Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f5cfdc1a-088d-363f-8cba-e11075f8ee95.roa
File:                     f5cfdc1a-088d-363f-8cba-e11075f8ee95.roa (raw, json)
Hash identifier:          1+nPz4R+z5t8t58OSMYyUbTKwunY0e1708vNsdoCu0E=
Subject key identifier:   D7:94:BC:07:64:23:CE:0D:7B:1C:3D:4F:95:7A:1C:7C:A8:6E:61:FA
Certificate issuer:       /CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
Certificate serial:       010D0C9F43285848BA562FBD2CD31E635A7D1340
Authority key identifier: E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f5cfdc1a-088d-363f-8cba-e11075f8ee95.roa
Signing time:             Fri 31 Jan 2025 14:00:51 +0000
ROA not before:           Fri 31 Jan 2025 14:00:51 +0000
ROA not after:            Thu 01 May 2025 13:00:51 +0000
asID:                     396948
IP address blocks:        209.182.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:56:2f:bd:2c:d3:1e:63:5a:7d:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95dc9741-559d-4d9b-9f8d-be3560754ffd
        Validity
            Not Before: Jan 31 14:00:51 2025 GMT
            Not After : May  1 13:00:51 2025 GMT
        Subject: CN=4e5a75dd-246f-4b74-b3ea-5fa4ce16f3c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:57:05:20:d5:4d:88:c6:71:5e:6e:8f:b2:99:
                    5e:bc:e4:bd:f1:1c:5b:0b:c4:d4:f4:78:b0:e3:96:
                    e4:33:fa:a6:04:67:43:1b:8b:e8:46:6f:a5:7f:3c:
                    da:b2:71:fc:89:d9:17:9c:6d:0a:80:37:c9:e6:53:
                    36:3c:0a:6e:42:1e:35:25:9d:4d:d3:d7:35:d9:83:
                    48:aa:66:d5:8e:b4:d5:f9:05:ba:98:e7:1a:a5:77:
                    48:01:44:aa:26:2d:45:98:99:19:4c:72:fc:37:69:
                    36:47:64:47:85:15:9c:be:56:33:16:ad:0e:f7:43:
                    07:fb:6d:47:7c:38:5d:27:f6:b1:02:4c:2c:8b:2a:
                    8d:1d:a4:d7:a4:7c:d6:7e:d9:38:66:99:ef:2a:05:
                    c3:e5:e1:cd:aa:9e:69:08:73:b4:32:f9:18:93:5f:
                    6f:5a:5e:b4:97:c7:2c:89:a1:ef:9f:dd:6f:8f:70:
                    e1:09:da:65:83:0f:1d:7b:e2:9f:2e:74:85:e5:ba:
                    e6:84:be:58:fd:b2:1f:91:23:f0:c3:b6:ff:d3:dd:
                    13:cf:7b:d1:84:05:6e:be:87:b7:2c:eb:f5:4e:20:
                    44:5b:89:6e:9e:b1:66:d8:52:a4:26:03:73:b6:43:
                    e8:09:a1:6e:8c:f2:38:3a:9b:f6:06:37:e4:5c:b4:
                    7e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:94:BC:07:64:23:CE:0D:7B:1C:3D:4F:95:7A:1C:7C:A8:6E:61:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/f5cfdc1a-088d-363f-8cba-e11075f8ee95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd/95dc9741-559d-4d9b-9f8d-be3560754ffd.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F5:7F:89:EA:04:0A:03:1E:61:6E:DF:99:14:CC:5B:16:38:B0:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/95dc9741-559d-4d9b-9f8d-be3560754ffd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.182.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:e0:5a:15:63:25:e5:f1:67:b3:be:79:f7:51:76:9d:72:25:
         57:08:45:d4:c0:4e:9d:a5:43:5b:27:64:73:30:6b:56:86:6c:
         ac:38:10:8d:d5:f1:21:bb:05:7e:42:46:ae:2e:01:33:78:0c:
         d1:9b:5f:24:eb:f9:08:63:5e:78:38:60:78:28:ab:48:06:65:
         45:94:37:a5:98:87:cc:5e:cd:c8:42:b0:b0:79:62:ea:a4:9c:
         5b:a4:10:c6:be:f0:51:d5:d6:0d:6e:7a:3e:eb:85:61:14:4c:
         04:a1:65:43:19:b4:5a:f9:05:10:13:81:e0:5e:51:6b:f1:23:
         12:33:a3:cc:e6:9e:70:a1:bd:18:3c:f0:8e:aa:e1:ba:b6:d8:
         2d:ba:46:c4:0b:b1:5c:e2:e2:d7:95:71:e8:e8:d5:29:49:6e:
         51:e0:4a:09:12:38:61:8c:cf:65:ed:92:cc:e2:36:5e:83:04:
         c9:22:b2:1d:03:4c:a3:5d:c0:4e:d7:33:6b:bb:40:05:e1:bc:
         04:38:50:b6:a0:d5:e3:21:e9:b3:8f:92:56:13:37:d4:d0:c5:
         18:cf:55:84:83:d5:39:44:fe:3b:ff:b6:53:75:04:db:49:41:
         de:8a:16:f8:51:ce:75:3b:07:44:3a:72:c2:92:10:54:bb:86:
         e8:5a:cb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 16:58:40 2025 by rpki-client