Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa
File:                     ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa (raw, json)
Hash identifier:          zC/Z1eL+zIbUPUa2L8njH9pr7JYYX/LisR/DE0G+M20=
Subject key identifier:   0F:6B:52:F0:4C:81:5D:7F:B1:D9:5F:1A:FD:37:BA:A8:C2:02:D1:F5
Certificate issuer:       /CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
Certificate serial:       010D0C9F43285848AC60D294B764149B55128580
Authority key identifier: 58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     23535
IP address blocks:        162.208.108.0/22 maxlen: 24
                          2604:ab80::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d2:94:b7:64:14:9b:55:12:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34e2833d-a9ea-422d-a5b5-ba2b9aa9486a
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=a22b6093-3f92-4441-bd4d-84511af79f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:ba:7a:b5:86:29:04:1e:a7:ae:f4:4a:bb:
                    09:d0:4b:ef:5e:d2:2e:48:6c:be:a0:ee:53:15:ac:
                    d7:48:c8:b3:18:ae:b1:64:07:ad:d9:b6:c0:14:de:
                    6b:29:e2:20:be:61:d5:32:5d:90:cf:8d:00:7e:2d:
                    84:8f:fa:7d:69:27:93:50:f0:f8:b8:a8:ab:db:77:
                    2f:fe:a5:46:92:8d:82:49:e3:d9:4b:02:06:43:8a:
                    6f:0c:7a:30:58:9c:45:a7:a7:9a:56:39:98:b0:5d:
                    46:9b:d4:b1:4a:24:71:d7:eb:7d:08:28:88:98:af:
                    85:c4:cb:40:21:86:b5:31:6e:e2:6e:bc:7c:6b:c7:
                    be:67:52:08:44:da:6d:f7:7f:12:89:db:36:79:67:
                    3d:3f:35:d7:e0:85:af:76:fd:86:6b:e3:5a:a0:7e:
                    88:ad:9f:c6:bb:72:0a:45:2c:79:8d:c4:fe:c9:1a:
                    f1:66:b0:d9:c0:42:b7:5c:39:1b:48:25:e4:d4:a5:
                    5b:71:c4:3b:1b:1f:ee:e0:5d:2a:f8:e1:76:b4:12:
                    ea:c0:b8:6e:b0:90:ed:ba:d3:ea:1f:f4:93:78:0f:
                    46:fa:c2:5b:5b:ec:aa:47:32:7e:a3:7d:a1:4e:44:
                    f7:2d:a4:37:d2:01:48:35:34:a0:df:73:85:08:cb:
                    03:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6B:52:F0:4C:81:5D:7F:B1:D9:5F:1A:FD:37:BA:A8:C2:02:D1:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/ce26f259-c24c-38d7-9d2a-d6b838c767c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.crl

            X509v3 Authority Key Identifier:
                keyid:58:1A:CD:1A:2F:A2:0E:B7:D0:70:3C:20:9B:59:4A:FE:A9:69:C4:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34e2833d-a9ea-422d-a5b5-ba2b9aa9486a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.208.108.0/22
                IPv6:
                  2604:ab80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:c5:30:a2:f6:48:94:09:b8:bc:1e:dc:0e:3e:3c:ac:49:cf:
         ff:a7:55:86:a4:47:fc:1a:74:bf:cf:0e:d0:90:d8:92:f4:c9:
         fe:ea:17:c6:f4:c1:87:ae:f8:6d:dd:5e:d1:95:2b:2a:e0:0d:
         69:3e:f6:bb:a1:39:c5:6b:bd:2d:e4:23:92:3b:dc:dc:bc:96:
         0c:38:6e:ed:d4:16:0b:7e:41:e1:4b:b5:04:87:8c:ab:39:77:
         d8:86:ef:94:33:95:46:bd:1a:7c:5e:b8:19:1d:3e:d9:18:7d:
         d3:af:9c:52:b7:e8:90:6a:2d:d7:33:74:6a:e5:70:f5:61:a6:
         13:65:66:98:74:fb:8a:9f:26:9c:fa:cc:54:d5:79:56:ea:be:
         3f:e3:f9:24:68:59:18:59:53:30:8f:f7:8d:a8:8e:84:48:7c:
         4e:1e:fb:be:a4:41:35:f3:38:3b:3c:19:6c:1d:c5:8e:b7:68:
         fc:6f:c6:09:63:3c:1b:9a:6c:1b:55:f6:12:9a:3c:1d:d5:77:
         f3:e6:00:79:57:85:18:2e:6c:ce:4a:01:d4:51:7f:86:bb:52:
         d8:7c:db:04:c9:8e:fc:9c:59:ae:98:8f:1f:0d:ab:d7:a7:a0:
         6d:00:4b:d2:f7:20:3f:1f:21:00:5e:7e:14:3d:a4:bb:19:64:
         c1:12:a1:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:35:46 2025 by rpki-client