Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
File:                     d17eba83-4637-30d8-a17c-efa5eadc2b67.roa (raw, json)
Hash identifier:          3mlq8X7Tyasr6B0n6JEGPcJpsLy3SpWdqyhoz+NAjJU=
Subject key identifier:   91:0C:EE:49:5C:20:5D:07:8D:23:64:D1:83:DB:CC:D0:EB:2F:72:F4
Certificate issuer:       /CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
Certificate serial:       010D0C9F4328584953C41A34E9167BC7CFDF4D70
Authority key identifier: BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     8075
IP address blocks:        170.110.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:1a:34:e9:16:7b:c7:cf:df:4d:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be0d1a4-2c88-4596-81d7-3b6685e04a2d
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=08425cd8-3762-4fa0-9c36-15f24b4ad01a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:42:42:84:6e:63:e1:b5:c6:83:81:05:25:a3:
                    c1:a0:7d:1b:34:c1:f6:15:30:27:f6:df:a7:35:7b:
                    b9:6d:8c:6a:6e:10:64:51:81:da:92:a0:16:a7:87:
                    82:b3:15:f6:fc:73:36:f1:32:00:69:c2:40:82:f7:
                    77:fd:5d:74:82:25:10:9c:b9:8e:36:f6:9c:3d:4d:
                    de:5c:8f:8e:fd:e3:bc:68:1a:03:01:4c:95:9b:fa:
                    20:9a:8b:f5:59:f3:84:7c:21:92:c4:bb:24:4c:a6:
                    41:5f:6a:5a:4e:10:b9:1b:f6:6c:78:ab:4f:0c:72:
                    76:6f:1a:2e:a3:4b:32:a5:65:5b:5d:fa:3e:da:14:
                    6d:32:e5:91:72:61:e5:e4:97:f5:e5:ee:1c:30:22:
                    f0:03:f4:c6:ec:29:28:ff:2c:88:48:ab:33:3b:7a:
                    2a:cb:9d:90:16:b1:20:ad:78:42:8e:9d:19:be:d5:
                    87:49:b3:f6:98:32:d2:5c:a6:9a:0c:ef:10:27:ba:
                    85:37:3b:44:87:d9:57:f5:a4:24:a1:d5:71:5e:71:
                    17:e4:d3:f8:04:b4:9d:7c:ce:e4:de:c1:c2:94:8c:
                    f6:e3:ec:c2:4f:55:51:2f:96:d7:8b:7d:2c:ed:e9:
                    0c:ee:9d:5b:0a:7e:bb:94:aa:e6:64:47:48:2a:a0:
                    46:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:0C:EE:49:5C:20:5D:07:8D:23:64:D1:83:DB:CC:D0:EB:2F:72:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/d17eba83-4637-30d8-a17c-efa5eadc2b67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.crl

            X509v3 Authority Key Identifier:
                keyid:BF:9B:E4:B5:3E:13:95:1F:07:53:D8:E9:0C:8E:45:5A:0E:B5:0C:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/0be0d1a4-2c88-4596-81d7-3b6685e04a2d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.110.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:3e:ff:a0:0d:68:40:b0:2a:a6:bb:31:2f:f6:57:f9:4c:8c:
         9d:84:52:36:85:dc:16:fd:43:76:9c:69:95:34:77:2b:ee:d3:
         a4:21:ed:37:02:60:e8:54:f7:ed:e7:fe:aa:a3:4a:aa:fd:83:
         93:74:1d:f0:0c:0e:12:e7:73:57:b8:07:c6:7c:43:ad:39:2b:
         75:d8:0f:a1:22:08:e9:93:9d:6a:47:38:5e:6a:c0:fa:b5:d7:
         f7:3d:85:82:e1:aa:4c:1e:28:3f:14:83:88:a6:e1:55:15:ed:
         36:65:7f:1b:3e:e9:8b:ab:88:7d:b6:c4:ba:8a:44:60:29:ec:
         c6:00:4b:03:e9:c3:90:63:75:f6:a7:f1:fa:6e:9f:a7:af:a5:
         74:a4:44:18:8c:74:c7:13:89:8a:54:98:10:65:87:31:fe:c2:
         e7:61:ce:f7:b0:1f:9b:6c:f6:e8:2d:22:5c:0c:fe:f7:aa:75:
         f2:47:e7:55:27:34:b9:24:11:63:22:e6:b7:53:f5:52:4a:d0:
         a5:b7:b5:be:eb:60:19:fb:1f:eb:e5:42:bc:a7:58:e8:ea:9d:
         70:8d:83:2b:45:49:5a:53:3a:d1:3f:00:a5:ba:c4:81:69:ba:
         22:2e:34:41:83:e1:ae:3c:dd:e1:5a:b9:7c:b9:ed:65:d0:bd:
         77:eb:54:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:11:52 2025 by rpki-client