Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa
File:                     8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa (raw, json)
Hash identifier:          4iToI2xTN0D6xh4/Frgvc6L9uIJi51tRVvd0n6LmoxU=
Subject key identifier:   CF:B5:E7:F9:C6:C5:67:60:F8:0F:20:A4:E1:0B:BC:E3:31:13:17:96
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584819CFE2424B0AE2BAC71E4500
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa
Signing time:             Thu 05 Dec 2024 02:00:39 +0000
ROA not before:           Thu 05 Dec 2024 02:00:39 +0000
ROA not after:            Wed 05 Mar 2025 02:00:39 +0000
asID:                     13760
IP address blocks:        209.209.216.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:19:cf:e2:42:4b:0a:e2:ba:c7:1e:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Dec  5 02:00:39 2024 GMT
            Not After : Mar  5 02:00:39 2025 GMT
        Subject: CN=d2d6b396-b5ac-4293-bdfd-4eb1f23dffec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b6:c7:a4:73:26:96:9e:8e:13:a3:42:86:c7:
                    d4:3f:12:de:34:d2:23:b9:d8:1f:3a:7b:c7:af:b7:
                    c0:f6:8f:4f:75:42:f5:45:ba:ef:1a:99:b1:70:57:
                    05:fc:1d:50:58:45:e1:fe:54:2d:d9:5d:e9:93:2d:
                    d5:fe:c5:eb:68:b6:31:9c:75:3a:d8:12:70:65:3b:
                    1b:7c:5e:cb:61:bd:c4:82:57:cd:36:ce:4d:ca:6e:
                    f5:83:09:b9:c4:dc:40:8d:39:08:cd:f0:63:16:35:
                    5d:2c:50:69:ec:8e:50:0a:1e:35:8c:49:f5:aa:69:
                    b7:42:f8:7c:fb:2c:97:fc:ac:72:80:a3:3f:f3:b9:
                    0e:20:e8:8b:96:5f:1b:be:bb:a2:2b:5f:ad:b3:d4:
                    9f:22:1c:db:a8:59:7f:55:b6:7d:91:d2:df:85:c7:
                    b3:bb:b6:b2:11:8f:2a:43:35:9f:96:97:8e:6b:10:
                    40:e6:c5:bc:d0:9b:30:b9:fa:53:53:57:f3:a4:ce:
                    09:b2:28:50:56:09:e1:2c:82:20:46:bf:0a:19:63:
                    78:d6:e4:fd:fd:c2:9b:e0:f1:69:18:6f:3f:79:d7:
                    c7:27:7c:f2:68:32:37:07:a4:e7:2f:ed:b6:9d:4a:
                    e0:ed:71:5e:57:96:52:36:db:7c:8b:99:53:f9:83:
                    09:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:B5:E7:F9:C6:C5:67:60:F8:0F:20:A4:E1:0B:BC:E3:31:13:17:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/8dd7cecd-59f2-33b7-91b3-fb97f457f6d2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.216.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b2:ea:d0:72:ea:d1:fa:d0:a1:81:72:1d:8c:ba:20:4b:50:66:
         4e:5e:26:f6:d1:87:bd:d2:b4:d2:f0:21:a1:9c:0d:a0:ac:69:
         2a:91:4a:ae:a3:48:25:fa:83:a6:f6:96:1f:06:4f:83:61:51:
         80:e5:9a:d2:ba:6a:5e:18:a3:70:ba:61:0f:2d:77:f3:90:d1:
         b2:63:fc:b2:4a:00:d0:a1:2a:86:56:33:9e:76:5b:99:22:91:
         a1:e8:5a:4c:a0:9d:7c:d2:73:f4:42:e6:d0:07:36:72:0d:d4:
         a1:80:b9:ef:e8:e5:92:f5:fe:f8:e1:82:bb:77:01:e6:66:82:
         d2:f4:d3:4a:d8:35:88:d1:49:4e:01:f5:1b:ff:ff:3a:39:4b:
         f4:71:3a:91:86:f4:b4:69:2d:5c:74:33:44:84:dd:7d:51:2b:
         d5:98:00:64:24:72:0a:01:a2:76:19:a0:b4:1b:5b:72:a6:39:
         99:73:7a:3d:b2:46:05:31:3a:a4:78:1c:63:b2:49:2c:33:9b:
         29:13:ae:76:90:30:e7:a3:79:04:b9:4d:d0:c7:6a:e6:9c:0e:
         8a:44:01:03:01:4c:f9:10:3a:1e:49:3b:1a:c0:dd:3d:de:27:
         88:f9:38:b3:80:47:0f:18:9f:b6:4f:82:7f:97:67:47:16:2c:
         db:37:b6:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:48:09 2025 by rpki-client