Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
File:                     1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa (raw, json)
Hash identifier:          gFGeMZKDFzpt3JUjcxE4hBtNtYqRbn2IbX5zhX0Lx8Q=
Subject key identifier:   8E:71:80:F7:40:B9:A8:0D:5B:65:8B:B4:59:B7:03:ED:9C:65:B6:31
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584819CFD9296EFB2CFFA0522CC0
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     834
IP address blocks:        199.255.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:d9:29:6e:fb:2c:ff:a0:52:2c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=9aa4c823-4992-4f15-81ea-f7225d129778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a5:39:a5:d2:bb:bd:75:af:10:58:8c:5d:6e:
                    18:6f:b1:50:84:5a:3b:ac:2f:68:a2:e9:5b:16:84:
                    61:d3:9a:94:b9:d6:59:dc:f5:e8:f2:76:de:3b:80:
                    b5:52:e0:e9:65:e3:7b:f0:fc:b0:f2:2a:b7:10:29:
                    44:c1:96:de:8c:f2:41:7d:65:ee:e6:43:f4:99:a3:
                    86:23:e8:30:f6:2a:ef:0f:42:82:87:08:21:c2:97:
                    71:eb:76:85:3a:5d:9a:de:24:78:e6:63:a9:33:61:
                    fd:e6:16:9b:09:68:49:47:a0:53:3f:28:a9:7c:f7:
                    84:f4:4b:04:31:cd:d4:7f:90:5a:90:8c:1d:e2:fc:
                    bd:7e:07:68:68:dc:69:3b:f2:7d:bb:5c:4c:aa:ce:
                    2e:3a:2e:8c:99:87:61:a1:79:9d:45:96:2b:b1:1c:
                    25:c3:1d:7d:ba:fd:73:9f:a8:53:18:d4:49:fe:e7:
                    88:4c:76:65:5f:55:68:2d:6a:71:ea:cc:73:c5:4e:
                    e2:5c:f2:72:cd:f2:e8:02:c6:d8:a3:af:97:fe:0f:
                    54:e7:16:88:1c:0a:b2:ba:33:08:9c:03:a0:f8:2c:
                    11:73:93:79:93:2f:23:1e:8d:c4:a7:a2:09:b5:50:
                    ae:b7:8c:55:7b:07:e2:66:73:8f:05:e6:5d:8d:68:
                    ef:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:71:80:F7:40:B9:A8:0D:5B:65:8B:B4:59:B7:03:ED:9C:65:B6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/1cecd198-c1e8-34a8-af12-aeb52c5d99e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:a5:94:05:d7:f2:03:c6:31:d0:18:f9:f2:51:a8:2d:77:0d:
         ef:92:09:03:62:d4:72:52:19:1f:6e:0a:b6:95:2e:ec:94:e9:
         3c:f5:a6:80:4d:1d:31:41:ea:89:73:cb:2b:91:c8:b3:67:79:
         3a:05:b1:8c:72:dc:12:1c:5e:5e:e0:c2:d3:d5:62:b0:48:e7:
         35:ec:39:ec:9f:94:9c:1b:58:9b:a5:d8:44:6e:c7:93:6f:e7:
         35:08:b7:da:95:74:bb:f8:24:c7:71:14:cf:54:21:e8:dd:5e:
         52:04:a8:65:13:94:9e:5e:43:ac:4a:63:fd:df:50:a6:39:a2:
         c4:1f:c6:87:81:1c:8b:8f:c3:28:d4:5c:cb:fb:69:8e:bb:9b:
         57:6b:ea:73:7f:57:b3:41:0b:5a:0f:30:bf:67:02:0c:70:23:
         01:cc:77:2f:03:15:e3:07:7d:12:77:36:1d:3d:ab:27:e1:be:
         57:1f:b2:0f:e9:15:ba:f5:e7:07:9e:9a:26:d8:1b:c4:30:6c:
         a8:4a:8e:ab:aa:6a:de:38:21:51:91:16:ef:26:ab:f6:53:1d:
         c3:f4:54:0b:0d:87:c0:ed:6c:35:7f:17:52:4f:f1:4c:69:72:
         4e:bd:c7:d8:87:2a:dc:b0:b2:af:6e:23:f7:02:a2:7f:d4:93:
         e8:5d:c2:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:04:17 2025 by rpki-client