Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
File:                     8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa (raw, json)
Hash identifier:          sF2MB6lXoix2heSDKN8/7iys2iNzacGCJkrXFb4fHb0=
Subject key identifier:   FA:B3:B5:01:3E:B9:38:87:2F:B2:4B:22:1C:7E:5D:71:3C:DB:5E:CB
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F43285848E9CBF29E1567D8C0D98FF200
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     6208
IP address blocks:        199.116.63.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f2:9e:15:67:d8:c0:d9:8f:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=d12f1878-065e-45de-bd46-2a674145e59f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:7a:68:d1:62:ce:cb:12:32:ce:0e:f1:16:d5:
                    de:b6:54:f8:45:79:d4:1e:9f:15:b7:5e:f0:76:ce:
                    07:ee:2f:8d:80:4f:ff:fb:97:a4:f7:76:fa:1b:3d:
                    e5:42:61:cd:7e:02:fd:3b:ad:1f:55:33:55:c5:53:
                    26:9d:27:19:bb:ec:3a:be:40:68:dc:6a:f7:55:4f:
                    30:de:78:2e:38:84:01:83:36:dd:3d:47:97:d2:fa:
                    af:60:bf:0b:30:63:06:ca:26:ee:90:3f:6c:0e:78:
                    fe:48:f2:85:a1:5a:7a:89:1d:5c:09:5e:88:21:38:
                    56:42:56:3b:f6:14:ce:44:f7:f5:3b:cf:fe:30:d9:
                    6c:9e:c8:b1:bf:6d:5c:41:09:84:59:a7:4a:d1:dd:
                    8b:a8:9e:cc:b4:49:37:63:b7:23:9e:f5:43:fc:83:
                    2f:91:36:cc:8f:b1:20:08:f8:8f:bf:a6:7e:1c:5f:
                    d2:b4:a5:f2:e3:5b:0d:c3:77:e0:13:f3:d8:c9:d7:
                    ac:ac:c3:36:6b:78:5b:bd:98:f7:74:ff:a6:02:68:
                    0a:c2:d6:9e:91:fc:c2:44:ae:9a:27:16:fa:b5:b4:
                    f3:70:e5:2e:63:20:3f:fe:f0:b4:2e:9d:2d:28:c0:
                    32:41:39:15:54:17:df:42:3b:d1:e4:24:64:1b:8b:
                    88:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B3:B5:01:3E:B9:38:87:2F:B2:4B:22:1C:7E:5D:71:3C:DB:5E:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/8e846c92-75ff-395d-b0a9-40072e1b7c2c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.116.63.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:a7:14:ac:46:ca:7f:67:bb:68:a5:51:5e:5f:a6:2d:97:ae:
         30:ec:c0:21:05:a1:df:99:0d:34:0d:7e:34:aa:2c:bc:bb:c5:
         09:37:bf:7d:fc:22:74:cd:53:be:73:1f:4b:d5:1e:67:1e:2d:
         13:e0:77:ae:75:65:d1:4f:21:02:55:0d:04:af:66:c3:8e:1e:
         68:48:90:62:8e:20:37:1b:b1:83:46:10:81:19:80:3d:05:6b:
         22:9a:80:8d:10:d8:77:0f:35:49:5f:a0:af:0f:1d:6a:3c:ab:
         71:79:0c:77:64:d9:75:02:99:25:de:cf:8f:e0:87:bb:a6:d2:
         d1:df:93:2f:f1:0b:41:97:35:53:b0:43:f1:f5:a4:64:3d:4e:
         b2:20:1e:d7:23:90:b6:cc:57:42:0d:73:b7:0f:4b:49:ee:49:
         ed:d5:f4:f9:4a:d6:e2:1a:d2:ba:68:54:eb:76:80:65:23:fb:
         3b:b6:9f:fe:19:81:b0:40:59:b6:36:3c:df:81:aa:a2:c5:ec:
         bf:24:f4:6e:81:0f:1d:a4:69:9e:54:af:b3:0a:35:a7:86:84:
         57:fe:4d:b1:91:98:c0:8b:74:fd:b4:04:07:67:a1:3f:fa:01:
         36:f4:fd:63:de:0d:a1:d0:36:0c:8a:92:19:05:1f:af:fb:53:
         fd:bc:1a:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:14:28 2025 by rpki-client