Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa
File:                     a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa (raw, json)
Hash identifier:          VVue1vX8aMw7dpmwkJ5aHuprtPEQU2Xn4sCQLgZlmk8=
Subject key identifier:   93:7A:50:87:33:8C:A5:40:BD:7D:B7:D0:4C:63:DC:37:EE:7E:25:85
Certificate issuer:       /CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
Certificate serial:       010D0C9F4328584905B6A8C6DA64770B70BFB700
Authority key identifier: 13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     393780
IP address blocks:        208.89.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:a8:c6:da:64:77:0b:70:bf:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=731b750c-b48f-4a57-bf26-18e0bc6a456e
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=2385ae8c-3e0d-48db-8c26-2e8dadd515aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:75:36:96:9b:c4:aa:50:b4:04:1c:f0:c1:e1:
                    a7:c0:61:93:8f:4b:4c:c5:8d:94:e9:c9:1d:77:05:
                    e1:64:f4:b2:79:25:b5:7e:99:2e:d6:43:f0:f7:f2:
                    1c:12:2a:a3:b5:2c:dd:c4:e6:16:19:91:9d:24:10:
                    3f:09:91:c0:7d:0a:d9:82:a9:fd:a2:d1:d4:fd:16:
                    8f:9f:6c:7a:79:25:b7:d9:48:de:49:77:46:07:7f:
                    61:22:e0:57:44:e3:7d:4b:d7:6f:03:ab:4b:b6:ec:
                    83:fb:50:62:a7:0e:b6:4e:e6:02:fc:36:91:28:b9:
                    9b:f5:7c:f6:6b:e7:ca:11:08:8c:ff:df:05:3d:89:
                    0e:b7:a2:c5:56:80:0e:66:44:4d:83:6c:60:b7:53:
                    b2:57:2d:0f:19:be:f5:d0:c6:2b:4f:cd:51:64:95:
                    1c:f8:02:e6:d7:ee:4a:d3:6c:af:82:7a:56:ea:c2:
                    bd:4f:44:48:bc:82:d0:c6:40:88:d8:b5:c6:77:92:
                    b1:04:e4:12:93:d8:2a:c8:2c:b4:44:e6:94:b6:8a:
                    04:90:4a:5f:b0:bf:f2:09:6f:fc:be:66:78:74:4f:
                    01:c0:ce:59:01:a3:69:fc:f9:72:34:41:8c:37:65:
                    2f:c8:ba:77:12:ae:18:ed:53:a0:86:df:d6:88:4e:
                    d7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7A:50:87:33:8C:A5:40:BD:7D:B7:D0:4C:63:DC:37:EE:7E:25:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/a8cd7728-ce48-3935-9d5c-caec88a0e81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e/731b750c-b48f-4a57-bf26-18e0bc6a456e.crl

            X509v3 Authority Key Identifier:
                keyid:13:E4:1E:72:24:24:5A:D5:9A:CF:07:0C:CE:42:27:BC:80:6C:CB:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/731b750c-b48f-4a57-bf26-18e0bc6a456e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.89.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:9f:f6:6d:1f:8b:12:17:3a:8c:ad:03:51:df:fe:8c:86:d4:
         69:bf:f6:2f:68:05:53:39:7c:b3:6c:43:38:a1:bc:e6:d4:6a:
         e2:83:81:3b:5d:44:f3:b2:20:37:16:9e:9f:0c:9c:44:a9:56:
         d6:4a:cc:01:33:c1:16:43:3b:90:cb:fc:14:4e:ad:51:6d:c3:
         a4:fc:c3:d9:ef:fc:dd:8b:a4:f5:eb:03:d9:7b:51:19:91:fd:
         b0:10:0d:37:a7:73:53:29:d0:0c:29:a1:a7:7d:6c:5e:87:d3:
         6d:83:96:4c:0c:88:90:54:6f:36:21:ad:fa:2e:42:25:df:2c:
         c5:7a:94:96:e0:76:ec:eb:f8:45:2b:95:79:ea:c7:e9:86:4b:
         17:6f:76:00:04:fa:6b:4f:81:4a:06:86:b5:6a:d6:c0:df:7f:
         16:a3:e0:89:32:fc:7e:42:e6:de:a6:83:5a:9d:4d:0b:ff:86:
         80:ca:be:31:ba:55:c5:dc:4f:e3:59:3d:ba:38:bf:1b:94:73:
         38:1a:b7:cf:18:1c:19:57:bb:58:ea:67:5e:14:8b:7c:b7:2a:
         25:f8:e5:70:59:3f:94:b2:28:6a:21:b0:c8:e5:b9:79:ba:c4:
         f9:0f:09:d3:bf:88:c2:9a:3c:e8:2b:93:2c:36:e0:a6:91:ec:
         66:35:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:49 2025 by rpki-client