Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
File:                     4bd7e0b7-2238-33c8-a229-20f0948809be.roa (raw, json)
Hash identifier:          Yz+1Xlj5HhD9gpr2cmQ+5WY1VfPLOcvRdFOoUMHNYrU=
Subject key identifier:   9F:F5:5C:C5:A3:95:BB:9F:15:EC:B9:5F:98:D7:F6:F9:14:D8:F6:A4
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F43285848547035EA7ABD00D9940B138C
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     3257
IP address blocks:        208.72.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:35:ea:7a:bd:00:d9:94:0b:13:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=17236944-1253-411c-919b-fa8522ae3543
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c1:e9:5e:d0:65:7f:55:1c:dd:f3:db:cf:fa:
                    45:20:16:fb:2d:1b:c5:c8:06:a2:19:05:5a:fa:58:
                    3f:12:c3:a6:b0:a1:cc:02:96:6c:90:19:5c:b0:de:
                    5d:3b:f2:79:0e:a4:d8:9a:7d:82:88:c4:60:68:d3:
                    10:96:64:f8:22:99:83:56:38:d0:15:33:db:92:b1:
                    f7:c2:0e:60:33:0f:9f:20:00:4c:64:cc:90:01:56:
                    5a:76:95:3a:14:dc:92:10:0d:1b:74:f8:06:1e:f0:
                    89:f7:73:88:51:f5:24:90:65:99:15:44:80:29:f3:
                    05:81:b9:5a:09:89:98:2b:42:33:7a:fd:e3:b5:55:
                    22:a8:65:4a:d5:77:1d:90:36:2c:e0:7a:61:27:d6:
                    42:49:ba:dc:47:bd:5f:a9:5b:85:dd:ad:5a:04:93:
                    4c:96:25:de:d4:3f:26:54:e7:a1:94:df:92:61:f5:
                    34:17:72:1d:61:5d:d6:89:72:f6:36:7f:cc:3b:8f:
                    24:ca:5e:e2:e9:91:29:c2:92:bd:b1:77:d1:d6:87:
                    c6:fd:67:3a:7d:2c:a4:ae:bd:1f:83:ba:6e:36:23:
                    00:d2:39:4d:35:d9:02:5a:e1:e6:46:b4:41:4f:aa:
                    68:8b:e0:a5:f7:a9:7a:bb:04:f0:db:2a:dd:f8:9d:
                    d1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F5:5C:C5:A3:95:BB:9F:15:EC:B9:5F:98:D7:F6:F9:14:D8:F6:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/4bd7e0b7-2238-33c8-a229-20f0948809be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.72.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:b1:1d:1a:a9:b2:07:55:fa:bb:aa:53:f5:e8:e2:dc:08:59:
         97:39:22:7e:fd:44:9c:0b:d7:b4:37:dd:99:d9:d6:38:54:88:
         34:d0:89:84:d0:aa:33:9d:3f:8b:c3:c6:c1:04:68:ad:4c:61:
         d5:ae:87:b0:fd:0a:64:f4:bc:9b:fc:cf:37:26:cd:5c:33:c5:
         ff:de:7d:e8:a2:f9:d1:b6:20:52:2b:6d:d2:61:09:f7:83:ec:
         d2:5d:a1:06:54:c5:92:bf:c2:c9:37:35:f7:d9:2d:ee:78:25:
         d4:20:08:1d:85:1f:10:65:d7:ac:72:c1:90:5a:26:d5:3b:36:
         db:46:66:26:94:e2:66:eb:ca:9d:b6:15:72:46:fc:9b:31:f4:
         13:be:80:0f:4f:28:7f:65:1d:75:22:f3:e0:68:df:28:e5:30:
         0f:8c:1e:d3:d7:a7:d1:3f:a4:2f:16:47:a7:01:34:3c:f7:5f:
         4d:b6:8a:8e:18:40:72:ae:79:bf:bf:95:c1:66:59:fc:64:85:
         b8:b7:02:de:a4:da:77:f9:4b:c1:fc:22:b3:a0:98:81:89:34:
         3f:3a:39:0b:4b:7d:cb:96:07:3e:8e:ca:31:87:35:55:f5:c8:
         d9:69:68:dd:26:09:3f:8f:14:6e:6f:81:a3:99:9c:64:ca:fe:
         11:40:2e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:26:58 2025 by rpki-client