Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
File:                     93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa (raw, json)
Hash identifier:          Kdsn14L7u4lg4jKWr3A27TsYASMgzb9qlx3NH2YaMMI=
Subject key identifier:   7C:CF:1F:37:55:1A:51:58:BB:0B:94:9E:8D:8A:2C:9D:96:AE:7E:DC
Certificate issuer:       /CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
Certificate serial:       010D0C9F43285848EC969A483D7AFEDD8B0BA220
Authority key identifier: 5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        209.251.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:9a:48:3d:7a:fe:dd:8b:0b:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1bf8301d-e669-4ad3-ae5b-565b863bc9d6
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=0de324c8-27fa-4034-bd80-d5130855e097
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:7e:68:dd:15:5f:37:4e:a8:73:80:8f:b2:18:
                    0b:4d:9d:dc:a2:94:b7:35:88:9d:d1:42:e4:1b:0a:
                    be:63:c7:1e:8a:60:d8:10:81:87:4b:f7:1a:aa:78:
                    8f:e2:06:f1:3a:16:11:c7:a4:6b:10:07:a4:08:8f:
                    64:ac:ab:91:7d:87:6f:25:00:e1:94:45:54:c5:d9:
                    53:6a:59:1d:63:08:59:15:68:c5:55:4b:a3:4d:e9:
                    81:7d:06:cc:53:46:f8:70:3a:d5:f9:62:2a:02:67:
                    d6:06:53:4e:96:fa:0c:8a:7d:e4:b0:1b:87:5b:f5:
                    51:c6:78:ef:26:d1:18:68:21:da:a1:60:25:45:7b:
                    46:af:7c:4c:80:e0:a4:f7:6b:94:5e:c2:ba:95:4c:
                    8b:96:e2:70:6a:41:9b:4a:28:85:67:3d:54:a4:f8:
                    7f:8f:cc:1b:31:1e:b8:ff:39:fa:a3:54:ac:8c:1e:
                    59:7d:02:a5:27:c2:6c:e3:c9:60:7c:65:00:c0:a5:
                    7c:b0:8d:05:b6:04:29:9c:59:2a:a4:bc:d8:2c:28:
                    64:d3:ca:90:85:e0:74:35:6b:92:5a:3d:8a:8e:74:
                    23:b4:fa:ce:e1:74:29:c0:e4:60:a8:9e:44:99:80:
                    8d:f9:a7:21:21:2b:30:25:ea:14:19:16:8a:23:5a:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CF:1F:37:55:1A:51:58:BB:0B:94:9E:8D:8A:2C:9D:96:AE:7E:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/93d4e406-b7c2-3ecc-b2dc-a161cec2c645.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.crl

            X509v3 Authority Key Identifier:
                keyid:5F:D7:B8:9F:80:49:3F:1D:3F:01:8C:20:A8:B8:6B:E8:94:96:23:5B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1bf8301d-e669-4ad3-ae5b-565b863bc9d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.251.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:c2:af:e3:f5:e1:fc:76:29:df:f5:69:49:2c:d6:78:e6:67:
         cd:1e:2b:f1:87:09:fb:75:cc:b6:9c:84:09:7a:0f:42:6e:12:
         6c:9f:4c:f7:29:a4:e2:52:49:4b:05:f5:6b:02:9e:eb:8a:ec:
         76:c4:ef:e0:16:b9:a2:88:af:29:80:31:1f:e7:93:32:d6:3b:
         20:ae:68:3f:4a:07:fe:de:9d:15:74:32:18:6d:e5:0a:6e:ff:
         1e:58:77:b5:df:66:22:71:1d:be:eb:fd:5f:a6:94:1e:52:d4:
         20:1b:e6:d8:df:7f:e1:c7:0f:d6:0a:7f:15:90:22:b6:3f:f5:
         08:b7:3f:65:45:6d:b3:2c:d4:c9:f0:3e:09:ef:6a:e6:71:64:
         be:8e:f1:38:3a:6a:f1:77:a0:9d:75:22:39:1f:e3:f1:ea:fd:
         d4:03:ed:bc:67:fa:0d:d2:21:06:14:c6:42:16:4e:3d:06:5f:
         25:41:80:66:b0:c8:81:e7:0e:46:4e:13:69:ff:62:37:4d:82:
         de:bd:57:8f:48:ef:99:9f:1e:50:b7:5d:21:14:a6:fc:e2:21:
         18:1d:e6:56:5b:d3:c2:ac:25:ef:4f:76:45:01:63:c9:94:67:
         5f:65:fd:ba:f9:ca:63:32:9e:f9:29:c0:98:6d:c2:8f:d1:c8:
         85:76:f4:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:12 2025 by rpki-client