Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
File:                     cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa (raw, json)
Hash identifier:          P8TaDG6mwARP7EKQ0Es/dw00LBcKLU7cyJa3osHOltM=
Subject key identifier:   CD:F6:45:42:4B:70:69:07:4E:B6:2E:6F:E5:EF:F6:12:41:63:04:7E
Certificate issuer:       /CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
Certificate serial:       010D0C9F432858494B640372D803BFFEC7BE2680
Authority key identifier: 38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     44273
IP address blocks:        208.109.139.0/24 maxlen: 24
                          208.109.140.0/24 maxlen: 24
                          2603:4:1014::/48 maxlen: 48
                          2603:4:1015::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:03:72:d8:03:bf:fe:c7:be:26:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9ed5ce80-224e-46ab-94f1-1afce8ccf13f
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=715e3e90-06e6-4b29-b9c7-8c2e872b9438
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c9:d5:ae:69:5b:bb:7b:c2:61:a2:24:5e:50:
                    9e:fe:26:62:5b:05:23:cc:bb:5e:93:e6:2f:80:1d:
                    92:05:a7:f1:a7:0b:98:cd:02:78:98:93:99:52:54:
                    52:69:fd:ea:55:f0:78:c6:f0:78:44:1e:28:47:b4:
                    94:50:08:4a:37:9a:42:37:d8:5d:f9:5e:e5:13:8c:
                    0a:95:0f:6b:d2:e8:12:b9:15:9a:31:b6:5d:6f:e0:
                    7f:ba:0f:02:8c:e4:2d:a9:70:b0:5c:85:12:cf:ad:
                    bc:de:29:c9:0f:df:90:2e:45:ca:ed:db:da:45:02:
                    a1:bd:96:fe:34:32:72:62:11:76:58:15:76:f9:18:
                    69:6c:f0:a2:db:a5:80:e1:ca:6f:64:52:7f:5f:d9:
                    34:3a:5f:ca:84:dd:a2:a1:94:72:98:6a:3d:3c:2c:
                    d3:16:5c:fb:89:f9:7b:94:06:af:bb:c5:89:60:66:
                    8f:60:4c:e4:8e:58:22:64:10:30:ec:35:65:dd:44:
                    c6:27:cb:9b:b4:e2:a1:a7:5a:0d:e0:88:df:96:93:
                    6c:31:f5:3c:70:66:37:48:c0:77:4b:42:74:fa:fa:
                    18:e6:55:70:ae:fa:87:81:d9:07:40:b3:4b:1d:e2:
                    40:dc:15:40:24:9f:9d:1a:77:49:82:50:ab:71:8c:
                    79:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:F6:45:42:4B:70:69:07:4E:B6:2E:6F:E5:EF:F6:12:41:63:04:7E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/cb7d8dfa-ba2a-34cc-83f9-9f173ee70626.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.crl

            X509v3 Authority Key Identifier:
                keyid:38:1D:9F:A6:BA:7C:C1:A8:44:AE:09:FE:5A:00:96:9D:3B:FC:E1:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9ed5ce80-224e-46ab-94f1-1afce8ccf13f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.109.139.0-208.109.140.255
                IPv6:
                  2603:4:1014::/47

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:dc:45:38:f5:05:7c:a6:f0:03:b4:42:76:fc:53:40:e0:56:
         83:8d:b9:5c:88:49:72:2b:0d:d7:b1:6c:e4:a9:ca:85:a6:ef:
         39:22:7b:83:2a:c2:bd:5f:2e:42:f6:4b:cc:24:30:7a:96:9d:
         e0:1d:21:07:b7:0f:20:78:bf:ad:5b:b4:0c:e3:99:c5:1e:ea:
         9a:4d:e1:77:51:b6:b3:ba:45:6c:f3:dd:7f:48:b8:2a:2a:e4:
         34:9d:6b:6e:a4:e5:23:5c:db:15:a2:8c:ee:d4:39:2b:21:f7:
         33:7c:9d:0c:39:27:2b:f6:10:62:a3:46:1a:71:51:6f:a6:c7:
         91:99:2e:d4:b6:61:99:4c:71:2e:61:1a:9a:44:99:e7:eb:42:
         b3:a9:0d:2e:68:09:9a:a4:ae:4a:6d:d0:02:b0:f5:a1:8c:0b:
         d0:85:3e:d1:a7:d0:7b:41:af:e3:1f:df:78:d8:9e:91:0a:5b:
         a4:09:10:ef:79:90:e1:20:8a:88:cb:61:cf:90:37:4a:a0:f3:
         b1:52:8a:77:0c:ab:b1:7c:3a:ef:7d:7d:e1:f6:2d:04:e7:cf:
         e7:91:78:69:3e:14:cb:27:50:c9:d3:e5:0c:b3:7c:cb:53:74:
         4f:67:a3:66:af:e4:b2:56:0f:91:27:ea:7a:0e:48:22:61:6a:
         67:52:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:39:37 2025 by rpki-client