Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa
File:                     7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa (raw, json)
Hash identifier:          89nqlyquUVqt184mpweIZ7c9gtyMrr2hfEUpZOqCmaQ=
Subject key identifier:   83:FA:8C:A5:A3:04:25:A1:F0:DB:7E:94:0D:B5:4D:3D:2B:E6:B6:43
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F43285848CC7B989F59682F9060D70500
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     397630
IP address blocks:        208.89.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:98:9f:59:68:2f:90:60:d7:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=50e17d05-643f-463d-a08a-07cbdc9b3d1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:39:94:b9:b4:85:94:22:26:9e:7c:04:13:5a:
                    af:d7:3c:3e:c9:b1:6a:f3:e5:6e:2a:86:f1:41:99:
                    9c:88:db:37:8c:cd:ed:01:8d:c3:32:9b:8a:b1:3d:
                    27:ac:c1:f2:f1:9d:01:1e:7b:2d:65:97:4b:bc:32:
                    3d:4a:7e:a8:3b:95:8c:27:cb:43:eb:f5:fc:0a:7d:
                    2c:6d:c2:a7:50:e1:dc:49:79:1d:95:a5:14:40:e3:
                    a6:9d:7c:30:01:bf:56:40:39:99:fa:a2:6d:c4:1a:
                    d4:cf:6d:a8:a5:81:43:ba:60:0c:9f:60:58:39:9e:
                    a4:c7:5a:2e:c4:44:67:82:36:40:9d:08:cc:b2:12:
                    0b:fc:ef:6a:d1:36:8e:ac:ed:03:00:f5:3d:fc:b0:
                    6d:c1:94:da:9f:00:70:f8:8b:68:ee:6d:21:30:66:
                    d2:6e:78:73:77:17:38:b5:0b:17:7d:36:71:23:5d:
                    19:79:7b:7a:6a:06:1f:c3:b3:b7:d7:ad:f4:2f:97:
                    37:9d:25:95:7a:6a:55:c4:c1:fc:3a:c7:63:c3:1a:
                    5b:02:92:0a:e6:dd:af:02:29:e4:46:94:78:3c:03:
                    5c:ee:b5:21:80:79:51:d4:27:70:7d:95:71:5b:6c:
                    3a:45:78:f3:46:db:d5:fb:e7:2b:e9:5f:e8:78:67:
                    89:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:FA:8C:A5:A3:04:25:A1:F0:DB:7E:94:0D:B5:4D:3D:2B:E6:B6:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/7dfbaf3b-132f-3bfa-9bd7-2f6a7d9e79c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:3a:a0:e7:35:94:f1:68:cf:f3:e6:01:ad:59:8c:6d:f4:c1:
         58:64:e7:46:ce:98:c2:0e:ee:e1:c0:8f:4a:af:f2:be:ce:36:
         49:9d:6b:d0:e4:95:84:2a:23:3d:bc:57:e3:48:fe:ea:a6:b3:
         ae:0d:03:a1:dd:07:ae:6c:15:70:62:a4:04:5f:c3:5b:4f:da:
         ff:e6:8e:2d:b6:ae:75:25:7a:77:f4:6e:44:25:ee:f9:77:f7:
         db:9d:51:bd:25:24:74:b5:5a:cb:e5:98:5b:1c:f7:c6:b5:44:
         03:a7:b6:9c:31:13:75:50:9c:c7:9f:ef:70:7d:2e:17:b2:25:
         32:76:7b:55:b7:88:62:82:72:69:e7:da:a5:48:e3:0a:77:58:
         c2:e2:b9:bc:7d:ae:e4:70:a2:32:14:75:99:9d:8d:55:7b:b3:
         99:b5:76:fb:4b:2b:5a:26:b8:40:cd:fc:94:d1:43:f7:09:3f:
         28:bd:63:55:7c:d1:9b:6e:07:c7:98:2d:18:6a:b8:f6:3c:d3:
         11:8a:17:87:41:59:29:a0:9f:b9:48:18:d9:9e:cb:20:ab:c2:
         88:1b:f9:ca:21:ff:b8:ce:de:15:61:a0:fc:17:b0:b7:0e:8f:
         7f:65:51:a5:b1:d9:38:ad:c5:9a:f7:c5:ee:33:9b:cd:a2:ad:
         06:f7:7d:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:16:53 2025 by rpki-client