Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa
File:                     26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa (raw, json)
Hash identifier:          PYGid4y0qFlyr+tXJpVeul9KrfvOyw6xMtau6sQ4qs4=
Subject key identifier:   27:3A:5B:3A:B7:D0:F9:FD:54:11:48:E4:85:88:11:F1:FB:74:F3:0A
Certificate issuer:       /CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
Certificate serial:       010D0C9F432858494CC941C698A82137A7F81340
Authority key identifier: 80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa
Signing time:             Tue 25 Mar 2025 01:00:40 +0000
ROA not before:           Tue 25 Mar 2025 01:00:40 +0000
ROA not after:            Mon 23 Jun 2025 01:00:40 +0000
asID:                     397004
IP address blocks:        205.157.205.0/24 maxlen: 24
                          205.157.206.0/24 maxlen: 24
                          205.157.208.0/24 maxlen: 24
                          205.157.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4c:c9:41:c6:98:a8:21:37:a7:f8:13:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c
        Validity
            Not Before: Mar 25 01:00:40 2025 GMT
            Not After : Jun 23 01:00:40 2025 GMT
        Subject: CN=4bc7ff1d-3ae3-4fe0-bed8-b16acf382e29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b6:85:6d:13:ba:9d:26:61:c5:8c:85:45:9a:
                    61:99:64:2d:62:dc:a3:e7:56:37:3c:90:7f:d0:56:
                    bf:39:64:ae:3d:b7:b5:f3:84:92:34:f0:9d:96:77:
                    a8:00:c8:b6:52:a6:29:4f:39:96:42:16:5d:41:4e:
                    3b:7e:8c:5e:08:2f:a5:56:19:4c:4c:08:f3:d1:e2:
                    a1:3a:e9:3d:39:e2:ff:42:74:48:b0:88:53:d6:db:
                    40:e8:c9:c1:47:59:ee:9a:40:29:e0:6d:55:c7:a5:
                    69:f5:88:67:c2:ce:62:06:0d:8a:f4:e5:2e:cc:1f:
                    23:f0:be:5f:60:4e:96:4c:79:7b:d8:60:23:ca:6d:
                    56:dd:93:29:e4:77:3f:89:f5:b9:8b:32:19:ce:e7:
                    18:12:52:dd:e1:59:2f:8c:ef:8e:f4:76:4a:f3:25:
                    6c:8b:a5:3c:ef:7a:dd:95:f0:3b:ec:4b:cf:8e:03:
                    13:2c:5f:00:59:16:81:2d:e7:27:a8:6e:85:32:2e:
                    6a:66:80:71:2d:63:d0:fe:c6:46:c6:5f:53:8a:fa:
                    0c:bf:d7:19:6f:da:6d:d0:cd:8f:c8:a3:57:eb:d4:
                    cb:d0:c8:7f:03:b6:36:fd:2d:4f:4e:9e:a5:2e:b7:
                    29:6f:81:db:be:d7:65:47:9f:75:af:3c:aa:ae:5b:
                    64:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3A:5B:3A:B7:D0:F9:FD:54:11:48:E4:85:88:11:F1:FB:74:F3:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/26d65c2f-4d65-3eea-a872-f4c9e9f6aaad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.crl

            X509v3 Authority Key Identifier:
                keyid:80:B2:BF:71:D3:A4:8D:54:39:E1:B6:9F:8B:B0:32:31:8E:0E:6C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98cc8e5-1fcf-4c28-9adb-45e2cc1c023c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.157.205.0-205.157.206.255
                  205.157.208.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:78:1e:db:bb:52:d2:f1:36:8d:0a:50:63:18:99:76:16:d5:
         78:b5:de:d6:87:d4:77:1a:16:ea:49:dc:c0:61:2d:47:fa:f4:
         0c:93:e2:ab:32:d5:1c:bb:83:59:fb:36:6b:db:91:b0:65:75:
         bd:e3:9c:6e:57:0a:79:3c:2b:ff:6d:ea:a6:78:bf:83:54:d2:
         9e:9b:91:f9:1c:bb:71:0d:c9:7e:9b:40:ee:87:68:fc:51:e3:
         79:4b:e1:33:b5:81:2d:05:3d:b1:6e:b8:b2:76:c1:9a:ea:9c:
         c9:68:6d:e1:1e:4d:09:9c:47:91:bc:1a:2b:44:9f:bf:9a:d4:
         98:03:f3:5a:85:6f:b3:e8:53:8c:5a:22:ed:3d:85:86:4d:67:
         7b:36:e4:db:14:4d:c3:53:bd:51:f3:d4:24:05:9b:ee:45:80:
         25:28:22:03:6b:30:11:35:64:ee:51:dc:77:da:88:92:67:64:
         80:f5:d5:30:ca:ec:bf:46:89:de:d8:14:fe:a6:3e:8f:33:d7:
         42:29:39:3d:59:4b:80:c5:1c:c8:d0:f3:9f:ef:40:89:97:eb:
         bd:7a:98:cc:fc:d3:67:95:53:0a:30:bd:fb:e8:01:05:f3:fc:
         76:1a:c0:32:75:08:20:58:f2:44:71:1d:11:fd:ff:7d:8c:63:
         64:38:b2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:51:12 2025 by rpki-client