Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
File:                     c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa (raw, json)
Hash identifier:          J/BJbB8CCtHK+emR2fZIWKogTf+Q5iBsLNKuFRxyQUg=
Subject key identifier:   42:46:70:B5:58:E7:71:82:57:96:83:10:2D:D2:0D:94:53:0F:90:2D
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F432858487B85B29C690F56E022936B00
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa
Signing time:             Thu 09 Jan 2025 02:00:40 +0000
ROA not before:           Thu 09 Jan 2025 02:00:40 +0000
ROA not after:            Wed 09 Apr 2025 01:00:40 +0000
asID:                     3561
IP address blocks:        208.166.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:7b:85:b2:9c:69:0f:56:e0:22:93:6b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Jan  9 02:00:40 2025 GMT
            Not After : Apr  9 01:00:40 2025 GMT
        Subject: CN=883c8613-3c8e-41da-b1a7-0ba450c1a8f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:45:b9:8e:48:8d:c5:b5:65:8a:bc:13:14:6d:
                    cd:cb:63:5a:1f:08:af:fe:20:93:41:b7:23:0f:9f:
                    1a:58:7a:2a:b7:38:74:74:e9:b6:c2:9a:24:ff:80:
                    3c:89:66:46:68:a2:7f:3c:d8:26:5f:18:83:c6:2d:
                    f6:fb:b5:56:30:21:b6:be:d8:89:9f:82:e5:67:89:
                    c4:34:bd:c5:88:57:b3:a2:7b:d4:fe:14:ae:61:ee:
                    a6:4b:81:1a:67:74:61:15:34:90:64:9e:79:66:fa:
                    00:e0:26:b8:f2:f8:6a:89:55:39:ae:d9:c9:fe:a0:
                    b7:84:15:59:fb:51:80:f2:a3:ec:2f:fa:95:6a:6a:
                    91:79:46:65:a8:00:44:5b:bd:62:0d:52:96:c8:40:
                    59:64:9c:2a:4a:a9:a5:88:d9:78:ea:30:a9:eb:8d:
                    ca:7a:3f:84:6f:ba:fa:10:ae:b6:f1:bf:b2:f8:2b:
                    07:70:1a:50:7e:42:d4:f7:78:de:54:69:24:56:88:
                    e3:2d:4a:77:ce:11:43:db:16:62:5f:b7:3f:71:9c:
                    c9:84:66:30:e6:7a:79:b2:ab:c5:5a:ac:ec:29:11:
                    51:1f:fc:79:63:56:8d:86:76:6e:c0:58:db:ef:a9:
                    fb:f0:0a:71:5a:15:5f:a4:bb:6e:30:e0:5a:42:0a:
                    2a:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:46:70:B5:58:E7:71:82:57:96:83:10:2D:D2:0D:94:53:0F:90:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/c8516651-6d0b-32c2-a5fb-1fb6d889e203.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.166.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:18:e5:74:89:de:6e:91:49:26:9f:f5:9a:1b:4c:6f:dd:
         30:e7:30:f5:33:71:39:c0:dd:c8:96:23:5f:4e:3b:8c:b5:6d:
         24:6e:16:15:f3:07:4f:bf:0e:ec:f4:90:b0:13:9a:30:06:3e:
         16:b9:7b:dd:81:75:9b:55:25:65:d7:cf:41:73:20:11:e9:ba:
         3a:4d:94:2b:5e:2a:6a:ae:1d:00:71:2c:bd:23:0a:ff:38:a6:
         f4:db:ee:31:9c:13:b7:db:e5:36:cc:f1:a2:97:a7:8d:fa:a3:
         94:47:6b:bb:30:64:04:61:17:86:21:7d:0a:c2:30:c8:01:3d:
         24:49:86:23:5f:dc:9f:c3:27:b9:ad:b0:5c:df:2f:72:56:64:
         29:09:91:4f:3f:d0:7d:37:91:f4:b1:a0:e6:1a:03:bc:89:7c:
         b9:b1:a2:15:ab:40:91:39:04:15:65:8c:3e:4e:47:10:6c:32:
         dc:dc:e5:c9:c4:35:28:28:00:87:56:d0:d1:4c:06:8b:23:fd:
         ed:ec:84:6f:61:68:78:db:27:8c:fa:20:bb:d9:ea:2f:c5:7b:
         8d:e8:ea:a9:70:1c:01:ce:a8:92:2e:9f:a8:7d:21:c6:54:26:
         e3:bf:ed:12:0d:5e:ce:a4:2b:61:07:a1:1e:69:25:d3:5d:b7:
         78:4c:54:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:44 2025 by rpki-client