Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa
File:                     4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa (raw, json)
Hash identifier:          QAc729pc5dD+fKlBOkJhJ1CExyM+q5nKWxcEmM0lncg=
Subject key identifier:   EE:8E:70:1D:DA:03:1F:97:B9:B8:15:B8:FC:5E:BE:BC:00:C8:E0:B0
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858492E13BD9070EF75E7D9015600
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     7810
IP address blocks:        208.6.167.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:bd:90:70:ef:75:e7:d9:01:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=96f8c3f6-6b2f-40fb-8aad-0f1fc28ecc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:a5:4f:85:27:7c:e7:c4:00:7d:79:43:b7:
                    c0:02:ce:de:ec:ff:33:36:82:58:08:e5:b0:f2:d2:
                    1f:11:11:48:e2:f7:c2:9f:40:00:e9:91:4b:ed:a7:
                    9b:ae:05:6f:09:e8:93:9e:92:35:7c:b8:b4:2b:bb:
                    37:cf:9f:7f:a8:9c:75:df:d7:4e:cb:3c:6a:40:3a:
                    9f:21:a0:2b:80:e3:cd:5f:c6:9a:8b:de:b4:a4:53:
                    b8:e1:21:52:8b:f6:2f:85:e3:61:d2:19:bd:2d:c4:
                    cf:3a:9e:5d:b2:48:91:38:f6:b8:18:34:29:eb:c4:
                    08:e2:db:03:fe:ac:a4:ef:96:68:57:d6:b4:31:83:
                    8d:ac:28:9b:21:77:39:fd:a3:83:64:f7:76:30:d5:
                    c7:58:95:3c:17:fb:10:85:ca:db:8a:15:c8:94:47:
                    96:26:5b:97:f3:bf:59:7a:c9:3a:3c:2b:d2:cc:e1:
                    7f:d7:ed:e5:80:6b:ab:99:b3:cb:27:40:26:2b:e8:
                    b2:09:41:9e:93:93:71:08:65:51:7e:99:53:56:24:
                    8d:74:6a:f0:dd:99:ca:1b:8f:0c:f1:d3:05:40:f2:
                    5c:a6:b2:91:fe:c4:59:71:c3:15:d9:e9:d4:4c:97:
                    3c:5f:7a:ac:4e:e2:ed:23:ea:c7:cf:82:dc:75:5a:
                    55:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:8E:70:1D:DA:03:1F:97:B9:B8:15:B8:FC:5E:BE:BC:00:C8:E0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/4a9dcea2-a6e9-301d-a8e2-7d40db8d8834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.6.167.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:9d:f6:18:f1:fb:a4:58:a0:8e:c3:da:7a:c7:db:be:fe:a6:
         05:29:a0:51:18:a2:13:31:16:62:1f:11:6e:1c:e1:0c:30:78:
         44:e6:61:2e:27:a8:b9:34:d5:13:55:cf:61:f0:56:cd:7f:fb:
         4d:d2:4b:21:0d:1c:d8:6b:f6:35:8d:82:c9:02:d6:96:45:a3:
         6c:a7:f7:08:bd:9a:88:0f:95:28:37:73:8b:d5:ad:ba:35:f7:
         02:82:47:b0:a8:4b:5b:9d:98:94:ff:aa:0d:79:89:53:0d:a5:
         9c:7e:c7:f4:7a:f9:38:3c:c0:2c:bc:83:17:ce:b0:4b:bc:67:
         27:86:2d:74:84:84:d0:c4:68:76:2c:db:7a:92:40:a6:19:18:
         e5:08:a1:c9:71:4e:98:da:28:a7:e6:d9:b9:ed:3a:c7:04:f3:
         d9:05:cc:c1:f9:51:1c:4a:e4:7e:8e:2e:32:dc:99:34:69:8b:
         55:73:4a:b3:a0:81:98:ba:7e:1e:b4:b9:5b:d8:34:23:fa:52:
         b4:e0:4f:bb:c3:9c:87:31:14:9d:c6:be:63:b9:c5:e1:89:1f:
         a7:18:6f:ed:9d:4c:20:03:ee:52:97:c8:cd:db:f8:2f:05:e2:
         0a:0b:9b:88:9d:ae:f9:ba:9d:7d:88:a5:13:5e:e5:ff:98:02:
         cb:81:0e:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:50:43 2025 by rpki-client