Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
File:                     73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa (raw, json)
Hash identifier:          MuI+zRzuu6rYRQ5F8hAf81ZEPJHszY0M+rucVd3b+f0=
Subject key identifier:   70:40:C1:E7:45:08:35:27:D5:BC:2E:A6:1F:3C:BB:10:25:A5:37:48
Certificate issuer:       /CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
Certificate serial:       010D0C9F432858493AA3D9927992CDDF18507040
Authority key identifier: 2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     998
IP address blocks:        208.94.140.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:d9:92:79:92:cd:df:18:50:70:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3965685f-104b-41c9-9fe3-53d7fe4d141e
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=acbf33e3-8ec0-4e3a-b895-1d41132ac2e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:6a:3e:37:6a:aa:c3:9c:de:56:3a:51:3d:9a:
                    23:14:7d:eb:30:1c:0a:09:b4:d0:0f:62:e2:23:f7:
                    c7:e2:f2:76:1e:e6:4c:97:89:19:e8:97:e2:75:d8:
                    d1:a3:98:c4:8b:10:96:c9:7b:46:c8:de:ff:bb:25:
                    7b:b2:aa:08:2d:67:fc:9e:b9:5e:78:5b:c5:20:1c:
                    77:64:c0:68:06:a9:0d:e9:92:0a:8e:d0:dc:99:0c:
                    92:29:b5:9c:0b:ae:4a:55:e0:12:80:cd:01:68:bb:
                    2c:65:38:fa:13:14:9b:64:33:2a:6f:5f:a1:5b:a3:
                    97:29:2f:55:d0:30:a7:0b:5e:32:03:6f:03:38:6e:
                    2b:bc:8e:c8:b5:6a:7c:89:57:36:1e:b5:1b:7a:25:
                    e5:75:51:50:e9:c1:e6:d5:f8:b6:9b:c8:a2:8e:0e:
                    7d:7b:6e:db:ba:50:1e:cc:69:34:dd:50:fd:bb:35:
                    95:57:29:51:56:a3:96:49:8e:cf:ff:31:42:b9:90:
                    a4:b7:de:bf:18:f1:43:20:12:27:fb:40:e9:35:ea:
                    3f:47:d8:74:e3:4b:83:b7:d7:7e:c0:12:fa:3f:70:
                    ef:f7:10:f8:3b:e5:6e:e5:52:f9:11:b8:5b:99:33:
                    98:4d:be:4c:6e:b3:a1:cb:01:26:60:c0:9a:49:94:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:40:C1:E7:45:08:35:27:D5:BC:2E:A6:1F:3C:BB:10:25:A5:37:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/73ac2704-b213-38bc-a8e0-ff102b5ba5f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e/3965685f-104b-41c9-9fe3-53d7fe4d141e.crl

            X509v3 Authority Key Identifier:
                keyid:2D:4E:EC:07:7D:05:74:F6:8E:93:8D:47:DD:E3:82:57:D4:0B:DF:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3965685f-104b-41c9-9fe3-53d7fe4d141e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:23:c8:e0:13:c3:7f:4f:f9:49:ba:18:4f:8c:1a:d5:bb:7f:
         4a:cb:89:11:fd:dc:b4:6a:a1:31:e1:ff:22:88:86:ff:c2:c1:
         25:55:6a:f8:74:c9:dc:c3:4e:9a:bf:4f:99:e0:fb:95:59:f6:
         d8:c8:fc:0b:07:c0:58:e8:0f:96:a7:1d:4c:f8:3d:15:6e:8f:
         62:13:3e:8a:66:e9:8e:30:48:de:d0:42:5d:44:c5:94:21:d8:
         4a:58:59:48:76:84:e1:fb:35:c8:07:e2:b2:70:34:80:72:84:
         84:18:8d:3c:a5:60:8b:61:17:c1:9f:c2:06:32:e0:9b:32:ba:
         86:7b:80:34:fa:31:45:ae:49:43:8f:b9:d6:5c:64:6d:2d:c7:
         bf:86:47:c7:56:21:64:28:1b:23:cb:0f:64:ee:f6:0a:ed:9b:
         c0:15:ef:84:97:8c:21:42:41:f3:c8:8c:27:c1:d3:2f:60:cc:
         f0:b5:63:10:af:3a:cd:22:60:dc:a3:fe:7e:ac:25:81:67:d3:
         84:b6:af:2c:90:f4:a5:32:05:8f:e7:d8:a6:de:8b:ea:f7:a7:
         2b:62:bf:0e:3c:c7:1d:04:4a:3e:36:67:67:c6:a7:c0:46:51:
         f0:1e:19:01:99:94:81:57:86:0c:dc:55:b1:05:d2:ab:d8:f3:
         3b:1a:1a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:59:37 2025 by rpki-client