Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa
File:                     3cc25bcf-8851-3c68-a89f-59793b01e859.roa (raw, json)
Hash identifier:          JbZSLd6O141kPBbYRL1d7EjhmXxV9RuK8SCti0FuOY0=
Subject key identifier:   25:52:70:72:7F:7D:57:BD:88:63:EC:2C:AB:C0:C4:D5:AA:CC:E7:02
Certificate issuer:       /CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
Certificate serial:       010D0C9F432858486D905B647D0E51EEEC06228C
Authority key identifier: CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa
Signing time:             Sat 04 Jan 2025 02:00:39 +0000
ROA not before:           Sat 04 Jan 2025 02:00:39 +0000
ROA not after:            Fri 04 Apr 2025 01:00:39 +0000
asID:                     852
IP address blocks:        208.68.248.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 11 Feb 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:6d:90:5b:64:7d:0e:51:ee:ec:06:22:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b02dc6e7-fa1a-4acf-a036-5b4487100de9
        Validity
            Not Before: Jan  4 02:00:39 2025 GMT
            Not After : Apr  4 01:00:39 2025 GMT
        Subject: CN=94e2e96b-0dd4-40b5-8b38-9f8d82e4ae2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:21:d3:c4:fa:6b:19:df:8d:6d:68:bc:d1:50:
                    b9:83:ed:e6:e1:84:45:83:a2:12:d4:1f:88:40:ab:
                    3c:be:5a:10:a7:f0:df:29:a7:4e:d1:f2:42:6c:a7:
                    66:40:83:cd:be:f8:62:23:fc:7b:7b:bd:06:2f:b0:
                    0e:ea:a2:e9:82:be:5a:cc:bb:ba:fc:8d:1e:7d:81:
                    d3:8e:7d:f6:cd:51:60:86:eb:a4:0f:5a:ec:1c:2c:
                    be:45:b8:a6:a7:ce:59:1d:ae:6c:63:6d:98:57:a4:
                    6d:2b:48:c0:1a:58:2f:e9:fc:b1:f4:60:08:57:bc:
                    5c:17:50:69:eb:b4:41:fb:cd:cf:2c:4e:47:69:c9:
                    9f:49:06:e2:5d:bb:56:ba:e4:e7:d8:58:6c:5a:b3:
                    51:1f:ac:e4:02:fe:dc:a4:f0:a5:3f:d9:9a:e9:fa:
                    a4:60:31:d2:da:77:1b:5d:d1:b7:54:b9:49:b4:76:
                    09:f0:62:7d:a7:29:39:16:79:50:8c:0d:76:22:30:
                    3c:a7:86:68:cb:1f:75:98:c1:9c:5d:e9:65:e9:6f:
                    1a:d3:7d:52:ca:18:37:d9:9e:d6:e8:b6:fe:c4:f4:
                    0a:c9:ea:26:a4:1d:7f:2c:2b:33:d8:4a:06:6c:44:
                    39:b2:7c:22:17:9c:15:c6:4f:b8:b5:cf:f2:9c:c9:
                    d5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:52:70:72:7F:7D:57:BD:88:63:EC:2C:AB:C0:C4:D5:AA:CC:E7:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/3cc25bcf-8851-3c68-a89f-59793b01e859.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9/b02dc6e7-fa1a-4acf-a036-5b4487100de9.crl

            X509v3 Authority Key Identifier:
                keyid:CD:A8:CE:37:4F:36:4A:E1:38:F6:F0:7E:CF:6D:76:B1:CA:C4:E8:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/b02dc6e7-fa1a-4acf-a036-5b4487100de9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.248.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:76:46:ec:5a:b1:05:ad:37:5b:a2:02:61:42:93:cd:ce:42:
         a0:49:2e:f4:2e:13:28:40:b4:35:61:ae:da:e6:57:13:78:1e:
         9b:a3:08:8d:2a:75:34:7b:85:08:88:b5:5e:5d:ba:24:8b:c1:
         d3:c2:89:f8:c1:0f:2c:39:d0:d2:22:2f:f3:33:dd:73:ac:a0:
         2a:5f:68:70:96:1b:09:3b:36:23:36:97:cf:c2:e9:a6:2e:86:
         59:85:02:55:9d:af:d1:ce:6c:a3:c3:0c:ff:d6:ac:17:2d:87:
         34:d9:55:7f:19:84:9a:43:19:d6:d4:ae:99:e8:a5:d7:02:35:
         e1:80:51:31:4e:0e:d1:ca:48:73:59:54:bf:50:2c:f1:fe:8d:
         a2:49:b6:99:f4:33:8c:73:ab:6e:cb:1b:ff:d7:ff:a8:d0:df:
         c2:96:36:d0:7d:02:95:c2:3d:d1:97:88:a4:f4:1d:24:0e:5c:
         dd:26:29:0f:69:79:42:e9:a5:95:ff:c8:35:28:5e:a3:5b:06:
         ac:41:1a:f8:65:a9:be:14:08:dd:c0:a2:e0:a9:71:76:33:c5:
         d3:e0:50:fd:da:76:5a:f5:fb:ba:99:f9:90:1a:ea:25:33:eb:
         c2:c8:e2:41:0d:5e:53:9b:12:18:5e:52:08:0f:26:dd:b4:42:
         a4:87:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 9 14:24:04 2025 by rpki-client