Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1043e6e4-f8aa-34b2-948b-ab05659a3090.roa
File:                     1043e6e4-f8aa-34b2-948b-ab05659a3090.roa (raw, json)
Hash identifier:          +jelfBMFI5X5u1VUTi983d6Uzlj5jg+4COgIVi890UQ=
Subject key identifier:   A5:1D:6A:19:53:46:52:AC:B9:27:37:E8:46:97:71:F9:F9:F4:5F:A5
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F926833C46136201FFF52700
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1043e6e4-f8aa-34b2-948b-ab05659a3090.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     399053
IP address blocks:        208.184.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:83:3c:46:13:62:01:ff:f5:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=2f6afe3a-0f74-4e13-88a9-2c28a63b171f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ac:2e:5c:35:e4:6e:55:e2:c8:ff:1e:af:81:
                    aa:d5:25:a4:61:a2:99:1e:b8:02:56:29:c8:90:34:
                    58:8e:6f:51:84:9b:cf:72:5b:b8:66:da:5d:08:18:
                    94:6c:26:6f:b5:34:ef:a2:88:74:28:5f:84:bb:15:
                    ee:74:fa:15:45:b3:80:a3:69:88:4b:d1:ff:23:f8:
                    8a:fc:da:1b:75:9c:de:b9:56:a9:af:d2:26:e7:84:
                    7c:ae:14:78:41:ae:5c:f9:a4:b9:8a:ce:4c:5b:f4:
                    dd:58:4e:40:74:36:f7:e8:fa:59:80:0b:73:f3:7e:
                    ec:cf:08:bf:b7:d9:77:6f:69:2c:d3:cc:7d:1e:31:
                    cb:26:5f:13:62:7f:36:30:e1:b8:fd:08:e7:fe:7c:
                    10:e8:c3:d6:04:c8:bf:0d:6c:6e:0d:02:fe:d1:c9:
                    ab:4f:e9:bc:9c:39:d9:96:79:0d:3c:80:db:73:0f:
                    88:8f:b5:c3:9a:a4:8d:97:db:ec:e4:83:d0:2c:c1:
                    d4:89:8e:ac:1f:c1:0f:3d:6e:77:63:6d:97:93:ba:
                    a0:79:2e:fd:83:d9:a0:b3:5b:55:2a:22:c3:2f:fb:
                    78:21:92:d0:71:e3:a0:75:df:6f:57:05:22:90:62:
                    27:d5:82:3d:d9:fa:62:1a:a0:d2:69:29:29:4a:b0:
                    27:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:1D:6A:19:53:46:52:AC:B9:27:37:E8:46:97:71:F9:F9:F4:5F:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1043e6e4-f8aa-34b2-948b-ab05659a3090.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.184.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:79:74:93:88:92:e6:f0:ca:7a:a0:f4:6c:fa:36:97:39:af:
         27:03:6b:da:47:ee:98:c7:d2:ba:98:89:22:f9:1d:4d:8f:4f:
         e3:67:88:d8:b3:7d:e3:ab:bf:cd:ff:3a:71:09:8e:9d:69:d5:
         f9:c5:39:cc:17:78:7e:13:e9:10:bd:61:b7:49:eb:53:35:34:
         d7:5d:43:15:35:e1:13:9b:de:de:40:04:77:30:ee:f2:6b:49:
         42:56:9c:30:55:65:8b:ea:bc:d6:cf:cc:4b:cb:30:c5:c2:81:
         bc:bc:b5:a9:b6:b7:c2:80:b7:7d:d8:4e:5d:34:28:d2:4b:f9:
         90:82:1e:d2:95:9d:32:bf:2e:29:5b:bf:85:54:68:fa:c7:f9:
         1e:f0:9b:9b:fb:a5:87:cc:02:9a:8d:53:d7:17:22:4f:d8:f5:
         dd:66:da:23:90:88:fd:88:f5:02:21:9c:66:d3:ea:3c:0e:c0:
         54:c3:c1:e2:51:f1:fa:8a:64:57:5a:4c:75:7d:e6:1e:cc:2f:
         07:a3:18:9e:68:ce:a9:d2:4f:eb:13:31:2a:5e:08:15:9a:a1:
         5e:0c:40:31:6f:8b:4a:d3:26:8e:bb:d0:a8:c8:db:f6:69:c3:
         c0:fd:81:04:e5:09:4e:c7:24:44:7e:66:87:93:80:33:c5:7c:
         eb:7a:f9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:34:51 2025 by rpki-client