Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa
File:                     d3f7cab6-2432-3d76-b034-d13583f80f22.roa (raw, json)
Hash identifier:          IWZ8TsuPs4mL9Mo/uP4SIP9POMWlLTdz4VnOGEARbLQ=
Subject key identifier:   5E:92:9E:72:DD:36:B8:65:7E:DC:97:9C:B0:AB:6E:EE:F9:A6:F8:0E
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848A565F6560D676573376D18E0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa
Signing time:             Fri 24 Jan 2025 02:00:39 +0000
ROA not before:           Fri 24 Jan 2025 02:00:39 +0000
ROA not after:            Thu 24 Apr 2025 01:00:39 +0000
asID:                     11233
IP address blocks:        216.110.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a5:65:f6:56:0d:67:65:73:37:6d:18:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jan 24 02:00:39 2025 GMT
            Not After : Apr 24 01:00:39 2025 GMT
        Subject: CN=3ec14e95-fb46-41b0-8f96-523583b899a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:11:e4:ce:b4:f6:ce:ea:7a:8b:d3:52:ae:92:
                    46:8c:39:07:ef:3a:89:cc:13:07:c1:7c:53:87:2f:
                    d5:51:3a:b7:27:9d:c8:bd:dd:e6:c6:89:e3:d2:28:
                    d9:85:28:22:96:63:c0:72:69:65:dc:29:16:aa:79:
                    3e:b3:ae:b3:9f:b2:15:2c:12:f2:3d:6f:55:c5:9f:
                    3f:48:64:0c:ad:0a:de:28:bb:8a:69:8f:b2:ed:43:
                    75:b8:4a:63:40:71:f6:38:75:fc:c7:6e:28:b9:38:
                    d8:ee:39:11:74:28:22:6a:00:4b:17:c0:58:d0:bd:
                    07:ee:3f:a4:f9:ea:c1:7d:91:12:76:6a:8d:65:fc:
                    bc:c2:85:b6:a2:bc:02:0f:3c:36:d0:a9:cc:84:c2:
                    91:7f:b6:1d:71:a0:d6:a4:d8:23:80:6f:bb:16:c8:
                    5b:f3:27:4a:d9:a6:98:44:f0:c9:7f:5b:6b:50:83:
                    36:f1:63:64:18:4a:f4:1f:ad:9a:b1:e2:96:2a:8a:
                    8c:6e:ea:54:0e:05:2c:08:66:d1:9c:74:8d:66:39:
                    9b:0d:e3:d6:f6:0e:e4:6c:ae:99:a1:58:02:18:23:
                    f3:87:91:db:f8:23:51:2c:22:04:42:3a:ec:9f:77:
                    0d:bc:c7:fd:a6:e2:b9:f5:c9:2b:48:d0:05:f1:1c:
                    40:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:92:9E:72:DD:36:B8:65:7E:DC:97:9C:B0:AB:6E:EE:F9:A6:F8:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/d3f7cab6-2432-3d76-b034-d13583f80f22.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:9e:d4:f1:99:b1:32:fb:22:dd:31:0f:de:f4:d1:00:da:47:
         bb:40:6f:92:e3:28:43:cd:a3:92:f7:18:e9:02:73:0a:ab:9b:
         d9:6b:c5:48:43:ed:92:9e:c5:fd:ac:8d:ca:10:02:02:3c:df:
         48:c5:f1:f0:32:b9:cb:a0:04:cd:9d:e4:08:83:65:30:f4:9b:
         0b:f7:11:5f:57:e1:a7:9b:fd:16:11:35:cd:4f:42:5b:d9:75:
         b6:b8:4c:5c:e7:29:2d:0e:06:7e:ce:02:ca:13:47:42:61:31:
         53:fb:b3:a1:fe:4e:cd:b1:b9:b7:a9:2e:9b:c8:79:ff:b8:b8:
         36:4a:3e:02:9b:27:2e:e4:b6:8d:26:56:7c:06:40:9b:74:c4:
         81:62:c0:b6:93:5c:15:2e:a8:7a:3d:de:57:b0:6d:d7:93:c6:
         83:02:19:82:93:19:23:e3:11:2c:bc:c4:fc:50:08:8e:8c:88:
         ac:8b:88:e1:a4:cc:93:88:1a:09:f5:0a:ac:c0:05:c3:f8:1c:
         cb:df:de:82:03:2c:1c:d2:8a:6b:d6:fa:e1:9f:e0:05:80:50:
         0e:4a:6d:07:74:27:42:92:3c:ed:c8:48:cb:ee:67:c4:6a:ed:
         dc:4e:c0:c4:fe:09:cf:59:3b:1a:d0:5f:c8:9d:7b:00:b3:b1:
         8d:33:9d:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:11:45 2025 by rpki-client