Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/626bf166-0c29-3d7d-aeb8-1782236bb78e.roa
File:                     626bf166-0c29-3d7d-aeb8-1782236bb78e.roa (raw, json)
Hash identifier:          ypeVqfmUvlYgqbjn0XPkq+IZzizIT4tP7iPIOLe4ciw=
Subject key identifier:   20:8C:19:5A:E8:C6:EA:8A:46:B5:55:81:08:D3:17:DF:C6:19:FE:19
Certificate issuer:       /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial:       010D0C9F432858492E13BAFB9D3051F46925A600
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/626bf166-0c29-3d7d-aeb8-1782236bb78e.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     38621
IP address blocks:        208.111.184.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:ba:fb:9d:30:51:f4:69:25:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=c60d1b11-d9f3-41be-b0e7-482aee1fe5ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:10:82:0e:9e:83:d4:3f:aa:84:98:5a:5c:ed:
                    a6:2c:d2:1a:fc:0b:7e:61:b7:da:c3:85:8d:4d:b6:
                    be:ef:9e:a5:6b:b5:84:f3:28:72:6a:b5:a4:62:7b:
                    18:50:11:ca:c8:48:69:1d:90:66:0b:cd:f7:f0:c9:
                    34:eb:c2:65:a1:33:c3:bd:09:82:a0:84:4a:16:37:
                    a2:3d:e4:ba:35:fe:a0:84:d4:be:da:79:18:93:fd:
                    ea:9b:51:27:02:96:15:4a:23:3d:d3:17:70:35:9f:
                    9d:0b:c3:d4:16:ae:33:15:41:01:d9:77:22:93:b0:
                    b3:db:25:f3:d8:cf:fe:3e:23:92:e2:27:92:f5:b9:
                    38:ed:3b:0d:22:12:47:d9:dd:9a:00:db:d8:39:ac:
                    61:45:a9:dc:9d:7c:4f:3b:51:a8:4d:f5:52:be:80:
                    1d:99:b3:c2:6f:44:fa:b1:d8:d6:97:75:e9:89:e3:
                    d2:90:b9:e8:2d:4c:ac:4f:bf:0d:5a:f9:49:b6:40:
                    94:f9:22:b8:a6:77:cd:90:58:bd:42:78:60:37:bc:
                    9a:cb:6d:5a:ab:86:de:3b:4c:3c:8b:9c:12:26:14:
                    ed:0d:74:df:4b:91:f6:34:e8:73:30:86:fd:f2:dc:
                    08:58:4e:e0:1c:06:2a:18:6c:91:26:cd:dd:11:e6:
                    b8:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8C:19:5A:E8:C6:EA:8A:46:B5:55:81:08:D3:17:DF:C6:19:FE:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/626bf166-0c29-3d7d-aeb8-1782236bb78e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl

            X509v3 Authority Key Identifier:
                keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.111.184.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:fd:63:f1:63:62:86:21:d5:5e:c1:ee:9b:18:9a:23:91:19:
         8c:14:71:15:bf:f0:fa:b0:b7:b6:a4:ec:1e:fb:86:82:9e:1d:
         ed:e5:06:de:81:38:5b:32:c3:34:6b:ae:a8:f8:55:12:5a:11:
         e8:ff:f5:c4:c1:9b:15:90:01:3a:59:84:2b:a3:6a:d2:2a:92:
         1e:e1:55:1f:c9:b5:e2:99:bf:be:1f:00:de:c3:1e:06:1d:d9:
         df:20:6f:b9:e2:b8:e4:cd:6e:42:67:05:7a:37:c1:14:d7:66:
         70:ff:a6:6a:db:26:e6:c9:29:6d:d3:29:5b:7f:19:1e:da:31:
         24:23:cb:49:bf:c1:91:9d:84:4f:6f:8b:6c:d3:7b:23:16:6e:
         79:19:46:92:47:35:a5:f4:db:59:4b:78:8a:d1:7f:99:6c:b4:
         78:31:a8:3d:24:9e:78:d9:3c:71:25:45:52:52:49:2d:3b:4d:
         32:ad:38:91:1d:fe:89:35:54:1e:5d:f4:45:e2:57:96:71:be:
         e7:29:5a:a6:bb:44:79:cc:14:50:6b:78:f2:6a:06:8c:0c:fc:
         67:dd:48:fd:91:2f:d2:62:fa:53:e4:cc:3b:3e:3b:e1:cc:f2:
         07:dc:bc:26:91:09:e1:06:b7:e5:f1:77:a4:99:0f:2c:ce:7f:
         e1:03:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 07:09:57 2025 by rpki-client