Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa
File:                     4648e92b-636a-3832-863a-2c8a659263cc.roa (raw, json)
Hash identifier:          e04CGZNPNtZxFPCxarRevg+Oa3ZJjJg7xBDP6xCf78c=
Subject key identifier:   0B:68:A1:E8:67:A3:D6:B2:93:42:37:4A:E8:AB:2D:AB:AC:DA:A8:FE
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F43285849C95449BB7654454F315AC000
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa
Signing time:             Thu 08 May 2025 15:41:08 +0000
ROA not before:           Thu 08 May 2025 15:41:08 +0000
ROA not after:            Wed 06 Aug 2025 15:41:08 +0000
asID:                     396584
IP address blocks:        198.17.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:54:49:bb:76:54:45:4f:31:5a:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: May  8 15:41:08 2025 GMT
            Not After : Aug  6 15:41:08 2025 GMT
        Subject: CN=bbe65c9f-e8fe-4656-9a7b-c68ca1c75dc0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:2f:26:bc:53:9c:94:d4:62:86:2e:bd:72:f2:
                    70:8a:a6:33:26:a2:35:01:ad:21:f3:22:d3:60:e6:
                    90:e7:d9:86:26:7b:99:4d:82:48:34:5f:38:2c:aa:
                    4c:9e:04:c0:43:9f:bd:55:cd:36:5b:4d:9d:a1:98:
                    86:74:4f:5e:d0:3b:70:01:35:4d:cb:63:f9:22:ae:
                    27:8d:27:0e:98:29:9e:40:d8:8b:d3:6b:47:3e:7f:
                    bd:78:9a:68:6b:3e:b0:6b:12:74:3d:62:0c:fd:c1:
                    a2:88:1e:eb:aa:8f:cb:58:6e:0b:45:6b:e8:58:9c:
                    cb:60:11:ee:27:32:ef:f8:d2:a7:35:2a:ca:dd:3f:
                    38:76:0d:8b:8d:47:be:73:33:2f:26:8a:35:96:14:
                    bb:e3:87:72:ce:aa:1d:38:59:b9:de:6f:28:67:05:
                    b0:3c:c3:d0:bb:c9:8a:15:e7:a2:ff:30:db:be:7a:
                    11:94:c5:14:eb:f0:a0:97:fe:ec:94:57:f7:50:96:
                    6c:e9:8c:49:25:78:99:b5:60:03:17:c1:0a:58:82:
                    ad:2b:16:4e:c9:76:eb:01:0c:2e:19:96:16:ed:33:
                    2a:b8:aa:d7:fe:1d:72:da:cc:bc:1e:05:1d:b4:de:
                    04:fa:08:c6:89:ae:c7:5d:be:1b:a1:82:9c:bb:ba:
                    3a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:68:A1:E8:67:A3:D6:B2:93:42:37:4A:E8:AB:2D:AB:AC:DA:A8:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/4648e92b-636a-3832-863a-2c8a659263cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.17.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:cf:f0:7a:08:2d:9b:55:c4:e1:45:a6:b0:90:bb:2a:c7:a2:
         da:20:e3:77:e1:90:73:64:41:fe:2f:58:8a:89:5e:a6:25:9b:
         5d:7b:8a:44:dc:48:59:4e:55:d1:3d:45:ae:b2:9e:65:95:c8:
         a8:07:6e:cc:39:b4:fc:28:54:7d:f3:89:ec:42:7e:4c:de:1f:
         56:77:9b:88:3c:20:68:84:57:cb:71:52:a5:78:55:f0:54:42:
         ea:15:61:f1:5c:0d:ef:6b:11:5c:64:a5:39:df:7e:52:28:87:
         be:87:95:7d:65:61:9f:cc:56:49:f5:02:d7:b5:32:f2:63:22:
         32:36:0a:4f:64:0a:56:69:80:86:bc:30:36:88:f9:96:3f:21:
         e3:5b:e1:af:0d:8e:02:47:84:46:09:74:6c:fd:4a:c4:a8:22:
         e9:6c:78:29:ac:a3:b4:56:22:c5:86:87:7c:0e:09:8c:8b:0f:
         3a:21:a2:ea:e8:9e:9e:ca:3a:d8:ae:8d:70:a1:b3:75:2a:32:
         70:66:26:73:6a:d6:91:47:a1:ed:23:ee:54:88:1a:dd:96:77:
         a7:a6:18:a2:0c:00:d0:3a:78:d1:2b:c5:30:fb:1d:cc:0d:54:
         53:71:95:cb:6f:bb:f5:6d:64:1e:a4:cb:1e:70:54:e7:24:78:
         38:76:f5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:08:44 2025 by rpki-client