Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa
File:                     806d23d8-c66d-37f4-8690-3d333fee3c39.roa (raw, json)
Hash identifier:          gNiyiyYBXGlbn2zDU0+3SPSJKnq+Lo0votCoBJHb0b8=
Subject key identifier:   4F:63:47:DB:27:75:6E:5F:DC:20:73:AB:8D:7B:CB:A2:4E:13:47:CC
Certificate issuer:       /CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
Certificate serial:       010D0C9F43285849A089E8E5A010B652B84D88C0
Authority key identifier: CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        216.71.112.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e8:e5:a0:10:b6:52:b8:4d:88:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b355aa3-cf28-4a53-96c5-ddf3bb800418
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=e3bf2346-41fd-4742-9a31-af63dc0f0f10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ad:30:0f:c6:1b:e4:4e:83:e7:70:f4:ba:45:
                    07:5a:82:61:e4:27:96:5f:b7:cc:11:3b:06:59:31:
                    7c:2d:20:fc:ef:ec:01:0a:83:68:54:1e:2d:04:e1:
                    db:4b:b6:f3:51:e7:9b:60:af:7b:82:70:d0:bd:38:
                    5d:dd:65:b9:a8:63:3b:16:82:f6:c6:dc:bc:64:50:
                    02:6f:09:31:d0:9a:0f:ee:ef:ad:1d:a5:21:cc:5a:
                    c5:d0:6a:f2:ba:28:0d:f7:ed:e1:32:82:49:9a:4e:
                    4a:e4:af:a3:10:64:6b:14:d3:39:e0:4d:1c:81:af:
                    8c:b8:11:f8:7a:e8:6a:4b:46:a3:b3:b8:51:95:e5:
                    f9:1c:f8:13:e6:b6:d7:e3:8f:37:4a:4a:15:19:bd:
                    47:65:d0:28:93:8f:1a:bd:49:58:cf:6f:fd:e0:7c:
                    0b:a6:0c:a4:8c:01:55:66:f2:62:0f:c8:ba:a7:e3:
                    12:67:fb:a0:5f:16:cf:da:eb:ff:0f:ae:df:e0:e1:
                    f7:39:f1:0f:1e:05:06:74:9b:86:c4:19:57:3a:46:
                    db:b4:07:a0:7e:08:b0:32:3b:2d:d0:1f:82:7c:c4:
                    fb:3f:26:77:c0:58:2e:2c:d0:20:a9:98:44:31:44:
                    52:7d:ed:9b:cd:e5:aa:98:e7:51:e8:ad:26:81:e2:
                    c9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:63:47:DB:27:75:6E:5F:DC:20:73:AB:8D:7B:CB:A2:4E:13:47:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/806d23d8-c66d-37f4-8690-3d333fee3c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418/8b355aa3-cf28-4a53-96c5-ddf3bb800418.crl

            X509v3 Authority Key Identifier:
                keyid:CB:52:A8:91:CC:74:8F:8E:32:A5:73:ED:0F:1A:83:CF:41:F5:24:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8b355aa3-cf28-4a53-96c5-ddf3bb800418.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.71.112.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:41:52:c0:98:de:c9:c2:d1:71:bd:34:e7:5b:b1:f8:c2:d4:
         dd:ed:a2:cd:be:14:3b:a7:47:74:b4:87:a3:58:bd:ff:26:73:
         e3:16:c8:5f:85:12:c0:71:a4:64:68:57:7e:a2:5e:11:cf:bc:
         c8:05:d8:e0:b7:88:0f:92:b2:2f:82:4e:ee:eb:50:59:3b:df:
         4f:33:2d:18:df:a7:8c:c5:ec:e3:3e:70:8b:02:85:b7:86:71:
         8a:be:d7:d6:ef:04:96:4c:cc:4c:71:a2:1c:9e:fd:7e:88:87:
         05:e5:10:0a:0b:45:a8:0b:d4:52:2e:a1:c3:36:fe:54:4b:4a:
         5e:7c:1c:cc:12:56:17:a4:cd:82:de:0a:88:5d:39:73:3d:ed:
         27:2a:9e:3b:32:18:90:45:92:43:d7:86:d5:fe:ca:56:87:1d:
         8b:67:91:ef:aa:27:0c:30:48:2b:7b:b7:06:34:be:3f:84:35:
         5f:72:3d:8e:59:4b:88:ea:ca:a7:5d:b1:5a:e0:61:d2:e2:b9:
         a1:5a:cc:7f:4d:c5:11:fa:46:4e:9c:03:3c:e7:c0:96:5f:18:
         2f:bb:6d:f1:54:cb:ac:7f:25:5c:54:c3:db:30:08:6e:c6:3d:
         dd:08:23:ba:9e:6b:68:04:9a:f8:52:2a:de:40:e7:fe:8e:54:
         11:47:42:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:49:21 2025 by rpki-client