Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa
File:                     509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa (raw, json)
Hash identifier:          2JtzYBrqfrw50sil355i7Pz/5RLYYzZLkGz7XogXPbo=
Subject key identifier:   D2:52:8C:73:F4:54:F8:01:D0:49:6C:E7:46:94:DE:CF:3C:50:F8:52
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C582018A794834848C66DDC0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:01:8a:79:48:34:84:8c:66:dd:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=eccf516d-ce4d-494e-b62e-285b44342888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8a:56:34:bb:39:16:4d:43:1c:d8:05:a1:4d:
                    7d:03:5d:f8:5e:fe:27:d5:22:7d:8f:47:fe:13:83:
                    85:4d:63:14:59:a5:ed:9e:61:ec:14:7f:b1:c6:fb:
                    63:d0:2d:5c:5e:6f:d8:04:9d:1c:1e:4b:d7:65:08:
                    93:cf:fa:68:ec:db:a7:4e:06:f6:bd:9e:a1:06:53:
                    1a:3d:87:4b:64:1f:65:f7:d6:43:2b:aa:01:ee:7e:
                    fb:8d:79:a0:10:07:c3:bf:1e:ec:1c:a1:47:92:d9:
                    5b:ea:b5:e6:bb:79:35:de:f2:24:1c:1a:30:9b:29:
                    22:38:54:a8:54:b4:c7:7a:ba:2f:0a:80:8c:24:49:
                    5a:b7:d2:4a:4f:60:b7:41:f7:d0:ca:c7:b3:60:8e:
                    30:80:4b:52:cf:de:2e:fb:7c:bc:85:9e:02:8c:3b:
                    ae:71:15:d7:cd:e4:06:86:ba:df:40:be:7b:51:aa:
                    68:91:a3:ec:53:74:72:99:5a:18:33:21:86:2c:98:
                    c4:23:62:2b:b2:33:83:56:3a:9d:c2:93:98:35:e4:
                    a0:49:8c:07:c2:d1:0b:75:95:57:18:84:77:83:1e:
                    b5:83:29:e5:5e:16:b1:96:7e:34:44:3c:f4:4c:e2:
                    87:15:54:88:f3:cb:c1:e0:ab:18:26:44:7c:f9:a9:
                    ec:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:52:8C:73:F4:54:F8:01:D0:49:6C:E7:46:94:DE:CF:3C:50:F8:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/509ad8ba-ddc0-3861-ae8b-b2a83a07b923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:8d:78:d1:b5:e1:41:c9:5a:f9:7a:19:9f:b7:ad:03:56:1e:
         ec:05:3d:01:00:70:2d:b0:cd:99:28:db:15:99:ad:db:69:17:
         2e:98:f0:72:34:d4:96:b1:65:2b:eb:96:fb:40:5f:27:24:47:
         3b:59:85:45:da:9b:7e:60:38:0f:7f:13:0f:a8:14:66:e9:66:
         0d:ac:08:d1:0c:c1:7d:9f:e9:f7:25:bf:ca:0b:8e:55:57:04:
         0b:08:9c:4f:b0:fb:4a:ef:5e:e4:a1:83:76:30:03:da:e3:09:
         c3:54:63:53:08:f6:86:be:0a:bf:d7:51:fe:48:d1:00:49:a3:
         67:bf:a4:6f:42:22:1b:4c:cb:15:f7:10:1b:66:ac:6c:b6:0b:
         e2:ca:6c:d5:a9:d9:7b:ef:89:ab:71:c9:5c:76:7c:76:cd:55:
         24:97:67:f0:89:2a:33:a7:8c:93:9e:81:0d:74:b1:32:9c:46:
         bf:4d:c5:c4:f2:42:5a:e6:57:60:fb:33:f1:53:44:f3:39:c0:
         2d:7c:00:12:b4:40:92:bc:e9:74:72:e9:14:ae:fb:58:45:74:
         d0:a2:d1:46:a5:c0:0f:9d:62:cc:fe:f1:bd:0b:73:a2:3f:e7:
         83:77:2e:fa:1e:89:9d:41:e3:bb:17:aa:24:b0:ad:d7:4e:28:
         64:94:d4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:11:55 2025 by rpki-client