Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
File:                     0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa (raw, json)
Hash identifier:          QFyiP0QA9TopIVjiQoDuWT+DPRAq2HWkiaT28QYT+yE=
Subject key identifier:   41:53:68:39:4A:D6:11:80:4D:1A:D1:6E:48:A6:77:0C:35:19:90:86
Certificate issuer:       /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial:       010D0C9F43285848F65BF3841BC73B07840C5270
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     13343
IP address blocks:        208.94.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:f3:84:1b:c7:3b:07:84:0c:52:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=00ec54b0-2d8f-4294-bc69-280875e00fcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:16:6b:6d:41:5f:23:6a:fb:02:b6:59:39:c8:
                    a9:8a:24:19:2a:8b:06:83:35:6f:cb:4d:c6:7a:95:
                    53:b0:c9:aa:75:24:06:e7:73:8e:73:67:85:d0:5e:
                    74:79:07:2b:00:1d:9e:d6:db:ee:72:be:a5:75:52:
                    06:85:c3:a2:99:09:fe:77:79:01:38:11:28:77:12:
                    1b:07:f1:10:dc:84:05:2b:44:fb:77:d0:97:74:85:
                    5b:88:8c:f6:91:4d:5b:ff:6d:d2:40:9d:e2:e1:a5:
                    b4:62:7b:1d:9d:7f:62:c6:e3:3a:cd:72:52:8d:c5:
                    9c:b3:67:a3:ab:ab:5a:60:14:b4:24:95:70:d0:40:
                    6d:9e:db:35:a8:0f:0b:51:d7:d6:51:73:71:4c:57:
                    a3:97:79:aa:b5:78:81:32:a2:b8:42:3b:1a:99:1d:
                    d1:1a:ae:1f:8d:4d:e4:56:8c:7f:e5:e2:b9:d0:0d:
                    c8:a4:83:db:e8:b7:aa:ac:df:0b:04:b5:a3:37:5c:
                    ae:7b:e8:cb:c8:1b:71:96:65:63:ad:b6:89:d7:76:
                    10:67:69:e8:18:f8:71:2b:3b:3e:e8:d1:e3:61:68:
                    5a:f4:c7:74:33:06:db:1b:91:b9:7d:27:88:5e:30:
                    7e:7c:19:dd:56:05:ed:f9:9a:9e:7a:da:e5:e9:53:
                    bf:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:53:68:39:4A:D6:11:80:4D:1A:D1:6E:48:A6:77:0C:35:19:90:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/0d4bcd6f-c6d9-3712-a1b3-18293fbf243c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:4e:6a:9c:be:2c:e4:e2:75:3a:21:2e:9f:02:8e:bd:91:16:
         45:66:c7:77:4c:cc:63:85:7e:bb:c2:14:d4:52:fa:2d:c5:a1:
         2e:ca:c7:2e:8f:e7:2d:17:22:d8:0a:5e:c7:f8:e5:bc:e2:e8:
         ae:be:ef:c5:12:6d:28:9a:b9:fa:80:5b:c6:1c:a6:17:c9:d3:
         91:39:dc:6a:67:45:fd:d2:49:9f:f0:24:03:65:59:6b:7f:4d:
         9e:32:e2:f2:d8:31:70:d9:e9:f8:1a:80:43:c8:3f:f2:f5:67:
         a1:ec:60:b5:2c:1e:f4:f2:ad:9a:0b:4a:30:8f:e3:f6:96:dc:
         0e:9a:cb:63:3c:7f:ee:7c:4d:94:c5:c7:fa:fb:82:d9:cc:2b:
         9b:fe:8f:25:72:99:19:00:d6:ca:1d:f6:ff:ea:90:0e:84:84:
         2c:25:b9:22:5a:fc:09:9c:29:86:e6:57:69:56:d1:53:ab:7d:
         5e:de:b2:e3:5e:dd:dd:0c:77:f9:14:73:a8:20:d4:92:f6:65:
         d6:e0:87:7d:c6:be:e5:51:db:b8:92:75:b3:54:50:ea:83:da:
         de:6b:28:03:c4:5e:8e:5a:e2:41:48:20:a0:0b:7d:ea:b3:a2:
         4f:f7:46:7f:a8:a9:ca:3f:2a:8f:34:6e:58:39:06:d5:e1:fa:
         5d:49:e4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:39:18 2025 by rpki-client