Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa
File:                     eae0a58d-2ab5-3697-8268-38a3265b2c11.roa (raw, json)
Hash identifier:          GEBqllLvf7b1Dns1RU1owi23mS7bP5qD+Gxvu/Tmkkg=
Subject key identifier:   96:87:B3:13:4D:DA:63:A2:7D:0D:E8:08:DA:5F:61:AA:9E:2C:12:CB
Certificate issuer:       /CN=d9a6669b-6d25-4186-a757-3c289bdc8031
Certificate serial:       010D0C9F4328584A1E2AAD38FC10982B9669C700
Authority key identifier: EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     12022
IP address blocks:        208.83.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:ad:38:fc:10:98:2b:96:69:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d9a6669b-6d25-4186-a757-3c289bdc8031
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=eb1bb9a9-f29a-40ca-b7fd-f17743b87fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ec:5d:ea:5b:92:8a:fc:31:83:48:25:68:ee:
                    69:79:72:f9:cf:ea:7e:26:35:e7:a8:34:a0:77:f1:
                    3a:e1:3d:d0:9e:d7:cf:9d:8b:9c:62:08:e9:77:ba:
                    74:e8:24:29:93:4c:dd:0a:57:72:e3:0a:4d:6f:82:
                    c9:9c:0c:4e:a9:1e:fe:13:43:5d:68:5d:2a:ae:87:
                    25:11:9b:72:c7:4d:61:24:5e:73:04:af:17:bd:e0:
                    b4:73:46:31:df:1e:5f:10:1b:a4:9e:f9:00:2f:af:
                    f2:45:0f:dc:b3:aa:39:2a:26:e9:9c:69:9a:c2:ec:
                    a7:68:4e:91:73:8b:d5:d9:f0:cd:4d:e9:f8:27:e2:
                    45:7f:0b:96:23:26:92:10:2f:f9:f5:11:13:dd:7a:
                    d5:17:b0:6d:61:22:f9:24:43:94:d6:9b:36:c8:c3:
                    8d:25:52:f2:e0:c9:3c:52:ea:69:8a:4b:5e:a1:5b:
                    87:d7:8a:ef:a5:dd:da:c6:70:08:ad:5e:30:d0:d8:
                    45:7e:30:b6:1c:57:34:65:7c:95:ab:6d:2c:4d:f2:
                    ad:a2:82:df:e1:9f:8c:d3:53:bc:31:39:e8:bd:60:
                    75:aa:36:9f:d9:02:30:d1:72:60:2f:e5:91:0c:37:
                    64:bb:5b:36:e4:30:fe:c1:11:f7:3e:77:90:c5:a1:
                    5a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:87:B3:13:4D:DA:63:A2:7D:0D:E8:08:DA:5F:61:AA:9E:2C:12:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/eae0a58d-2ab5-3697-8268-38a3265b2c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031/d9a6669b-6d25-4186-a757-3c289bdc8031.crl

            X509v3 Authority Key Identifier:
                keyid:EE:52:10:2F:2E:67:DB:9C:97:4F:74:FE:95:EB:DF:49:EC:E4:6B:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/d9a6669b-6d25-4186-a757-3c289bdc8031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.83.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:d8:a8:1b:39:ce:c0:36:df:25:cc:b3:1b:08:45:29:3a:e0:
         28:01:f1:a0:7f:f3:8a:89:9a:00:27:8f:6c:4c:b0:da:ef:02:
         14:7f:27:69:ed:f6:ff:cf:a6:c7:91:62:e8:00:b5:d1:23:b1:
         80:a6:a2:ff:ba:eb:33:98:c1:64:c5:52:c2:e7:6e:f3:ed:4e:
         3b:95:3a:35:76:b6:69:f1:0b:95:08:2d:1f:5b:66:7f:2f:7d:
         07:92:b2:c5:2f:6e:63:bc:36:9c:de:2f:c9:55:7d:9d:ca:64:
         73:d7:09:dc:04:ef:ba:ff:7d:f1:6f:af:ca:0c:b0:8c:d4:0e:
         67:03:76:35:ff:8e:94:02:1b:f3:76:55:4b:ba:32:ff:e9:0c:
         8e:84:05:a5:66:4b:10:49:95:db:9a:a9:9a:78:00:d6:04:09:
         32:15:f3:83:7b:7f:41:4a:36:67:d0:6b:18:f8:dd:03:cb:d7:
         88:da:e2:b5:a3:34:d3:35:cb:f6:d5:97:8f:ec:9f:46:b1:24:
         7e:3f:8c:9a:a7:9a:58:56:0d:ab:9f:a3:4b:3a:67:8a:64:24:
         04:e1:ad:06:51:69:de:cb:7e:19:39:31:d3:3f:2c:77:59:5e:
         25:27:3a:6f:48:b8:56:31:41:dd:4b:86:82:6f:4f:38:76:3e:
         d1:29:26:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 01:24:17 2025 by rpki-client