8c:09:57:53:a3:98:d5:
         d3:7c:58:fa:0d:d6:21:f6:ad:0c:6b:4c:85:7b:24:2e:9b:49:
         0b:57:5f:d2:86:c8:bc:0e:99:c3:06:ed:99:12:cf:85:bc:f1:
         55:f9:2e:32:1c:d6:ac:1c:15:55:c3:6e:83:79:8d:c4:df:32:
         6c:64:0c:52:f9:76:d6:5c:fc:3c:1b:8d:b0:b5:0b:2c:d0:60:
         cf:50:7a:70:5b:a4:bf:1d:72:f3:f5:46:bc:34:3f:c0:ea:29:
         fa:f0:fd:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:00 2025 by rpki-client