Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa
File:                     2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa (raw, json)
Hash identifier:          PJPSMwNCY/ASfWLhlFmnnFj3Ps41DBkdZqPHkkeeWIM=
Subject key identifier:   1F:0D:68:EA:56:A0:28:A0:1F:18:04:53:E5:94:5A:E3:FF:BE:7A:61
Certificate issuer:       /CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
Certificate serial:       010D0C9F4328584957F3F552B3F8151DB8FA1B00
Authority key identifier: C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     395540
IP address blocks:        216.40.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:f5:52:b3:f8:15:1d:b8:fa:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0c27bc55-b041-47cd-84eb-f3e9707acff1
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=11c1560f-c266-4dfa-8be7-876199718a20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:dd:5b:68:5e:d8:a6:d6:28:e3:39:36:2d:30:
                    e4:7f:60:5d:91:4e:62:1b:46:17:61:65:ca:66:eb:
                    08:0d:55:32:20:68:dc:80:f2:56:76:a7:41:3d:7c:
                    58:b5:fc:6a:c0:8e:10:37:a1:18:f3:c2:41:9a:ca:
                    6a:f6:96:25:39:1f:22:01:ea:b8:5d:95:49:70:79:
                    32:a7:c6:aa:33:18:75:e1:e5:1f:91:d5:b3:9d:10:
                    19:b9:e0:f2:f1:ea:75:a5:81:46:3e:4d:9b:de:84:
                    5c:fc:bc:fb:3b:38:b3:96:75:3e:59:4a:0a:8a:6a:
                    4c:d9:f4:aa:c0:86:76:9d:4b:e1:04:ea:26:c7:90:
                    ed:14:9e:51:43:7f:0a:56:e2:7b:3b:e0:22:72:8a:
                    9c:14:50:ed:df:0a:16:d2:79:be:54:a2:4a:fa:11:
                    66:6c:ff:e7:2d:67:34:5f:16:6b:33:9b:f6:3f:1b:
                    3a:b6:9e:9f:32:cd:eb:c6:5c:ee:18:36:4a:97:12:
                    c9:9e:e3:fc:3e:af:8f:62:e0:ca:f1:2c:5b:3c:67:
                    d3:bb:d3:54:e3:e3:1c:19:84:29:e8:aa:7c:93:26:
                    e6:f1:36:40:35:9d:13:00:08:01:e3:db:6c:e7:74:
                    e4:b0:40:e6:da:c8:71:f3:41:e6:ee:f1:e0:8a:97:
                    63:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:68:EA:56:A0:28:A0:1F:18:04:53:E5:94:5A:E3:FF:BE:7A:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/2b51a4ee-3bfa-39cf-a22a-cfa10b8cb9c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1/0c27bc55-b041-47cd-84eb-f3e9707acff1.crl

            X509v3 Authority Key Identifier:
                keyid:C4:66:0D:F9:F3:C6:DF:78:8B:57:44:BF:7F:5C:9E:CC:D9:36:06:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0c27bc55-b041-47cd-84eb-f3e9707acff1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.40.18.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3d:cb:36:28:9e:1e:89:38:61:ed:f7:d2:f4:17:ba:d6:e8:
         09:55:c3:1e:fa:9b:4c:c2:4c:4b:94:91:5a:0e:5d:ef:af:e9:
         57:14:41:86:4e:bb:c9:28:fa:66:88:dd:0f:f6:ea:b1:3b:be:
         85:ce:cd:a3:5d:7e:f1:ae:bc:26:be:25:39:aa:a0:5f:57:c8:
         88:f3:33:c1:d2:ac:d3:6a:fd:0c:7d:e8:16:be:4c:33:f8:bc:
         72:31:b3:60:1d:f4:d6:d8:84:79:64:25:c0:a0:ae:bb:cc:29:
         68:8c:23:3d:a2:bb:4e:38:c0:45:95:eb:b1:f7:c6:6f:b5:a5:
         18:13:37:70:f7:e1:09:a7:77:9e:7e:b5:bb:c8:0e:5e:ab:38:
         88:b5:88:29:fb:a0:b8:3d:d0:5f:68:70:aa:02:5e:0b:b5:a5:
         69:2a:c2:07:aa:b3:8f:90:17:94:a1:d6:44:14:bf:a6:79:d8:
         ff:54:c3:cc:53:2f:3c:87:11:46:72:ab:c1:3f:58:4f:99:47:
         c2:23:56:bf:8e:39:fc:62:b6:a9:e8:dc:b4:b1:90:a8:b4:05:
         d1:8b:c5:f8:1b:87:30:b8:08:c6:98:33:5a:9e:66:ee:84:aa:
         75:41:8c:3f:2a:4f:27:30:dc:57:b6:f9:83:4b:27:b9:9c:93:
         32:64:45:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:47:02 2025 by rpki-client