Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa
File:                     a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa (raw, json)
Hash identifier:          1M60alGHHdo7F4LzMn1Q4QO4m7RT1cbYgyRvuwBsdPc=
Subject key identifier:   09:A0:D7:72:D6:84:2F:AB:E3:2E:CC:97:DB:56:34:27:5C:57:FF:6C
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F43285848C58217EBF1E7C4C1FDF33280
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     36040
IP address blocks:        208.117.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:82:17:eb:f1:e7:c4:c1:fd:f3:32:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=336444d6-d6e8-46c9-9cc6-5e074d620b79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:92:07:18:0a:89:29:f0:5f:dc:81:a1:fd:14:
                    a8:2b:33:b7:98:55:87:3c:ee:43:b5:df:dd:f6:9a:
                    27:40:8d:62:b3:44:26:76:af:7b:cb:4d:50:27:7d:
                    03:0e:1e:c0:62:4e:a4:3e:e9:82:d1:e3:b6:26:71:
                    9d:ff:da:d9:5b:bf:ce:77:1e:f5:57:f4:d2:fa:4f:
                    be:15:bd:4d:45:00:26:a2:9a:00:9a:86:e8:b9:ab:
                    b1:ca:53:c9:55:fb:bc:c8:bf:3b:f8:6f:85:ac:3b:
                    bc:9a:ce:ee:1a:df:2a:cc:92:19:a2:c5:3d:f2:44:
                    71:99:c3:bf:45:c4:80:3c:31:42:cf:17:d0:ea:0b:
                    90:c1:03:f3:29:81:6c:af:fd:77:39:e8:d9:1f:ad:
                    9c:83:5d:08:1c:79:2c:94:90:5c:7a:9e:97:f4:92:
                    63:5f:dc:de:fe:9e:ec:ed:ef:30:02:b0:c3:f7:74:
                    f5:80:29:d7:cd:c0:8d:cb:f7:2f:c1:b0:e6:e7:8f:
                    56:c8:3d:67:a7:0c:11:2d:14:76:f8:1d:74:de:ca:
                    86:99:9c:b7:ad:f6:58:bf:f3:d8:85:36:3c:9d:56:
                    17:5a:a4:08:ae:4a:df:7d:fe:b6:9f:f5:f3:1b:25:
                    01:8f:74:fb:25:8a:88:5f:a7:1c:61:10:4b:2a:57:
                    a6:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:A0:D7:72:D6:84:2F:AB:E3:2E:CC:97:DB:56:34:27:5C:57:FF:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/a0155e39-69f6-3fa2-87cc-c4ab230cbb72.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:06:6f:21:c6:ed:52:63:c0:d0:f3:4a:55:26:ca:c8:02:ea:
         da:15:3f:04:19:f6:29:63:9d:9f:86:51:e3:06:b9:7e:27:8b:
         ac:c5:b2:1f:48:fd:ac:72:0c:bd:b2:b8:e6:27:8e:41:db:7c:
         e1:4b:9d:5d:0a:20:3b:39:8d:a0:3d:4c:63:c5:de:cb:68:00:
         2e:f5:2b:b1:d4:38:d6:30:df:5a:d1:dc:f5:d7:97:dd:8d:44:
         c9:6a:93:62:41:1c:96:9f:ac:20:ed:df:b3:2e:0a:e5:16:ac:
         08:0f:a1:d5:6a:ea:a4:00:ba:36:36:0c:01:86:91:0c:8f:10:
         81:1e:df:81:c7:22:60:77:67:d1:2c:da:7a:59:f8:a9:bf:97:
         43:7f:17:18:46:29:eb:8d:4e:7c:d7:44:3e:c3:7e:e8:3b:30:
         42:f9:e9:6b:32:04:74:0a:28:1a:fe:c8:2e:5d:9c:f4:77:e0:
         dd:f0:2d:e4:d7:4c:5e:e8:c5:40:80:cb:c3:9c:3d:6d:69:8c:
         2a:fd:72:17:a8:a5:22:fd:eb:e5:38:a3:55:d5:16:1c:53:23:
         42:17:d5:38:94:58:81:c2:f3:a3:1b:fb:16:c6:0c:93:7b:6b:
         8a:dc:d2:3b:11:7d:01:30:c3:04:e4:22:03:18:28:b3:71:c2:
         c8:27:2c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:39:08 2025 by rpki-client