Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
File:                     c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa (raw, json)
Hash identifier:          amgJA7hqujdNUxeSTOoiji9vnQ0oKHa+8okuIgn+nbA=
Subject key identifier:   F8:73:DE:23:6F:21:3E:4B:9F:1F:25:63:A8:86:26:AF:B6:C5:96:70
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F4328584A14655ED8F8B363C6FDDEDCAC
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     198949
IP address blocks:        208.56.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:5e:d8:f8:b3:63:c6:fd:de:dc:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=022f2ad3-a07f-417f-a452-119e236400a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8f:85:6e:8a:80:59:b7:b8:56:9c:7b:83:c6:
                    d7:35:79:67:cc:f5:49:3a:36:ac:62:70:2c:9f:6b:
                    95:c1:e0:38:b5:81:28:df:13:7d:79:38:91:90:67:
                    95:ac:49:ad:f0:9d:ee:4a:2c:a5:85:d4:c8:80:90:
                    ca:e3:27:dc:0e:53:a3:5d:08:42:e5:07:57:99:47:
                    60:9a:ba:65:e8:4d:21:6c:51:d2:c4:13:10:92:fc:
                    ab:b6:33:4b:fd:4a:fc:78:8e:b6:15:ed:18:a0:17:
                    b9:73:37:e8:1e:9b:a7:32:6e:62:5c:3b:06:e3:6a:
                    30:b1:80:87:29:b1:0c:a4:b4:3d:e3:ce:a3:14:16:
                    9c:bd:77:8a:c0:d3:4f:01:b2:dc:e6:7b:93:0d:2a:
                    b5:ae:75:70:e1:42:b4:bc:11:3d:8f:18:7f:0e:f2:
                    b5:51:71:8e:cc:b7:a9:88:79:b3:15:8f:80:2c:89:
                    cf:05:23:9a:de:42:ac:4b:ba:00:c0:67:ea:4d:08:
                    3f:6a:72:fe:b4:57:93:5e:b9:7e:0b:16:c2:3c:db:
                    e9:bc:aa:3c:b4:fd:fd:5d:92:62:0e:1e:0a:42:4c:
                    0f:d7:bb:91:14:67:f7:64:91:21:d5:ca:d9:2e:33:
                    2c:eb:64:d5:8c:d3:5b:66:96:91:5c:cd:9d:c8:85:
                    79:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:73:DE:23:6F:21:3E:4B:9F:1F:25:63:A8:86:26:AF:B6:C5:96:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:20:ba:b1:96:29:db:61:30:75:46:ab:49:0c:95:45:d7:71:
         ed:83:96:fd:ac:63:9f:8c:09:e2:c6:9d:4f:6d:e4:33:08:e5:
         05:83:28:6e:b3:2a:24:63:ae:2b:68:d0:8b:e0:5e:41:14:1a:
         e2:46:cf:9c:fc:4f:45:4d:99:65:6f:cc:39:2f:80:42:d2:2a:
         1f:fe:a6:b9:c2:9b:70:4e:9b:f1:56:35:e6:3b:ec:2f:d2:84:
         0c:2a:cf:63:98:6e:ae:c2:6d:8b:4d:a8:42:86:f2:ac:f2:71:
         cf:28:24:bf:27:b9:22:3e:d9:0a:25:50:2b:20:7e:a5:58:81:
         c2:1d:64:80:69:c1:4b:30:b3:49:7f:87:2e:84:eb:f5:24:6c:
         77:3d:35:61:e2:57:7b:41:7a:00:72:23:d3:ab:2f:5f:dd:e0:
         e3:c8:17:64:e5:02:af:2c:a1:4b:6b:56:bf:8b:18:10:f5:b5:
         07:80:81:b9:ab:17:fe:2d:95:a8:e0:54:36:03:a4:e0:42:9b:
         29:49:dc:75:2a:2b:fe:a8:d3:0f:ff:0b:53:d2:ef:3c:4c:5b:
         aa:f1:46:0b:79:35:a9:d1:52:98:b5:3a:15:49:4f:19:13:2f:
         29:8c:ab:67:bd:7d:01:e7:a0:01:04:c5:8a:dd:4e:08:64:cd:
         fa:93:d6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:39:10 2025 by rpki-client