Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
File:                     f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa (raw, json)
Hash identifier:          pPm8NGYWLBEb3JRs2Leej0AXQhBgGh7IbygbnJNslpc=
Subject key identifier:   B2:9A:12:D9:F7:DB:47:B1:B0:6E:D9:FF:E1:67:73:30:3B:2D:A0:75
Certificate issuer:       /CN=8ed3050a-4605-4094-b331-bb0f8758defe
Certificate serial:       010D0C9F432858496E498BDFDD2AD2AE220638C0
Authority key identifier: 71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa
Signing time:             Sun 06 Apr 2025 01:00:47 +0000
ROA not before:           Sun 06 Apr 2025 01:00:47 +0000
ROA not after:            Sat 05 Jul 2025 01:00:47 +0000
asID:                     237
IP address blocks:        198.108.5.0/24 maxlen: 24
                          207.75.164.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6e:49:8b:df:dd:2a:d2:ae:22:06:38:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ed3050a-4605-4094-b331-bb0f8758defe
        Validity
            Not Before: Apr  6 01:00:47 2025 GMT
            Not After : Jul  5 01:00:47 2025 GMT
        Subject: CN=6a6740a0-fca8-4622-abb0-3a5e2858eb62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:4a:3b:be:fd:1d:fc:c1:af:6d:83:15:0d:
                    64:61:cd:90:f9:06:db:49:1d:b9:26:bd:0e:09:0a:
                    42:ee:b0:01:22:6f:80:aa:2a:e4:b1:65:2f:db:37:
                    c9:44:2a:01:ca:94:88:5e:81:bb:fc:95:f4:df:13:
                    0f:01:8b:5a:66:77:e7:70:cf:49:ec:fd:06:41:97:
                    ed:b1:0f:a7:55:8c:e7:46:a1:67:69:19:98:90:f5:
                    37:c2:78:7f:8b:5e:d8:ca:78:84:ad:54:95:51:4c:
                    af:32:f9:4a:da:25:66:5c:49:e4:91:cb:fc:e1:ae:
                    e9:1f:f5:be:7d:78:39:22:fe:21:40:0f:40:7d:11:
                    54:a4:1d:51:0a:bf:27:48:a5:89:8e:7f:f7:74:f9:
                    ce:16:21:17:68:83:1b:5a:f7:f2:33:0b:6c:79:6d:
                    2d:72:d7:2c:a0:0e:88:f0:8a:19:95:34:a1:5e:7f:
                    cc:64:9f:a8:6e:6b:71:3d:f8:09:0a:4d:b0:81:e7:
                    56:31:9c:2a:40:0f:1b:f3:40:9d:18:89:8d:0f:05:
                    f8:a7:ad:4b:b1:d9:82:81:b6:7e:2b:c8:2a:40:b0:
                    40:c5:00:a3:9e:65:88:13:9e:56:f2:c9:5c:0b:cc:
                    ed:fe:7b:71:6f:d5:ea:67:59:0d:93:56:86:fd:cd:
                    80:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:9A:12:D9:F7:DB:47:B1:B0:6E:D9:FF:E1:67:73:30:3B:2D:A0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/f9bc617c-5029-3e1a-b1c0-9497ae5fcf23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe/8ed3050a-4605-4094-b331-bb0f8758defe.crl

            X509v3 Authority Key Identifier:
                keyid:71:9F:75:9E:B9:F2:FD:37:B2:4F:F9:8B:EF:63:71:8E:C0:4E:4C:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8ed3050a-4605-4094-b331-bb0f8758defe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.108.5.0/24
                  207.75.164.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         92:91:24:b5:00:d7:e3:2c:72:8e:f2:df:2d:e9:ef:34:e3:22:
         39:13:94:31:55:d0:55:3a:de:ab:96:b0:3c:ce:4a:c6:9d:66:
         97:20:6e:eb:c3:16:58:14:b3:40:20:8b:3e:68:85:dd:93:3a:
         b4:08:ea:f1:b6:fc:47:f0:4b:52:64:36:1a:e0:22:ef:29:6d:
         bb:f0:ed:44:7a:5c:4a:7b:40:2f:c5:73:ca:8d:08:eb:0d:60:
         af:cf:96:7e:2a:af:39:bb:35:f7:7d:6b:5a:9b:c4:cd:87:14:
         f9:b6:ca:3b:b5:e9:4f:f2:b7:a7:da:4a:b3:5f:68:6d:2a:01:
         a4:01:17:b5:95:24:07:b7:ce:5d:27:58:1b:96:cc:a4:37:6b:
         75:e0:91:c2:ed:10:70:51:85:13:99:12:86:39:fd:ff:12:ea:
         6b:20:fc:36:1b:70:a9:e4:18:38:f8:25:d9:08:1a:8d:3c:a6:
         7d:ac:31:e3:87:aa:c7:b7:1c:3f:c0:d5:54:3e:8f:2b:66:7b:
         0b:6d:05:a7:94:3e:b5:c8:f8:b5:05:a7:75:ce:a2:3b:5f:48:
         a7:69:46:84:02:52:9a:ab:8b:18:1c:81:47:e7:df:a7:c6:c6:
         c8:55:27:0c:ca:c7:85:30:3f:5c:93:f4:1c:da:1c:74:23:7f:
         2a:68:bd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:07 2025 by rpki-client