Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa
File:                     a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa (raw, json)
Hash identifier:          +Tfllf7QPikGhrjBFQV1jCHpTv3iLCdw+HW3Eg/a8Ng=
Subject key identifier:   7B:59:D8:02:84:0E:81:A5:0C:8D:A3:28:51:AC:DA:1C:82:80:8D:1F
Certificate issuer:       /CN=1284725e-3e3f-48a5-9b39-37b014dd6873
Certificate serial:       010D0C9F4328584930DE7C38C77F257FF09CDC80
Authority key identifier: 2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa
Signing time:             Sat 15 Mar 2025 01:00:39 +0000
ROA not before:           Sat 15 Mar 2025 01:00:39 +0000
ROA not after:            Fri 13 Jun 2025 01:00:39 +0000
asID:                     40362
IP address blocks:        216.80.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:30:de:7c:38:c7:7f:25:7f:f0:9c:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1284725e-3e3f-48a5-9b39-37b014dd6873
        Validity
            Not Before: Mar 15 01:00:39 2025 GMT
            Not After : Jun 13 01:00:39 2025 GMT
        Subject: CN=40e52219-b644-4092-b7e3-0d0cd5b04c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:1d:f6:f7:44:b1:80:8c:78:6e:34:7e:4b:1f:
                    d6:4f:17:8e:59:38:6d:0e:0f:3e:f0:2a:0f:61:56:
                    dc:a4:42:ab:e5:20:60:0d:2f:2a:ff:80:5b:1d:f4:
                    0d:1f:c4:a2:61:41:e4:e2:bf:8e:84:6e:0b:a8:e4:
                    df:4a:b1:08:b1:32:f7:aa:4b:cf:73:0a:4e:fb:62:
                    eb:f2:df:60:68:03:a0:7f:ea:72:ba:5f:af:3d:71:
                    ad:95:4b:e8:5d:39:a3:02:2f:f6:19:7b:a5:9a:ff:
                    b0:b6:16:0c:54:54:09:f1:c0:d4:7e:3b:46:cc:67:
                    42:16:a7:6c:6b:ea:54:39:24:c4:2d:df:a8:16:2e:
                    72:e1:44:a4:98:d8:fd:2e:61:20:31:f5:c0:6e:b2:
                    e2:e4:e7:c8:01:b9:49:af:96:58:0a:ed:a5:b1:2a:
                    38:9a:1e:49:1a:de:71:c1:57:1b:b3:e9:84:e3:a0:
                    96:57:71:e3:23:fa:dd:cd:93:c2:c2:5f:a5:7c:9a:
                    79:92:d1:ac:63:12:9b:99:5d:f9:c8:1b:e1:d3:db:
                    a2:5a:0c:b1:90:0a:77:46:ae:cc:7e:3a:c1:7f:9a:
                    76:e8:7c:d0:e8:61:77:90:b7:6a:7f:f7:4e:8d:b6:
                    c6:76:9f:6b:07:79:a1:24:21:1c:80:e3:69:ee:6b:
                    78:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:D8:02:84:0E:81:A5:0C:8D:A3:28:51:AC:DA:1C:82:80:8D:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/a7fa7c1d-8ad6-3c4e-8a7e-3115c11d6a85.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873/1284725e-3e3f-48a5-9b39-37b014dd6873.crl

            X509v3 Authority Key Identifier:
                keyid:2D:19:0C:B4:50:59:A0:62:3C:97:86:68:51:B9:20:E3:9B:32:DD:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1284725e-3e3f-48a5-9b39-37b014dd6873.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.80.14.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:b8:cf:02:3d:40:8c:3d:ac:cb:03:f6:58:f9:7b:48:de:87:
         ff:94:c4:31:e9:18:35:f7:5d:fc:db:f0:1c:ba:7c:74:a5:37:
         dd:54:fa:44:f6:7a:55:04:b2:f5:c7:39:e2:7e:7a:c4:a3:ac:
         d9:d7:70:fa:2e:8c:6c:b8:9b:41:45:89:65:92:04:ee:89:69:
         ba:18:f1:05:4b:21:b9:c5:23:92:c6:02:fe:43:ca:fb:be:7b:
         22:a2:6d:e2:d9:01:80:86:85:23:43:48:ba:9c:db:8c:ff:1d:
         e9:ec:ba:d3:b8:97:22:69:f7:30:96:99:ce:a4:61:2c:71:e4:
         0a:6c:2c:d3:d8:4e:b4:22:7e:40:b8:11:0f:2e:61:84:4a:4f:
         5c:eb:1f:86:0f:50:f8:e0:af:9b:8c:19:37:71:4b:c4:bc:64:
         02:4e:f5:a9:47:0a:bf:a5:81:e3:ec:fb:d6:e6:91:9d:e6:59:
         06:dd:19:df:ae:f3:da:0d:13:06:6c:0a:2a:1c:02:87:7d:f2:
         f3:eb:92:71:7d:07:2a:83:15:25:3e:a9:5f:21:ba:e2:19:f4:
         e4:68:85:fa:f1:af:46:e2:7b:9a:f1:b0:3a:3b:05:7d:4c:05:
         8a:ed:52:f4:ff:6a:a9:8b:aa:24:76:47:0f:24:25:4d:20:16:
         6f:75:d8:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:43 2025 by rpki-client