Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/51cb9e15-3cba-35e4-b97d-9275af067ce0.roa
File:                     51cb9e15-3cba-35e4-b97d-9275af067ce0.roa (raw, json)
Hash identifier:          DOf1x5tBZd8U2rEKUvHX7MWy2oEKn+28O4bDFn50P9w=
Subject key identifier:   03:E3:77:6F:36:CF:1D:4A:A6:A4:F4:00:0A:91:B8:54:AA:B0:64:C4
Certificate issuer:       /CN=f121b943-8c52-4fc9-833e-f2c9584dd2ec
Certificate serial:       010D0C9F4328584919417988C82565C8F3A38908
Authority key identifier: EE:58:4B:39:A9:A1:0D:CA:4A:45:3B:73:CF:98:A6:26:F5:23:0A:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/51cb9e15-3cba-35e4-b97d-9275af067ce0.roa
Signing time:             Thu 06 Mar 2025 14:00:52 +0000
ROA not before:           Thu 06 Mar 2025 14:00:52 +0000
ROA not after:            Wed 04 Jun 2025 13:00:52 +0000
asID:                     36324
IP address blocks:        208.74.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/f121b943-8c52-4fc9-833e-f2c9584dd2ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/f121b943-8c52-4fc9-833e-f2c9584dd2ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:19:41:79:88:c8:25:65:c8:f3:a3:89:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f121b943-8c52-4fc9-833e-f2c9584dd2ec
        Validity
            Not Before: Mar  6 14:00:52 2025 GMT
            Not After : Jun  4 13:00:52 2025 GMT
        Subject: CN=bd37a5fa-a097-49aa-a323-6fad8721d196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:1d:f5:cf:10:a9:80:da:fe:6f:4e:39:e7:3f:
                    5d:0a:c4:07:e8:d1:fa:7d:08:5e:07:09:81:03:61:
                    54:51:07:58:ed:b0:01:98:4d:78:11:58:69:93:0d:
                    78:2b:00:f6:80:51:3b:20:8b:8d:54:39:fa:ef:58:
                    e8:7c:f6:e6:ed:4c:9a:70:3d:7f:74:01:57:63:2e:
                    cf:5c:a4:bc:fc:94:02:6f:b7:66:f8:e5:d9:da:6c:
                    2c:a8:c2:14:ed:88:a3:19:b6:5e:57:c9:ae:08:b8:
                    24:f2:1b:be:4b:12:7d:ad:31:8d:86:2c:64:87:aa:
                    7e:27:cd:c9:2b:49:4d:83:f3:72:9d:19:05:d3:07:
                    6f:f6:43:3b:48:2d:f6:f5:01:b6:11:3f:f4:c5:e8:
                    2f:0f:e5:4b:51:89:ce:ee:22:aa:be:d8:ff:56:a5:
                    dc:03:33:44:ea:4d:2d:f3:d8:d0:44:31:d0:26:06:
                    f1:a0:69:b9:5e:54:2a:47:05:cf:5e:7b:40:4a:a1:
                    3d:5b:7a:8e:b1:e9:60:a8:94:6c:85:86:e7:0c:44:
                    ab:a4:99:eb:03:9f:a2:84:e1:4f:03:3a:ea:12:9d:
                    20:95:6d:bf:83:24:e8:cb:e4:c4:ad:18:5a:f2:a5:
                    19:a3:b8:4d:6e:1b:10:6f:ad:0a:d5:3a:94:b8:2c:
                    fe:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:E3:77:6F:36:CF:1D:4A:A6:A4:F4:00:0A:91:B8:54:AA:B0:64:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/51cb9e15-3cba-35e4-b97d-9275af067ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec/f121b943-8c52-4fc9-833e-f2c9584dd2ec.crl

            X509v3 Authority Key Identifier:
                keyid:EE:58:4B:39:A9:A1:0D:CA:4A:45:3B:73:CF:98:A6:26:F5:23:0A:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f121b943-8c52-4fc9-833e-f2c9584dd2ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.74.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:89:af:74:30:83:37:31:9d:4e:24:af:68:67:20:83:82:41:
         87:97:c3:63:0f:21:22:24:c9:c1:d5:04:46:3f:93:15:33:c6:
         8c:3d:34:64:e3:8f:56:13:10:b0:56:b3:af:db:ee:d8:b4:aa:
         57:b0:ed:3a:09:a4:4b:33:87:d9:d8:77:36:14:58:51:19:d8:
         80:80:40:e7:a2:1f:6d:64:92:09:0a:3c:dd:88:15:cd:1e:7a:
         5e:77:b9:f7:64:42:b7:51:ac:61:d4:3d:46:5b:48:ec:01:78:
         33:bf:f0:8f:4f:fa:f3:c6:f1:bd:d7:c3:ae:5c:61:55:d5:50:
         50:50:f0:2c:63:da:4d:0c:8e:77:1b:c0:8f:3e:ca:04:09:eb:
         bd:3e:43:e6:f7:0e:8d:59:43:0c:b7:9f:5c:92:8e:20:bb:38:
         91:9b:80:8d:60:76:2c:d4:90:3c:cb:24:16:49:1e:22:8c:ac:
         fa:f6:fa:48:92:f6:7c:82:df:69:1a:ee:88:da:bb:4e:96:c5:
         6f:a3:9a:e3:13:e4:b7:fe:51:8d:ee:10:d4:41:ec:1e:ae:6f:
         e6:e4:9e:b0:02:4c:c6:c4:50:9b:69:db:4f:07:80:f6:de:c0:
         e2:8e:33:cd:b4:fb:c7:4f:2e:27:6f:f1:65:c8:41:68:b6:b3:
         fc:87:e2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:06:05 2025 by rpki-client