Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d49b81f9-423f-34c0-9506-de8905d4bf1f.roa
File:                     d49b81f9-423f-34c0-9506-de8905d4bf1f.roa (raw, json)
Hash identifier:          sSNaTV0aV3hJ5WFYx5LDb6iJXW24A5VPce6eDqpcfMM=
Subject key identifier:   31:09:F1:F4:88:5E:99:BF:B9:C0:E2:26:07:57:1F:1F:3E:02:92:1F
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F432858487325B538A5F7A869241BE300
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d49b81f9-423f-34c0-9506-de8905d4bf1f.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     6250
IP address blocks:        216.228.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:b5:38:a5:f7:a8:69:24:1b:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=4ab737ac-3216-47af-ba20-66a141cacb65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:d1:50:45:09:50:71:72:3d:1d:74:00:07:
                    da:ac:90:b7:35:05:14:4f:77:4b:64:b7:f3:ac:d3:
                    35:d1:cf:f1:e7:15:69:f4:63:7c:8e:4e:dd:d1:d6:
                    ab:da:e6:e4:8f:4a:39:51:ba:9e:f9:d3:95:68:20:
                    a0:41:11:59:83:95:a5:e0:eb:3e:5f:16:fe:44:33:
                    ba:50:76:f2:9a:05:5b:51:de:ee:38:5c:e7:01:ee:
                    ac:04:e0:4c:a2:e6:8c:66:ec:e9:09:b5:b2:49:fa:
                    64:ee:a9:84:ab:01:ae:df:37:36:31:48:dc:7b:82:
                    c5:52:8a:57:e8:55:7c:1a:52:ec:d3:8a:dd:7e:3d:
                    d2:aa:88:ef:b6:3b:68:2e:bc:26:3b:22:f0:3e:6d:
                    b1:99:4f:f7:73:6d:ac:86:98:b1:87:76:a2:82:9e:
                    75:8c:0b:fa:cc:bc:63:ff:b2:a9:80:a6:1a:e8:23:
                    d0:41:0d:3b:5a:2d:f5:bb:85:77:f9:ab:7e:b3:25:
                    b3:8e:0b:e8:99:57:12:cb:1c:13:a6:e9:89:57:98:
                    bb:7d:61:c2:f4:82:9f:b8:35:3b:01:eb:f3:38:f9:
                    50:4a:2a:08:52:21:76:3b:ce:19:c3:ca:41:ea:7a:
                    22:2f:f0:05:cc:43:02:97:43:37:28:c7:e6:6a:5c:
                    bc:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:09:F1:F4:88:5E:99:BF:B9:C0:E2:26:07:57:1F:1F:3E:02:92:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/d49b81f9-423f-34c0-9506-de8905d4bf1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.228.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:ae:e6:35:e2:6c:61:d8:be:b1:d0:f8:ee:ec:28:88:05:73:
         fb:4b:76:eb:2c:60:01:6b:c2:32:d5:43:06:c8:58:6a:0c:7b:
         18:f0:c7:17:f7:fd:77:b3:97:f6:2c:64:3a:d9:2b:2b:b9:af:
         07:21:0c:51:2c:08:6d:0c:f6:8a:0e:50:5c:d5:cf:77:03:e3:
         fb:49:3b:54:e4:a0:81:1a:dc:1e:d5:95:ed:ea:44:ef:31:70:
         05:59:c5:77:9d:46:f1:98:37:4c:78:27:6c:1d:53:09:38:ab:
         d7:0a:3a:68:71:15:09:39:ad:f0:7f:8f:40:cb:5d:2b:f8:56:
         72:b5:7d:00:16:42:4f:51:35:af:b9:59:f0:61:1b:2a:45:7b:
         6f:a5:7f:cd:65:30:41:9b:76:ba:7f:42:74:16:05:f7:82:01:
         24:94:a1:f7:3e:35:ff:da:66:85:42:07:01:78:53:c2:c6:60:
         8e:ab:47:d0:02:97:bd:1b:7a:bb:c3:8e:84:f6:d2:f8:f5:24:
         ad:8e:c9:7c:9a:67:00:fb:e6:a6:60:4b:ea:f4:57:a0:8b:8e:
         9a:7d:3a:c6:39:e0:1b:2a:62:4c:9a:a5:38:a5:ba:7f:f2:1d:
         9e:05:d6:ed:9e:f1:41:3f:f4:f0:b0:f8:52:b4:13:2f:81:ce:
         3b:94:5b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:17:42 2025 by rpki-client