Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa
File:                     2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa (raw, json)
Hash identifier:          xmdlmOyE4mqfN9lY2y/jBhNhHX2jXmwklQqBFExYu88=
Subject key identifier:   ED:68:07:C8:38:55:83:FC:50:75:D6:C3:33:B6:6B:D5:D3:6F:71:05
Certificate issuer:       /CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
Certificate serial:       010D0C9F4328584A268AC20CB1742CD3834C7CC0
Authority key identifier: 1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     11248
IP address blocks:        204.8.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:c2:0c:b1:74:2c:d3:83:4c:7c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=4cad7b3a-1119-4194-be7a-8a387587addf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:34:44:b8:38:9a:7a:2a:0a:50:c7:8f:55:df:
                    a3:8d:1f:51:a7:67:39:eb:fc:0e:e2:9a:81:64:98:
                    ee:94:a9:a8:5e:b6:2c:2d:3f:f0:4b:de:e7:0f:e7:
                    a0:dd:15:92:95:d5:cc:1c:c7:f6:18:df:54:ed:89:
                    5f:57:58:3d:96:d7:a7:26:f3:5f:24:82:f6:e7:ac:
                    cb:e8:d0:ab:ea:20:49:47:9e:fa:87:92:62:06:ac:
                    ed:ca:69:4c:00:77:92:8d:90:7b:50:29:21:ea:62:
                    ab:6a:e2:83:71:b7:66:e1:48:c3:63:b6:85:40:57:
                    82:a6:d2:9a:2e:6a:84:1e:60:86:ce:67:58:29:1e:
                    39:5a:08:81:47:7f:d9:bc:7c:98:0d:90:21:17:90:
                    38:0d:e7:0a:9d:68:cf:84:c2:d3:86:bf:3e:9f:67:
                    4b:87:97:41:34:92:72:69:7f:d5:33:e9:21:76:f0:
                    e0:4b:a0:48:30:9a:3f:e1:6e:0f:60:46:64:ae:a0:
                    6e:3c:f5:9b:2e:0f:b1:74:cb:dc:08:ad:1d:bd:56:
                    70:1b:10:b6:36:bd:f5:12:17:c9:dd:7a:3a:13:de:
                    71:28:2b:ed:c0:f2:d5:4c:c8:4c:6e:fb:17:dd:b1:
                    39:f0:65:cc:44:8d:cc:69:96:31:52:c5:b0:ab:ed:
                    b1:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:68:07:C8:38:55:83:FC:50:75:D6:C3:33:B6:6B:D5:D3:6F:71:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/2f173e27-e1d4-3728-b10c-7cf448eee7e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.crl

            X509v3 Authority Key Identifier:
                keyid:1F:0D:B4:50:CE:57:53:7D:8B:BC:2C:3F:9C:6B:89:13:10:19:08:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4ef679a-b314-4ad6-90bb-f7d2bfc0cda1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.24.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:d9:b0:40:e6:b7:30:0a:24:92:39:3b:e1:4e:6f:6c:6e:6c:
         94:db:60:3e:0c:4a:f7:8d:8b:7b:0a:95:4d:10:dc:b1:4e:fc:
         31:63:18:01:58:07:25:39:bf:f5:34:ab:fb:80:b8:7c:cb:fa:
         05:29:b6:fc:5f:5f:d7:bd:ed:ed:c5:8f:25:dd:1e:fd:1d:84:
         3e:00:e8:3b:cf:27:29:f3:ea:be:ef:37:b1:f2:12:d9:49:07:
         27:dc:ce:1a:9b:30:50:36:39:08:50:24:84:4a:8c:58:8a:cd:
         f5:30:f1:ae:49:ef:7e:e6:a5:58:8d:eb:76:75:65:58:6a:2a:
         05:db:70:2a:54:fe:cc:7f:26:d4:80:83:cc:ab:53:35:ab:a6:
         06:b6:de:5a:fb:65:9f:b4:69:6b:54:ba:76:15:cf:c4:eb:00:
         16:2e:87:1c:f7:6b:2b:76:4b:36:59:fd:b2:89:5f:0c:ba:52:
         c6:3f:29:c0:16:ca:1e:72:78:91:22:62:1f:bc:e8:d3:86:df:
         07:91:9e:76:52:f6:c0:42:54:ef:93:e5:77:4d:d0:0e:0c:e9:
         f5:63:9e:14:fc:0e:34:3c:2d:43:e5:09:7b:87:68:11:ff:85:
         d2:4f:54:3c:94:d8:8f:9f:b4:f9:7f:dd:f7:5a:78:35:79:80:
         23:e9:fa:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:17:56 2025 by rpki-client