Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
File:                     c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa (raw, json)
Hash identifier:          1Oib6ZPi8vMmj10AgqJxbbPFxO9mfGtSwPh9VWEi+Qs=
Subject key identifier:   78:A9:D1:B8:C5:1F:5A:8F:F8:72:3E:AC:09:27:64:43:81:65:DE:AC
Certificate issuer:       /CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
Certificate serial:       010D0C9F43285848547022F0B8D5CAB79F157EC0
Authority key identifier: AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa
Signing time:             Thu 26 Dec 2024 02:00:40 +0000
ROA not before:           Thu 26 Dec 2024 02:00:40 +0000
ROA not after:            Wed 26 Mar 2025 01:00:40 +0000
asID:                     198949
IP address blocks:        208.56.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:54:70:22:f0:b8:d5:ca:b7:9f:15:7e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a71ff392-dd33-4ea8-9c1b-8afdd429977f
        Validity
            Not Before: Dec 26 02:00:40 2024 GMT
            Not After : Mar 26 01:00:40 2025 GMT
        Subject: CN=a90cfe2c-023c-4325-ad62-2e062a906312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:7c:c5:2e:82:6f:79:2d:8b:29:e0:fb:a0:ab:
                    16:5e:8c:f9:fd:0f:08:68:00:07:1d:20:11:df:5f:
                    1b:9b:27:70:29:df:bc:0b:a5:4f:cc:64:0e:05:bb:
                    7c:b9:91:21:4d:55:9f:b6:13:49:f1:89:86:d1:6c:
                    27:bd:bf:15:2f:4a:09:a4:3f:53:00:0d:62:e3:de:
                    de:b5:3b:d3:05:e3:0c:12:55:b6:28:08:4d:62:39:
                    fd:98:19:f9:5e:86:20:82:fd:1b:59:87:50:e7:5a:
                    a9:88:d7:12:59:30:ad:e0:1a:16:de:87:36:83:3c:
                    07:35:73:a5:c0:0d:33:1d:21:3a:5c:d5:a5:64:e1:
                    c2:0e:00:e0:e0:3d:e2:3a:17:fd:08:bc:78:f9:39:
                    6e:cc:74:86:a9:96:0e:ad:ca:21:8a:13:13:68:d9:
                    0d:53:cc:c8:27:8b:72:42:2e:02:16:8b:8a:80:6d:
                    2e:88:04:9b:d3:d8:94:7a:16:a3:a3:9f:cf:45:06:
                    a7:75:75:d0:1d:da:90:2c:44:69:f3:7f:97:c8:de:
                    49:a2:f1:5a:f2:75:b0:69:5b:d7:2a:3e:e9:74:e6:
                    a3:94:73:5e:63:e0:5c:e4:fc:df:85:0d:bd:73:7d:
                    9d:44:38:8c:15:61:99:3e:b2:19:c8:3c:81:ca:c0:
                    96:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:A9:D1:B8:C5:1F:5A:8F:F8:72:3E:AC:09:27:64:43:81:65:DE:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/c51ded5f-6e5d-35eb-81c1-4817e3b3e09f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f/a71ff392-dd33-4ea8-9c1b-8afdd429977f.crl

            X509v3 Authority Key Identifier:
                keyid:AE:49:C9:50:6D:AE:50:96:F3:EB:6A:26:99:EA:18:3D:74:70:F1:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a71ff392-dd33-4ea8-9c1b-8afdd429977f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:11:9e:3a:57:e6:e5:d3:db:43:b0:98:51:ac:8c:95:a0:d6:
         4c:30:d4:ca:e2:1d:88:7c:95:15:d1:b5:a3:f8:1d:f9:99:fc:
         63:40:79:83:c6:aa:82:9e:a8:df:4d:e5:1d:bd:0e:f7:a8:69:
         34:42:d3:e4:19:5b:a2:3a:44:b1:27:13:93:ec:e9:0f:c3:89:
         55:1d:f5:bb:eb:06:9f:60:3a:75:11:66:c3:5a:f9:90:8e:f1:
         ab:b9:77:3d:c6:26:fb:7a:ee:d2:0c:6a:a2:91:be:1e:44:e9:
         d8:f4:83:8b:e0:89:6e:31:35:9d:e4:91:32:8d:8e:21:b2:ba:
         cd:f9:d1:a5:5e:bb:bb:09:fb:e9:4a:26:0d:d3:03:77:2b:f7:
         96:76:b5:a5:1e:60:cd:c9:06:c3:de:e5:4f:1d:30:18:86:b6:
         74:7e:5e:84:6b:68:d8:f8:40:b9:90:e4:50:c4:8d:33:c6:88:
         3e:48:2f:21:8d:14:fe:7f:3c:ce:a8:57:61:13:6c:35:66:07:
         92:a4:9f:56:2b:b5:a5:31:27:c3:28:b9:a2:41:98:86:b7:4e:
         8b:8c:fd:85:78:08:63:24:76:4c:9d:f2:65:16:9e:f5:58:9b:
         2d:4b:d7:b2:b6:30:54:9b:f8:67:33:d9:f3:8b:82:f2:30:d2:
         54:43:2e:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:17 2025 by rpki-client