Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa
File:                     ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa (raw, json)
Hash identifier:          euhKkiaB3A74auh6Ta4pZ7sFe9voM57nt46owfkUJOQ=
Subject key identifier:   CD:56:39:2B:FA:B6:2E:B2:D5:64:7C:DC:03:BF:DC:02:10:92:DB:0F
Certificate issuer:       /CN=adbe894e-fc78-4889-85f3-6253e78715e5
Certificate serial:       010D0C9F43285849A61F3F0C276AD35D80E21C00
Authority key identifier: B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     62744
IP address blocks:        204.8.96.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:3f:0c:27:6a:d3:5d:80:e2:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=adbe894e-fc78-4889-85f3-6253e78715e5
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=ccefd056-b443-4a9a-85c7-3cc2b4bfddff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ef:61:5a:38:4a:67:cd:ab:99:26:82:59:ce:
                    8d:6d:72:55:2d:5f:23:0d:cf:35:17:b7:8c:19:d5:
                    c3:c8:0e:cd:b8:69:12:c2:bf:73:69:a8:70:36:f7:
                    67:2f:f1:15:1c:a2:eb:00:47:e6:4b:81:b0:e1:0f:
                    02:45:7e:53:18:10:13:58:d4:33:89:81:d8:48:2b:
                    a0:af:ae:de:bb:43:d7:0d:19:06:7d:94:b5:c0:cb:
                    f9:91:e7:27:af:42:4c:e3:c6:5d:30:be:fd:25:d9:
                    b8:76:e2:a5:72:5f:6c:17:f7:fc:bb:7c:74:e1:61:
                    d8:e9:1f:2a:4a:fd:6e:6d:79:f8:40:fe:66:7f:c0:
                    57:d3:c6:21:ed:a4:88:fe:fc:36:cb:55:01:a1:a3:
                    5a:76:e2:a5:09:81:7c:34:19:0b:49:78:41:c4:6e:
                    54:46:48:26:2e:b0:b5:0b:9f:a1:77:d4:b5:64:0e:
                    ba:13:90:bf:d8:9a:b9:56:1f:69:d9:ab:33:a6:9c:
                    2a:fb:00:1a:cc:68:01:5f:f1:e3:d2:e3:3a:9d:ff:
                    98:a2:d0:9d:9d:90:d2:32:fa:0a:96:7e:9a:70:75:
                    92:dd:90:ca:f3:10:13:e6:c9:fd:92:0b:0e:91:63:
                    87:32:15:45:21:87:7a:cf:88:82:44:a4:45:a8:a6:
                    d6:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:56:39:2B:FA:B6:2E:B2:D5:64:7C:DC:03:BF:DC:02:10:92:DB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/ccb31a2c-2a5f-3cb6-aa7b-9cb4a01199a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5/adbe894e-fc78-4889-85f3-6253e78715e5.crl

            X509v3 Authority Key Identifier:
                keyid:B6:53:E7:CF:69:62:9C:B3:BC:CB:35:08:2D:33:06:39:E7:0A:AD:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/adbe894e-fc78-4889-85f3-6253e78715e5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.96.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:86:b5:31:81:a5:38:fe:5e:9c:a5:aa:94:e0:2e:a6:ec:1a:
         7d:8d:e7:4c:d7:c1:fb:78:ee:fc:74:c7:f0:c1:da:d0:96:bf:
         ac:8e:87:c2:6a:8d:10:89:43:81:69:6d:36:2a:8f:f7:97:5d:
         f8:4f:89:b6:b8:5e:41:8b:25:f3:0a:b3:68:52:bf:4f:33:a4:
         a8:35:0f:eb:8f:fa:0a:3b:8e:ee:40:c2:53:38:26:eb:ab:f8:
         84:2d:87:4c:a5:fd:10:47:9a:00:c4:ba:fe:33:79:1e:79:ce:
         16:16:d3:79:b2:ba:37:fb:15:41:38:4a:8e:62:8e:25:2d:3a:
         ac:df:c2:b8:bb:4f:41:80:9e:36:c9:ef:ca:fe:91:6c:40:49:
         fc:aa:a8:a1:3f:b7:ea:fd:ab:a0:10:eb:3b:07:0e:14:2f:7e:
         21:8e:ea:3f:f4:0b:57:20:6b:72:76:1f:a5:10:63:6b:25:96:
         f2:a7:d6:9e:6f:d1:f2:c2:6a:04:7f:32:cf:20:20:37:59:82:
         6d:57:ce:1d:60:7c:50:1b:47:0f:a7:71:d8:3f:d3:8a:ef:94:
         c5:80:b8:20:fb:47:6e:f4:4f:2a:38:3f:75:eb:b5:8b:b7:f3:
         c4:e6:4d:0f:19:43:8b:85:04:1f:6d:9a:b1:f0:e6:e2:12:bc:
         ca:16:9c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:01:11 2025 by rpki-client