Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/6063056b-9e6b-34fb-b3de-85e9f5d7d91a.roa
File:                     6063056b-9e6b-34fb-b3de-85e9f5d7d91a.roa (raw, json)
Hash identifier:          Cl7XSvQPA0DyFdg0yp/blS8KjRTepFwQ6Y2UlREswOY=
Subject key identifier:   2F:ED:AB:A4:35:E2:12:A1:9E:FB:DE:3D:E7:AB:11:83:AB:A4:BD:5C
Certificate issuer:       /CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
Certificate serial:       010D0C9F432858481B353171C14F27D85B8C0780
Authority key identifier: 85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/6063056b-9e6b-34fb-b3de-85e9f5d7d91a.roa
Signing time:             Thu 05 Dec 2024 14:00:51 +0000
ROA not before:           Thu 05 Dec 2024 14:00:51 +0000
ROA not after:            Wed 05 Mar 2025 14:00:51 +0000
asID:                     26383
IP address blocks:        207.90.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1b:35:31:71:c1:4f:27:d8:5b:8c:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=082ca3a2-9e2b-49da-aaee-2b02d0898f81
        Validity
            Not Before: Dec  5 14:00:51 2024 GMT
            Not After : Mar  5 14:00:51 2025 GMT
        Subject: CN=72376d8a-7347-4908-aa17-29e67b9178ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d9:34:4f:6f:12:f9:d8:e7:f8:4c:67:dd:75:
                    a7:12:d9:e0:5a:d8:79:26:aa:84:0d:9c:72:c0:f5:
                    1d:5e:6b:cf:93:02:5c:37:3a:c8:0b:55:0b:70:d3:
                    35:ce:10:42:db:52:e1:57:8d:ac:8f:e0:40:2f:c3:
                    00:80:86:c7:a7:53:03:30:f4:61:96:dd:d6:a4:11:
                    0f:03:75:3f:1d:e9:ef:dd:14:63:82:76:43:1e:f8:
                    3a:5d:a7:d1:3d:fc:e0:59:9a:ae:89:1c:b7:39:53:
                    4d:4d:c2:2a:d8:59:f0:62:3a:21:68:0b:2d:7b:02:
                    b8:21:46:79:85:72:e0:04:47:09:6a:42:1c:26:2d:
                    84:19:4a:1d:bd:1f:24:00:ce:57:22:b9:df:15:39:
                    12:ed:13:49:17:b7:d6:9d:8c:2a:5c:e6:1c:99:b0:
                    30:9f:30:d3:15:2b:f0:d5:e2:5c:8e:1a:1a:c7:90:
                    49:ac:0c:6b:7f:29:ad:d8:f7:18:63:cb:e4:0c:e9:
                    9f:c7:88:d4:0d:c0:21:37:2d:a8:e7:b8:58:31:e3:
                    74:fd:d2:d5:7a:e5:e9:d0:ba:08:4b:c5:72:23:be:
                    8c:85:9c:3e:f0:be:f5:bf:02:b8:c5:48:ad:e8:26:
                    c2:e3:81:93:7b:20:69:72:f4:ce:ed:44:68:ae:7b:
                    ad:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:ED:AB:A4:35:E2:12:A1:9E:FB:DE:3D:E7:AB:11:83:AB:A4:BD:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/6063056b-9e6b-34fb-b3de-85e9f5d7d91a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81/082ca3a2-9e2b-49da-aaee-2b02d0898f81.crl

            X509v3 Authority Key Identifier:
                keyid:85:B8:6E:76:79:36:38:96:03:F5:DA:8D:DE:1B:AE:D9:B4:1F:4C:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/082ca3a2-9e2b-49da-aaee-2b02d0898f81.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.90.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:f1:71:85:7d:ed:c6:b1:19:9f:06:cd:b8:d2:75:3f:9d:78:
         58:8c:f8:2c:f6:cc:85:48:ab:73:27:12:72:b6:93:a5:08:d7:
         6f:28:95:c2:b4:d8:25:17:ff:f3:ef:78:00:e9:0c:dd:ad:f8:
         1e:52:45:d9:09:e1:87:4d:29:b1:b5:72:c0:36:99:42:df:11:
         df:bc:e5:65:50:63:13:8a:c3:ce:a1:05:b4:9d:a7:c1:48:a4:
         ee:b8:4b:c2:18:60:74:11:77:12:d6:4d:aa:56:fd:df:90:d3:
         fd:59:44:b9:38:8a:44:57:a3:39:2c:97:62:fa:ea:c9:6e:ab:
         7e:cc:68:1f:c8:80:65:57:8c:da:e7:36:89:44:2b:bf:69:44:
         f9:45:e6:42:24:06:cb:0d:e5:57:76:f1:2f:6e:25:4d:d0:3f:
         f9:60:33:3a:8a:a2:c5:5d:8b:cd:b0:8c:1b:ae:90:31:d3:dd:
         56:13:2d:a7:ce:d9:96:3d:0a:6a:28:81:9c:f2:a1:34:60:d2:
         31:35:3c:f3:d7:b6:8c:f6:d0:82:a1:1f:cc:19:b5:32:e7:27:
         49:1a:67:ba:00:da:29:49:9f:17:40:35:fb:f9:45:29:6f:c8:
         a6:64:c7:3b:d1:71:fc:8e:52:4c:06:7c:d1:e7:e0:e2:b5:be:
         eb:59:2c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:25:47 2025 by rpki-client