Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d5a86e91-da12-3fd0-8bb8-ec23adfb4ff8.roa
File:                     d5a86e91-da12-3fd0-8bb8-ec23adfb4ff8.roa (raw, json)
Hash identifier:          4/Xy9PitHFZzo8MwrnecHZivv/5/Leuzm99HHsOfClQ=
Subject key identifier:   A1:E1:FB:A4:D3:4D:A4:CA:60:0D:FD:CF:81:67:A6:0B:60:FE:66:9D
Certificate issuer:       /CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
Certificate serial:       010D0C9F43285848EC9690383031DC27563694C0
Authority key identifier: 98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d5a86e91-da12-3fd0-8bb8-ec23adfb4ff8.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     3807
IP address blocks:        207.196.178.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:90:38:30:31:dc:27:56:36:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=045c7c3d-72a4-421d-b41a-d5e7e2534107
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=9cf581a5-f187-4deb-b76d-1dd562fd07e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:16:1c:aa:15:c4:8c:14:d9:12:6e:5d:86:43:
                    8f:bf:a5:68:96:cf:81:6e:20:d3:26:9f:c3:63:14:
                    c2:53:46:88:91:92:46:93:be:52:9e:62:5b:c2:39:
                    0e:76:01:a7:37:48:2b:cc:77:31:b0:3c:ae:bc:c2:
                    3e:91:a1:43:1c:62:26:e2:f4:cc:3e:76:85:f0:cd:
                    8f:0d:8e:a6:e3:5c:e1:07:ad:4a:f4:8b:7e:f0:ba:
                    ad:27:d5:b1:58:79:94:e7:44:a3:d1:99:21:c8:1a:
                    50:3a:b4:dc:8f:37:ef:e9:94:16:1a:23:db:5f:e0:
                    6d:84:a4:99:b2:59:9d:43:0c:9c:a4:f6:64:88:5c:
                    c2:1f:93:90:49:df:13:d3:2f:8c:b5:68:74:f3:3b:
                    f3:88:d2:a5:c7:8e:e4:ab:75:34:b5:12:39:9b:d4:
                    f9:3c:93:b4:74:13:87:f8:8d:a7:9b:ba:6d:d2:29:
                    6b:1b:02:ef:5f:fd:22:14:20:10:f8:b4:c0:a5:d8:
                    9c:47:e4:4e:89:6e:f9:84:d9:a2:e0:7a:b9:86:82:
                    ae:3b:75:b5:af:44:db:d0:8f:7c:7a:1d:fd:b5:34:
                    19:5f:74:b1:93:82:3c:7d:0d:fb:c2:ce:4b:97:7c:
                    e3:ca:31:2d:ff:56:d6:96:2a:84:7e:24:71:90:bc:
                    60:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:E1:FB:A4:D3:4D:A4:CA:60:0D:FD:CF:81:67:A6:0B:60:FE:66:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/d5a86e91-da12-3fd0-8bb8-ec23adfb4ff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107/045c7c3d-72a4-421d-b41a-d5e7e2534107.crl

            X509v3 Authority Key Identifier:
                keyid:98:53:D5:53:CC:BB:B0:F4:A6:3B:D4:37:68:B8:3A:07:BE:DB:3D:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/045c7c3d-72a4-421d-b41a-d5e7e2534107.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.196.178.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:79:ec:72:a1:ec:0f:80:59:ee:52:2e:02:4e:d6:fb:ff:32:
         51:9a:ad:0d:40:ae:22:58:04:23:1c:2f:9b:50:1c:0d:51:ef:
         3d:10:9b:f3:04:8e:a4:3b:15:a9:15:61:06:90:99:40:d4:31:
         99:66:11:ab:79:36:2f:67:ca:85:54:49:56:04:85:55:47:f4:
         9c:8a:82:ed:39:9e:00:e8:62:ba:0b:a4:a8:22:18:10:37:09:
         c5:8e:2f:f6:ff:49:73:44:d7:1d:f7:11:15:58:01:f3:46:2d:
         5c:eb:2d:37:21:7a:13:2c:48:5b:73:cb:71:86:91:b1:25:8c:
         35:82:72:ea:86:9d:4f:df:3c:5c:d6:cd:a0:d8:7a:95:e7:bd:
         c9:6b:c0:f6:f4:95:5e:56:a6:81:e0:f7:c5:89:38:1a:6a:90:
         f2:37:77:84:0e:50:1f:af:88:59:31:fe:78:d0:7c:54:c3:b5:
         03:96:93:74:10:95:5d:2e:41:58:7d:a1:5d:f8:6d:79:67:5c:
         d1:70:13:b2:e2:7c:87:32:b7:87:b1:52:73:c3:f8:0e:3d:fd:
         28:ad:fc:86:1e:a9:1a:73:26:ec:02:9f:ec:b8:3b:da:16:73:
         44:1f:4b:7a:a1:c5:f2:39:bf:17:fe:37:57:83:00:9c:37:bb:
         bf:be:21:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:23:14 2025 by rpki-client