Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0f55fd5a-3541-3ec7-a2f8-10a23ab12ad0.roa
File:                     0f55fd5a-3541-3ec7-a2f8-10a23ab12ad0.roa (raw, json)
Hash identifier:          LOT6nTSXCqN4VowkOf95ALxKyZ6j5gjkir4wDBmLPFo=
Subject key identifier:   9B:01:F1:99:0D:9B:5A:28:85:92:B1:B9:C7:E0:D3:DE:31:DC:9A:3D
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C581895D298EF8F8833D1A00
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0f55fd5a-3541-3ec7-a2f8-10a23ab12ad0.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.248.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:89:5d:29:8e:f8:f8:83:3d:1a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=480a09ff-7e65-4350-bd3f-236e6ea0a705
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d5:43:80:24:db:69:c8:3c:87:17:4e:c8:b8:
                    83:ff:75:30:8d:fe:53:ee:c5:a2:ee:cd:aa:4a:70:
                    b2:0f:9b:e5:2e:41:40:51:ab:b7:7c:fd:49:dd:90:
                    4a:1a:b3:be:4b:ac:8d:fc:ad:7a:a3:66:6e:19:34:
                    5e:0a:aa:0b:c3:37:77:d4:11:5e:e6:17:68:4f:2c:
                    8f:c6:3a:d1:5a:63:4a:fa:4d:1b:3b:0a:08:09:d1:
                    38:08:6b:e3:39:87:a2:aa:3d:e9:ca:08:c8:fe:77:
                    6f:fd:ee:03:e9:43:b5:e7:78:48:e5:1d:dd:28:88:
                    ef:28:2c:77:09:16:46:fb:c2:3d:f5:9a:48:f8:68:
                    31:81:88:f7:5b:2a:82:80:3b:9a:fa:6c:7b:80:4a:
                    7f:8a:df:58:4f:b2:9d:28:49:f7:a4:13:53:12:f3:
                    ed:8d:4c:2a:c0:48:27:e9:eb:12:90:e9:cc:7e:88:
                    74:04:d2:e9:e5:84:a2:66:d9:14:a1:05:39:c0:70:
                    e3:8a:d1:d4:93:99:ac:14:b9:e6:c9:f3:88:08:d2:
                    71:68:32:13:ca:d8:7c:b1:0f:45:dc:15:79:6a:ae:
                    76:db:b9:2d:a2:97:7c:3f:88:ad:bd:fc:3d:5d:db:
                    14:79:a4:64:3c:15:7f:12:68:7c:ac:94:05:97:e6:
                    14:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:01:F1:99:0D:9B:5A:28:85:92:B1:B9:C7:E0:D3:DE:31:DC:9A:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/0f55fd5a-3541-3ec7-a2f8-10a23ab12ad0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.248.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:cd:83:56:e7:70:3d:25:34:7b:b1:49:d5:2d:da:ef:ed:3d:
         ab:76:24:45:d2:8c:c1:d6:7b:3d:ba:13:72:62:a2:2d:6e:7e:
         f6:0f:3e:99:9e:8b:10:bc:4a:7f:87:0b:cc:83:1e:7c:31:55:
         6b:69:8e:45:7d:eb:37:3a:d9:8d:30:82:b3:79:f5:fd:65:b8:
         1b:92:b2:70:da:68:21:a5:03:b5:4f:5f:e9:2a:eb:e9:84:52:
         d9:15:6d:b5:a7:2c:36:c0:59:45:ba:f5:41:d9:7e:47:9a:03:
         75:f3:ce:66:c7:50:e1:07:78:d7:43:6e:06:0a:ac:a1:cf:57:
         45:ec:2b:49:8a:2d:16:02:88:08:fd:fd:07:46:c7:ab:62:fa:
         e2:19:4d:3a:c9:73:9f:7f:a6:9c:af:fb:d1:f2:15:4b:a2:f0:
         2a:d2:73:3d:a0:37:ac:42:74:94:5f:0d:40:64:db:8f:6e:15:
         11:84:2f:8f:ea:fd:ee:4a:7e:4e:19:a8:ae:79:fa:9a:c2:6a:
         9f:c9:85:1a:54:55:67:88:45:5e:fa:11:56:0c:89:ef:cd:30:
         32:eb:8b:8a:51:73:65:a9:b5:ee:b1:61:f2:e6:8e:30:34:ee:
         41:0f:bb:af:c1:b5:30:53:0b:55:36:8e:41:51:85:85:ab:1f:
         4c:e5:b4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:49 2025 by rpki-client