Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0e8b3405-12b4-37a1-8459-306a060a5fb1.roa
File:                     0e8b3405-12b4-37a1-8459-306a060a5fb1.roa (raw, json)
Hash identifier:          fqriUTfq7xjGZedy69HWGOiSaDCaE4jes8AHy3qyVLw=
Subject key identifier:   7C:B6:47:BB:79:3E:D4:58:C9:1B:47:00:E6:6F:F0:4B:BD:9B:5D:BC
Certificate issuer:       /CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
Certificate serial:       010D0C9F43285849287E6E1D2704560FEFA33800
Authority key identifier: 19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0e8b3405-12b4-37a1-8459-306a060a5fb1.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     7018
IP address blocks:        208.93.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6e:1d:27:04:56:0f:ef:a3:38:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20defc99-73f1-4ccf-93ff-ac08b7301a18
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=5b7dee68-4bcd-4b07-a1b6-051e0612bd87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:92:3e:5f:fa:e2:ad:74:cb:ca:78:e1:2b:
                    e3:d3:00:f5:cc:02:51:60:a7:ee:69:45:83:cf:b6:
                    e0:8c:c4:a3:43:d5:be:a8:45:75:de:9b:9b:87:c4:
                    8c:76:10:05:a5:7e:fd:7f:47:d1:6b:8e:dd:87:8f:
                    39:53:5e:b9:13:40:ca:ca:52:29:df:42:81:6d:2d:
                    63:b5:b7:11:28:c2:b8:a9:16:43:ea:2b:cf:53:2a:
                    16:5e:92:0c:7c:b5:a2:ab:b8:00:80:42:ab:62:e8:
                    5f:25:9c:9b:75:9d:65:d9:d8:21:2f:9a:67:57:63:
                    3e:13:fc:af:a0:73:50:60:0e:51:ec:27:07:c1:0d:
                    d6:13:03:14:57:69:50:50:56:a0:3a:ca:7e:3c:9b:
                    fc:0d:68:91:f6:01:97:69:e0:06:60:d3:ba:74:71:
                    93:cf:51:bb:b6:e6:48:5c:b0:6e:45:51:7e:87:4a:
                    74:6c:ba:0c:2c:a6:b8:f4:f6:ab:e5:65:35:36:95:
                    14:17:70:3e:ee:6e:98:7f:2f:88:ec:3a:17:4a:ad:
                    5e:83:55:09:d7:5d:99:6f:8b:af:da:47:c5:7a:39:
                    c5:6d:da:d0:46:f1:60:c4:46:d4:5c:98:d9:da:58:
                    c3:fe:f9:02:e9:f8:6d:f2:ec:b2:de:af:5d:82:4c:
                    a4:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B6:47:BB:79:3E:D4:58:C9:1B:47:00:E6:6F:F0:4B:BD:9B:5D:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/0e8b3405-12b4-37a1-8459-306a060a5fb1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18/20defc99-73f1-4ccf-93ff-ac08b7301a18.crl

            X509v3 Authority Key Identifier:
                keyid:19:52:F4:3C:BD:DA:D0:41:D8:6F:9A:EA:9A:E8:5C:4C:55:4D:78:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20defc99-73f1-4ccf-93ff-ac08b7301a18.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.93.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:64:cf:ab:46:df:c9:f5:51:6c:64:d3:18:8f:cc:8c:ab:41:
         51:dd:33:d2:12:10:14:9c:8a:a6:93:68:6b:d3:b2:46:bc:9c:
         6e:ca:25:da:5b:e0:68:44:19:94:a8:1a:27:49:08:6e:49:c9:
         e4:e8:0c:7d:ba:6b:cf:ff:5d:7d:bc:6e:63:b9:68:28:78:34:
         12:44:7c:28:ec:da:5b:4c:9e:85:9a:7f:d9:3c:68:04:a6:93:
         d6:d4:c9:29:7e:b9:f4:67:34:eb:37:e1:cd:32:50:24:69:2c:
         47:49:ee:02:95:35:a9:c0:6d:52:12:bc:80:34:c0:4b:42:78:
         9e:db:6e:9b:48:c9:84:d8:93:6e:35:81:05:7c:37:c4:59:e8:
         2b:03:09:23:91:c3:16:3a:da:d7:b9:c6:da:7f:cf:92:ef:9c:
         31:1d:98:7e:6a:e3:d9:27:4b:f0:b5:92:41:e4:be:5e:5a:c4:
         d4:56:23:23:0c:67:a3:00:29:90:f2:53:7c:d5:2a:88:8a:09:
         6d:00:b8:bb:80:d9:45:1d:60:f8:fd:05:89:f0:d5:5b:19:ff:
         26:e5:3e:02:39:3e:79:dd:34:01:fb:fb:4d:6e:30:51:34:a8:
         1e:83:8c:d0:9a:47:3b:b7:1e:8d:26:39:37:ba:e4:55:34:2f:
         f1:bb:25:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 21:40:30 2025 by rpki-client