Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa
File:                     2616d4aa-ec50-3d87-b194-27405fbc8db0.roa (raw, json)
Hash identifier:          AQ+DN+H+Q5iCDtAy8MA8xYjQC9m9fWNolkZznjz50P8=
Subject key identifier:   2A:EA:C9:35:2C:DE:6E:36:29:37:9A:89:02:9B:D9:DA:45:01:F6:9F
Certificate issuer:       /CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
Certificate serial:       010D0C9F432858496CE45351DBCF47C5F1A7AC00
Authority key identifier: 05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa
Signing time:             Sat 05 Apr 2025 13:01:01 +0000
ROA not before:           Sat 05 Apr 2025 13:01:01 +0000
ROA not after:            Fri 04 Jul 2025 13:01:01 +0000
asID:                     2914
IP address blocks:        208.80.248.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6c:e4:53:51:db:cf:47:c5:f1:a7:ac:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a2da7b3-d208-42c7-8bbb-c063a39470a8
        Validity
            Not Before: Apr  5 13:01:01 2025 GMT
            Not After : Jul  4 13:01:01 2025 GMT
        Subject: CN=1f884b8f-be5d-42e1-8669-264e1c15d731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:34:0d:c4:ee:97:60:05:d1:e0:f8:a4:18:25:
                    aa:69:01:0d:5b:57:d6:f8:ed:05:19:05:f8:a8:f6:
                    07:a6:e1:1a:64:7f:67:dd:26:f5:f2:5b:aa:f5:4d:
                    e5:df:18:00:f5:f7:9d:ac:b4:3c:8a:b3:98:7b:0e:
                    12:e7:ba:b9:f3:45:d4:4b:e8:7e:54:0d:da:b1:c2:
                    6d:26:dc:ee:01:40:02:95:1f:46:dc:18:4d:63:db:
                    2a:ae:80:6e:15:21:a9:20:f0:66:80:fb:ed:ae:37:
                    71:08:04:c2:00:9f:4c:2f:f2:dd:07:bd:a1:4c:77:
                    1a:dd:17:ea:ff:5a:6d:00:c0:82:61:af:3c:99:41:
                    e9:b3:f2:5c:5d:dd:16:1e:c2:40:d7:01:7f:b9:ba:
                    35:10:6c:97:cb:04:2d:5a:ba:0a:25:58:7d:01:c2:
                    64:b0:3e:6d:a3:d2:c7:1c:21:b8:da:94:32:19:88:
                    32:55:b4:f1:7a:b9:ae:d0:46:e1:11:24:0c:ba:a5:
                    56:a2:31:d0:81:48:04:1e:a4:d4:d5:08:50:47:1f:
                    d8:22:8e:7e:b9:ce:2f:42:de:e3:c0:20:91:fc:6c:
                    18:9d:d7:f8:88:84:17:65:d5:86:7b:70:6f:97:c8:
                    5e:cc:1e:64:8e:3a:f8:5c:94:29:57:79:3f:4b:e5:
                    c6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:EA:C9:35:2C:DE:6E:36:29:37:9A:89:02:9B:D9:DA:45:01:F6:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/2616d4aa-ec50-3d87-b194-27405fbc8db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.crl

            X509v3 Authority Key Identifier:
                keyid:05:35:2D:CE:C5:A6:2F:C9:7A:3E:67:4A:01:19:69:FF:43:31:E9:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8a2da7b3-d208-42c7-8bbb-c063a39470a8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.248.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:3b:f8:00:84:40:06:2c:57:00:e4:21:67:8e:d7:62:5a:e9:
         fa:e9:40:e8:eb:44:6c:d1:74:7a:a7:af:97:8e:2d:4f:b6:e3:
         0c:94:b6:bb:f2:af:11:ac:77:21:ed:22:18:0b:a9:8d:da:b8:
         d0:2d:67:6c:b7:89:59:93:37:4e:63:dc:bb:9b:8c:f2:11:f3:
         09:c4:c0:ab:55:c6:cf:40:98:1c:94:9f:07:2e:f4:28:f7:92:
         2e:0d:1a:c1:15:a2:87:f6:7f:0e:e5:9b:3d:54:8a:08:52:09:
         ca:81:ef:5d:15:5a:7b:91:3a:55:ff:2b:d3:13:a8:ae:a2:a7:
         af:12:31:15:63:50:15:6b:11:a2:7e:3e:a2:ff:43:0b:d4:f9:
         70:52:86:2c:92:29:d4:7f:03:c7:78:3d:b7:12:28:dc:e6:6f:
         bc:5e:06:77:a5:03:7a:a7:b6:f3:d1:bf:35:fd:af:7d:be:56:
         9d:00:74:cc:2e:92:37:3d:4a:8b:75:68:67:1d:bd:41:a8:b1:
         aa:b8:f0:cb:d4:d7:d8:c2:6d:49:25:a1:00:3a:3a:4c:9a:7c:
         09:22:18:2b:a3:78:6e:1c:b7:cb:db:7c:4f:f5:e9:b0:13:eb:
         9a:41:d0:4e:9f:93:8a:16:26:10:52:ec:f3:b3:95:7f:2e:b4:
         b5:e9:47:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEls5FNR289HxfGnrAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGEyZGE3YjMtZDIwOC00MmM3LThiYmItYzA2M2EzOTQ3
MGE4MB4XDTI1MDQwNTEzMDEwMVoXDTI1MDcwNDEzMDEwMVowLzEtMCsGA1UEAxMk
MWY4ODRiOGYtYmU1ZC00MmUxLTg2NjktMjY0ZTFjMTVkNzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzQNxO6XYAXR4PikGCWqaQENW1fW+O0FGQX4
qPYHpuEaZH9n3Sb18luq9U3l3xgA9fedrLQ8irOYew4S57q580XUS+h+VA3ascJt
JtzuAUAClR9G3BhNY9sqroBuFSGpIPBmgPvtrjdxCATCAJ9ML/LdB72hTHca3Rfq
/1ptAMCCYa88mUHps/JcXd0WHsJA1wF/ubo1EGyXywQtWroKJVh9AcJksD5to9LH
HCG42pQyGYgyVbTxermu0EbhESQMuqVWojHQgUgEHqTU1QhQRx/YIo5+uc4vQt7j
wCCR/GwYndf4iIQXZdWGe3Bvl8hezB5kjjr4XJQpV3k/S+XGZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrqyTUs3m42KTeaiQKb2dpFAfafMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84YTJk
YTdiMy1kMjA4LTQyYzctOGJiYi1jMDYzYTM5NDcwYTgvMjYxNmQ0YWEtZWM1MC0z
ZDg3LWIxOTQtMjc0MDVmYmM4ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOGEyZGE3YjMtZDIwOC00MmM3LThi
YmItYzA2M2EzOTQ3MGE4LzhhMmRhN2IzLWQyMDgtNDJjNy04YmJiLWMwNjNhMzk0
NzBhOC5jcmwwHwYDVR0jBBgwFoAUBTUtzsWmL8l6PmdKARlp/0Mx6RYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84YTJkYTdiMy1kMjA4LTQyYzctOGJiYi1jMDYz
YTM5NDcwYTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FD4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG47+ACEQAYsVwDkIWeO12Ja6frpQOjrRGzRdHqnr5eOLU+24wyUtrvy
rxGsdyHtIhgLqY3auNAtZ2y3iVmTN05j3LubjPIR8wnEwKtVxs9AmByUnwcu9Cj3
ki4NGsEVoof2fw7lmz1UighSCcqB710VWnuROlX/K9MTqK6ip68SMRVjUBVrEaJ+
PqL/QwvU+XBShiySKdR/A8d4PbcSKNzmb7xeBnelA3qntvPRvzX9r32+Vp0AdMwu
kjc9Sot1aGcdvUGosaq48MvU19jCbUkloQA6OkyafAkiGCujeG4ct8vbfE/16bAT
65pB0E6fk4oWJhBS7POzlX8utLXpR+E=
-----END CERTIFICATE-----
Generated at Sat Apr 12 07:55:08 2025 by rpki-client