Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa
File:                     3153b57a-5e71-32a7-a3b2-e2c63094096f.roa (raw, json)
Hash identifier:          YQozoiRLa3BpMlcyLvT/mREogQNKPg+OtjK7YCnAaU8=
Subject key identifier:   39:3A:3B:5A:A6:F5:31:1E:E2:2A:87:4C:76:2E:1A:66:FA:E0:BA:23
Certificate issuer:       /CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
Certificate serial:       010D0C9F43285848DEA1346999EBFD8C68418780
Authority key identifier: DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     11476
IP address blocks:        208.87.218.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:34:69:99:eb:fd:8c:68:41:87:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19d9b9bc-a20d-4235-acc5-045fb91a3837
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=f3866f23-59e2-4cc2-a34d-8d83b55a8319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3a:e1:da:16:ca:3e:e4:2e:b0:ab:81:18:e8:
                    d9:4e:fa:15:a0:64:15:c2:2b:34:50:d4:c5:16:62:
                    0f:77:7c:b8:b2:cc:0f:1e:f5:01:79:0d:10:23:aa:
                    33:4e:3b:d9:29:7b:04:5c:ea:28:ff:71:fa:02:17:
                    a5:5e:5c:69:37:f9:c2:1a:ca:2f:28:8b:0f:e9:f3:
                    e0:36:e6:24:85:2b:a4:49:b1:13:45:9a:86:2c:36:
                    ed:59:52:91:7c:36:13:2d:d3:e7:91:98:a7:98:b1:
                    87:33:a4:b9:ee:f2:5b:a8:63:06:e9:87:f2:eb:63:
                    6c:a2:64:b6:43:04:d3:de:d6:32:eb:b5:01:9e:5f:
                    0b:e1:2c:12:cb:bf:67:7f:29:fd:56:3b:01:d3:93:
                    a3:59:e4:27:08:c4:80:ff:1a:15:f1:ac:27:3f:d3:
                    50:2c:98:e4:94:24:b6:45:17:d4:b4:75:df:cb:04:
                    00:ad:0c:5e:08:d5:85:80:74:ce:29:a0:10:bf:c2:
                    64:4e:5c:1b:9a:99:d4:51:f8:f5:c7:a7:50:8c:fe:
                    24:0c:91:9c:40:11:61:39:c9:6f:57:0b:80:eb:e3:
                    5c:75:e2:3c:61:d6:03:3f:35:30:91:92:76:c6:b8:
                    89:8b:45:c3:5f:a7:a2:d2:f3:af:f2:6f:f6:a0:18:
                    12:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:3A:3B:5A:A6:F5:31:1E:E2:2A:87:4C:76:2E:1A:66:FA:E0:BA:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/3153b57a-5e71-32a7-a3b2-e2c63094096f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837/19d9b9bc-a20d-4235-acc5-045fb91a3837.crl

            X509v3 Authority Key Identifier:
                keyid:DF:87:E8:77:7F:A4:94:62:D4:68:F4:AE:CB:7B:EE:AA:CE:46:0D:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/19d9b9bc-a20d-4235-acc5-045fb91a3837.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.87.218.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:6b:ff:97:fa:03:cc:e1:77:90:3d:fe:4a:26:2a:29:93:3d:
         8a:71:f4:94:bf:a7:6c:71:de:3d:c2:de:a4:b9:2c:07:c3:ba:
         53:a9:90:8c:af:b0:76:48:05:f9:68:ac:bd:21:42:09:66:3f:
         70:95:fd:54:3b:11:ae:40:8e:d1:d9:bd:a6:c1:58:b8:ec:79:
         9b:18:60:69:07:4c:ce:f0:d4:8b:f0:1c:23:9b:29:59:44:a3:
         c8:e3:06:cd:03:25:47:59:7a:2d:01:8c:4e:d0:eb:32:72:b5:
         12:c4:3e:f5:cc:f7:72:50:4c:92:00:6e:eb:06:0c:eb:22:b2:
         a0:0e:e9:32:fa:e4:99:67:57:c0:23:41:ea:4e:4d:61:d6:2b:
         6e:44:a4:92:48:23:c5:02:23:fb:9c:71:33:6d:e2:0b:80:e3:
         16:32:62:10:da:1d:44:8d:cf:78:f1:5f:84:8c:6a:b0:01:45:
         d2:ae:8a:d2:54:fa:24:02:96:b5:b9:83:52:a3:be:97:8a:1b:
         ef:c3:6e:82:12:22:1d:0d:8e:a1:e4:e3:bb:69:60:72:a1:c5:
         a8:72:07:1b:ea:aa:bc:3a:df:f7:0c:96:ab:b4:90:b3:f4:ad:
         c8:06:bd:bf:bb:5b:d4:e7:49:6e:b1:e3:50:80:bd:de:34:df:
         cf:14:c4:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:29 2025 by rpki-client