Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/b476ac5e-7723-3622-90dc-0534aba778c4.roa
File:                     b476ac5e-7723-3622-90dc-0534aba778c4.roa (raw, json)
Hash identifier:          GG9vcf1G/ByZKaeP9V7ZXUoOTEz+PjIgmKbZC0focrw=
Subject key identifier:   31:10:11:4E:33:78:35:44:C2:39:66:B4:0A:E1:C0:62:82:2F:F4:FB
Certificate issuer:       /CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
Certificate serial:       010D0C9F432858491AA6CDA5B89BDFC3C581F260
Authority key identifier: 71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/b476ac5e-7723-3622-90dc-0534aba778c4.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     35916
IP address blocks:        69.80.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:cd:a5:b8:9b:df:c3:c5:81:f2:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0388d52a-f8dd-4c02-8c3e-e12809f93cfe
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=4a2c5a51-e1e1-4660-b458-dfd756f8861f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:99:ec:2c:80:a7:01:3b:9e:fb:36:38:4c:1e:
                    ec:66:5e:b6:f8:f0:34:1e:69:f2:47:5f:e1:79:bf:
                    c1:05:34:92:ed:11:28:0b:1b:52:33:d3:6e:f3:09:
                    87:6b:9e:21:b9:66:c3:bb:c1:8d:f6:64:71:ca:92:
                    8c:d7:9e:b7:dd:ed:20:2d:be:a4:62:b1:01:cb:c9:
                    d0:95:3f:37:70:bf:0b:ea:9b:c3:1d:2d:cb:d7:f5:
                    64:b5:0b:f2:e6:52:2f:ba:b7:59:d4:0a:2f:3b:a8:
                    bf:d0:0d:30:ec:ae:73:9c:3e:7d:37:59:5e:65:30:
                    6f:f2:0e:59:6d:67:79:99:d7:51:f8:25:4b:e4:a5:
                    ad:85:09:6b:49:e0:95:db:f3:fc:7b:2d:a9:25:2e:
                    9a:9c:19:ba:15:20:d3:88:f0:a6:1e:e0:a7:36:0c:
                    62:dc:6a:de:04:c4:10:73:60:83:a7:9c:d0:c8:42:
                    91:35:e4:da:44:69:30:a3:52:d5:f5:94:2a:af:2e:
                    5b:5f:88:77:3f:7b:aa:14:9e:3c:f3:b0:da:ba:da:
                    ab:a5:92:f6:aa:80:c2:b3:4f:19:88:5b:a6:0c:30:
                    9b:f0:2a:78:5b:1c:26:00:2f:09:68:73:fc:29:11:
                    4a:5e:62:74:d9:28:49:86:8e:ad:7d:36:54:51:73:
                    df:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:10:11:4E:33:78:35:44:C2:39:66:B4:0A:E1:C0:62:82:2F:F4:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/b476ac5e-7723-3622-90dc-0534aba778c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.crl

            X509v3 Authority Key Identifier:
                keyid:71:B5:55:B0:0D:0A:11:17:D2:49:51:4A:8C:44:F0:4F:3D:A1:66:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0388d52a-f8dd-4c02-8c3e-e12809f93cfe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.80.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:80:ac:7a:2a:57:eb:9c:d4:ef:58:9f:d4:07:7a:c1:a4:15:
         dd:7b:4f:9c:4c:5e:f0:9b:c3:23:35:66:f6:2d:da:8a:15:be:
         74:21:1c:31:6a:db:a4:2b:0e:6c:59:df:87:0a:aa:1f:12:4c:
         65:b2:2e:cf:92:0d:76:f6:09:c6:de:97:10:8a:e4:dc:03:42:
         ff:d7:47:60:eb:34:b0:44:68:d7:58:46:15:eb:ee:75:b5:4f:
         7f:63:d8:2a:76:fc:eb:28:4e:65:ac:6f:8f:09:a4:d3:6f:f9:
         df:1a:e3:7c:fc:8c:08:1c:d5:10:e2:f1:60:bd:65:a5:42:d3:
         de:b7:77:04:64:96:8a:71:31:eb:a9:0d:a8:a8:e9:ea:fb:00:
         f1:fe:24:9d:15:8d:7e:26:21:9d:56:6b:30:71:44:dc:b4:1f:
         ee:2e:3f:d7:ec:65:8c:2c:25:ba:3b:ce:65:a8:9f:80:a4:75:
         b4:09:99:4b:b5:a7:e4:01:5e:b0:d5:5a:47:86:f3:54:7a:26:
         bb:11:78:d7:99:8e:5e:a5:70:cc:6b:45:8f:4a:84:03:cb:52:
         cc:8a:4d:e1:ad:eb:f2:0d:4b:43:29:2e:24:dc:a2:57:68:01:
         eb:6b:64:e0:23:01:9b:27:f3:11:e5:59:5f:80:a5:9f:a4:24:
         34:57:9d:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 12:51:08 2025 by rpki-client