Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa
File:                     8c132f7c-982b-3312-834a-60a366477a88.roa (raw, json)
Hash identifier:          15wDh/btZPcNSUPnzcbJhLQISKYVHcs7lk3KAiynLgg=
Subject key identifier:   A2:72:70:CA:B7:71:E9:05:43:34:7E:44:39:F1:17:80:BE:01:C8:6A
Certificate issuer:       /CN=c8cbe89c-d0be-4948-ba08-b681d11aff00
Certificate serial:       010D0C9F432858494733E9654EBEA021638B3C00
Authority key identifier: D2:C4:E1:7E:88:C6:8A:F2:17:F4:27:DB:8F:12:D1:29:B4:20:6F:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     29758
IP address blocks:        216.183.117.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e9:65:4e:be:a0:21:63:8b:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8cbe89c-d0be-4948-ba08-b681d11aff00
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=9894fd64-705d-499c-ad22-ccebfa9d344c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:53:fc:12:42:68:53:b7:56:22:f3:ec:6d:ab:
                    fe:16:14:42:50:d3:e9:47:3d:ef:d9:e2:db:2b:87:
                    60:63:34:a0:56:e6:53:d8:6f:f0:90:59:fc:c3:42:
                    52:9a:ba:ce:5a:d6:d5:35:9b:b6:07:d0:26:df:c5:
                    9c:5d:c9:c2:83:0a:9f:e6:21:d7:00:87:18:2a:47:
                    a4:3c:a4:e9:b4:f7:30:37:88:1c:d7:78:ab:ea:5d:
                    69:af:dd:36:f8:7c:9b:a9:07:2c:fe:08:ce:fa:39:
                    b1:10:76:d5:43:84:2d:01:ce:be:d3:e2:89:e4:ec:
                    87:a9:62:99:d3:2c:c3:b0:da:af:9d:39:93:13:06:
                    df:0d:74:97:d8:c8:26:39:39:0f:20:f6:08:64:9a:
                    b7:f7:4e:62:57:84:5e:50:f8:d0:f5:16:70:89:b3:
                    d2:0b:f7:65:6d:69:f4:fd:92:17:d7:8a:cf:08:06:
                    8f:84:2a:07:03:4e:36:49:3f:29:b6:a5:b9:9e:70:
                    71:e3:c6:b0:66:fe:6f:49:48:99:b8:c3:cd:a7:6e:
                    eb:d3:08:63:63:00:85:f3:58:88:3f:b3:d1:0c:92:
                    7f:ff:e3:02:49:be:ef:69:a7:59:21:3e:81:1e:ea:
                    c4:62:a8:fa:69:5f:d2:a2:04:fe:65:35:ff:cd:7a:
                    60:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:72:70:CA:B7:71:E9:05:43:34:7E:44:39:F1:17:80:BE:01:C8:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/8c132f7c-982b-3312-834a-60a366477a88.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00/c8cbe89c-d0be-4948-ba08-b681d11aff00.crl

            X509v3 Authority Key Identifier:
                keyid:D2:C4:E1:7E:88:C6:8A:F2:17:F4:27:DB:8F:12:D1:29:B4:20:6F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c8cbe89c-d0be-4948-ba08-b681d11aff00.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.183.117.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f9:9b:39:a0:8f:16:da:80:41:3b:e8:02:01:b5:fe:e7:b8:
         fd:58:95:eb:c9:2a:cc:b0:bc:af:45:b2:f2:07:6a:32:27:33:
         6d:be:83:e9:ef:cc:6f:bd:d1:b1:c6:d1:36:5e:fd:2f:26:83:
         2f:42:3d:ba:83:8a:46:1b:2b:9b:6d:9d:a4:7a:5e:cb:74:5c:
         8b:71:75:a7:eb:7d:b0:83:7b:73:f3:0c:ed:f9:d8:47:1b:38:
         55:b6:a4:fd:b7:bb:8c:0e:fd:c6:a6:4a:6e:86:17:ea:d2:2d:
         98:5e:57:ce:4c:79:bb:92:41:06:df:42:28:5c:c3:0d:4e:56:
         eb:8f:f6:c5:a1:98:84:f0:0c:51:fa:d5:19:25:e2:57:43:ef:
         7a:7b:c3:11:40:29:f1:61:a6:22:a5:29:3a:15:52:8d:28:36:
         86:a0:89:21:58:1a:77:a8:36:9a:ad:33:b6:1d:f2:ff:cf:a3:
         3c:3e:a9:f5:c0:7d:06:8b:16:42:25:61:53:75:a4:24:c2:1a:
         9a:ce:39:ce:e1:0f:94:5d:96:00:3f:ae:ed:23:ae:ca:e4:0b:
         4d:50:f8:5b:fa:e4:28:28:72:53:35:c7:a0:75:2a:79:6f:5c:
         29:23:73:dc:b3:7c:7c:dc:80:84:0c:05:7c:19:85:91:85:81:
         d9:26:8a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:51:06 2025 by rpki-client