Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
File:                     f2b1bf4c-2212-3320-825b-ce87470ebea1.roa (raw, json)
Hash identifier:          /HRkXQ32iIEmOY5K0flQEggShie6y2+UUfNST+P49/I=
Subject key identifier:   63:F3:7B:DC:34:CA:67:8A:DC:FC:A5:F5:96:03:27:53:84:BC:F3:21
Certificate issuer:       /CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
Certificate serial:       010D0C9F432858492CAE9CF734F9879739DC2600
Authority key identifier: 3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     400915
IP address blocks:        107.180.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:ae:9c:f7:34:f9:87:97:39:dc:26:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a3f8f82-6291-4c3c-80ec-01036351e32a
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3510bbf6-ba74-478a-b170-89a8c50e0a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:32:b7:fc:1d:24:57:c7:1a:35:ef:dd:43:a0:
                    6e:91:b3:80:b4:02:14:af:16:6a:a4:c2:fc:36:b2:
                    43:df:7b:22:ca:c7:5b:b7:3e:fd:9d:61:da:64:2f:
                    f0:01:11:57:1c:d7:ea:18:93:8b:4d:c7:6c:ba:b2:
                    20:25:1e:66:cf:2c:2e:e2:63:02:da:25:c3:7b:f6:
                    d6:96:ae:80:fc:bf:1a:e3:8e:8b:88:4b:5d:49:15:
                    c0:33:35:a9:dd:5c:f5:e7:b8:c3:34:8c:42:41:54:
                    a2:8d:e2:b2:d4:9b:d6:87:13:5f:56:df:0c:b6:ef:
                    ef:7f:88:59:20:00:ae:07:06:e5:c5:83:4d:8f:b0:
                    f2:bd:5f:f9:32:14:a3:ac:ed:48:40:03:f8:00:3c:
                    85:c9:31:b1:4d:74:eb:65:dc:7c:82:f0:ec:71:ca:
                    61:72:2a:cc:97:42:fe:5d:20:8d:d7:4e:41:ff:f5:
                    3f:4d:91:ef:ca:7f:f8:20:58:ba:0c:f7:19:71:57:
                    11:c4:46:46:c2:95:2a:cf:45:e8:4f:71:be:3e:06:
                    cc:bf:99:f0:13:17:e4:ea:7a:22:b5:40:f5:3d:64:
                    eb:df:61:80:18:11:1f:d5:84:32:d1:06:f0:e3:87:
                    72:53:32:d8:97:c9:8d:5d:c7:f1:73:2a:82:c4:23:
                    5f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F3:7B:DC:34:CA:67:8A:DC:FC:A5:F5:96:03:27:53:84:BC:F3:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/f2b1bf4c-2212-3320-825b-ce87470ebea1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a/2a3f8f82-6291-4c3c-80ec-01036351e32a.crl

            X509v3 Authority Key Identifier:
                keyid:3C:F5:76:4F:2F:E1:77:C1:30:88:58:71:75:08:1A:BB:3B:31:CF:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2a3f8f82-6291-4c3c-80ec-01036351e32a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.180.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:32:27:44:a5:e9:5f:bc:0a:b5:83:4b:59:00:9d:65:4a:0b:
         9b:0e:3e:51:66:d1:f3:19:f0:24:5c:c6:9b:e2:61:58:81:76:
         73:f4:ac:4a:49:b7:aa:c5:e5:a4:8b:c8:55:44:cb:1e:87:d5:
         c8:70:fa:f8:33:9f:a8:50:01:ab:9e:e2:78:33:90:5b:e5:08:
         16:88:1a:2e:2a:91:5d:21:dc:3d:a9:cf:6f:db:9a:39:f1:95:
         a4:d2:ff:3a:cc:f4:49:2b:83:bc:c3:72:23:5c:d2:83:ed:d2:
         2b:24:b3:f2:03:e4:10:b8:69:62:a0:9e:99:77:d7:af:c1:a9:
         96:3f:cc:d6:d2:7e:d8:f9:e5:84:d0:c5:0e:b0:7e:dd:06:40:
         39:63:d1:84:77:d3:19:6c:fe:67:d9:9d:73:bf:5c:f5:dc:40:
         74:96:35:31:1c:fe:bf:1c:49:1d:51:b6:7d:ff:9d:86:44:ec:
         76:43:01:3b:c6:fc:ab:20:6f:c0:72:13:8f:81:c7:d7:74:c9:
         9d:d0:05:3d:16:ce:bc:1c:6d:47:20:b1:ae:2b:ae:de:3a:57:
         66:23:21:21:b3:8e:ac:3e:33:ba:4f:9b:9a:70:13:09:6d:3d:
         c7:76:a9:ec:66:e9:1b:63:a6:d1:2c:60:8c:ee:c8:cb:71:22:
         c0:eb:52:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:10:49 2025 by rpki-client