Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
File:                     0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa (raw, json)
Hash identifier:          AdkWGGQhGUTgH8DiXXm02BWBRDAidrvVhs2kzZIko6E=
Subject key identifier:   E4:18:6C:40:FF:8B:69:39:5F:BA:1B:2C:56:B1:C2:26:FE:41:EF:66
Certificate issuer:       /CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
Certificate serial:       010D0C9F4328584917DC3ACFA69F9EC2DC028300
Authority key identifier: 64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     40100
IP address blocks:        208.68.156.0/24 maxlen: 24
                          208.68.157.0/24 maxlen: 24
                          208.68.158.0/24 maxlen: 24
                          208.68.159.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:3a:cf:a6:9f:9e:c2:dc:02:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=068b7060-e263-452e-b25c-c20e3ace29a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:3b:b1:47:76:58:83:17:92:6e:b8:57:80:
                    d8:9f:ca:1b:7c:eb:fa:78:c9:19:fa:4b:08:18:a6:
                    b3:2a:60:f3:9a:e6:32:a5:ce:8f:c5:d0:a0:55:c8:
                    82:cd:52:6b:f0:b1:c2:63:70:57:ce:c9:c0:82:12:
                    bf:ad:a6:cd:82:59:cc:74:c6:d2:c9:d4:d5:4c:b1:
                    81:30:d1:eb:24:5f:3f:2c:6b:58:61:9e:18:aa:63:
                    81:c3:89:c9:a4:76:f9:08:c1:38:47:8e:6d:de:14:
                    7b:73:44:b7:e7:55:81:81:f0:6b:b2:59:b4:eb:da:
                    de:82:2d:3c:c7:cd:26:c4:66:7e:03:13:3a:8b:d3:
                    a9:89:3f:e5:62:37:93:87:86:73:cd:52:38:81:c0:
                    b1:a2:ce:02:51:f7:9a:0c:cc:9b:84:0d:d7:98:9a:
                    97:e3:7e:6b:1f:37:f3:55:80:f8:eb:40:52:e9:9e:
                    fa:0f:a6:45:e9:fa:7a:5a:32:37:48:69:fb:2d:5b:
                    d4:52:c1:5e:53:58:b6:df:ad:fe:53:07:74:49:eb:
                    9b:a0:7c:9a:43:5d:42:c5:96:7c:f0:fc:c2:1d:72:
                    d5:4b:d2:c1:44:3d:ca:55:3a:37:cf:18:71:6f:bb:
                    8e:f3:17:be:0c:be:ea:44:6b:0a:51:5e:19:2b:5b:
                    a7:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:18:6C:40:FF:8B:69:39:5F:BA:1B:2C:56:B1:C2:26:FE:41:EF:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/0f0eadf0-7acf-3ce7-99f8-883e764fa94a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.crl

            X509v3 Authority Key Identifier:
                keyid:64:73:F4:FE:C0:A9:D9:3A:6F:E6:79:B0:3C:F7:87:18:87:79:11:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/45a4ef67-3ed0-4de9-afab-ab1eb4dc3b0d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.68.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:79:50:f9:51:d0:92:c6:33:e8:7c:57:f9:cd:37:3d:d7:63:
         90:9b:f6:9c:5a:01:02:c8:7d:a1:e1:5a:f1:c5:b2:6c:85:7f:
         aa:a5:41:3c:8d:61:78:be:ad:81:23:9c:e6:5b:9f:b6:47:c2:
         93:51:6c:cf:86:31:75:37:8f:da:2a:cd:7e:47:ed:a2:df:29:
         ac:2d:e5:50:b2:53:65:e3:f5:ae:fc:44:0e:a8:d5:53:ff:f2:
         fb:15:05:ad:e2:56:f3:a5:94:21:3f:7e:26:b0:08:a3:1f:54:
         df:a8:ef:5b:0d:c5:52:1b:2f:b5:e1:7d:3e:d9:d7:69:5c:dc:
         95:01:0a:a5:be:8e:a7:2d:d8:51:05:37:8b:60:57:94:51:e2:
         38:86:07:b6:39:56:a2:19:79:e2:8c:d5:fc:60:89:1c:3d:48:
         6f:ea:94:91:41:9a:69:85:82:20:60:9a:ba:a1:93:71:a9:47:
         76:34:84:98:5a:48:4b:14:48:09:19:17:d5:f6:0c:3a:ca:8d:
         4f:2e:e5:a1:47:e5:7a:70:9c:43:3d:8e:72:01:e9:77:88:0f:
         ae:ca:3b:8d:e9:48:93:96:f5:62:f1:7d:76:d0:3f:34:23:9a:
         10:79:30:93:b1:45:45:9e:15:e0:3f:0a:b0:c1:0f:a8:78:bb:
         c6:46:48:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 10:10:47 2025 by rpki-client