Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c9dc46-5404-348d-94ee-e055a97a3c23.roa
File:                     16c9dc46-5404-348d-94ee-e055a97a3c23.roa (raw, json)
Hash identifier:          vRC53siHJKAfkO6vLon7FIKL/z7+11xYMezP564K5xc=
Subject key identifier:   2D:06:15:4E:40:D8:67:84:60:91:C0:8D:33:7D:62:5F:DE:5B:F5:4B
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848C6E62EDD8861D357341DA880
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c9dc46-5404-348d-94ee-e055a97a3c23.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     3561
IP address blocks:        208.159.7.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2e:dd:88:61:d3:57:34:1d:a8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=f6555a04-0a40-4bf2-9c5e-1400cb1377cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ab:df:51:0d:9e:2a:bf:f2:32:c7:ac:59:e7:
                    92:b8:a6:8f:6c:d8:bc:7b:1e:05:e9:8a:78:52:b0:
                    3d:b6:8e:bb:c4:c3:cb:d1:ed:60:d3:7e:f2:39:ac:
                    ed:9f:ff:2d:54:12:e5:7b:4f:41:fe:c8:7c:56:ca:
                    79:df:80:a3:53:c2:ca:26:6f:6f:70:1c:d6:e6:e6:
                    43:98:97:1d:27:1f:0e:cf:f1:2c:ba:c9:c3:7d:cd:
                    d6:c4:a1:e6:13:1b:b9:87:db:66:26:37:82:ef:49:
                    a3:2f:1a:c1:28:c1:0d:6e:b2:c0:bc:f7:67:e6:eb:
                    3c:34:74:09:e2:73:4c:b8:d7:fd:45:af:a5:9a:f7:
                    41:0f:64:96:5e:6e:73:c3:83:36:17:d9:89:f4:b0:
                    e9:26:3f:11:16:01:4e:0e:5e:9a:db:7f:52:d7:12:
                    20:55:ad:9b:c3:39:8a:c1:46:96:59:6c:bd:ac:88:
                    a2:8e:a6:1d:38:91:fb:11:27:4f:57:a4:ee:10:05:
                    24:2d:33:ea:20:2d:30:0f:56:37:88:5d:0f:5b:7b:
                    46:dd:7c:3c:bc:be:b2:e4:2f:5e:3b:c9:e2:f1:91:
                    a0:2a:17:94:40:62:53:fc:b3:d0:c3:4e:d9:6e:52:
                    6b:44:07:ef:12:7c:ce:a7:79:bd:19:ad:fc:a3:7e:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:06:15:4E:40:D8:67:84:60:91:C0:8D:33:7D:62:5F:DE:5B:F5:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/16c9dc46-5404-348d-94ee-e055a97a3c23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.159.7.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:fd:16:0f:35:a1:a3:c1:ed:dc:af:fc:cd:d1:57:c6:c3:79:
         15:b3:f8:9a:dc:e3:b6:c3:19:d5:71:69:24:87:9c:c9:89:15:
         c8:07:9c:0d:9c:37:3c:26:51:bf:6a:25:9a:1a:a5:d4:e3:a1:
         96:9b:e7:56:43:73:88:59:36:ba:67:39:de:c2:0c:b0:ae:77:
         b9:54:4b:df:e1:55:80:eb:76:1f:92:75:67:ce:37:d0:27:a2:
         17:f6:8d:0f:53:d8:22:1f:46:e4:36:f6:64:2d:ba:ef:db:73:
         df:20:c3:fd:74:fe:c6:f5:a3:7b:0b:be:45:71:f0:5e:9d:ed:
         d0:d1:d1:0e:c3:d4:1d:43:60:d2:ca:3b:28:62:69:33:dc:73:
         9b:40:61:71:7b:5f:25:a5:0b:9f:27:b4:4e:f3:68:8a:80:1a:
         2f:af:a6:45:65:5a:bf:66:73:42:6f:79:ef:99:bf:f5:d4:92:
         9d:c3:12:6e:96:e2:b4:23:36:b8:db:f2:4a:a6:21:f0:ca:45:
         55:53:2a:2f:26:dd:cc:8e:9d:0f:a5:b1:bc:8e:b4:09:76:3a:
         5f:9d:21:fd:aa:40:18:b1:59:6d:a8:b7:bb:6c:f2:cf:ab:be:
         48:55:f7:ff:ac:41:08:a2:50:b8:54:3d:34:4c:10:61:66:04:
         5b:69:0a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:23:01 2025 by rpki-client