Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/919ddb1e-c59e-3a06-9ddf-ab9fcde92ef8.roa
File:                     919ddb1e-c59e-3a06-9ddf-ab9fcde92ef8.roa (raw, json)
Hash identifier:          JvCnBn0KAdEX9qaooo1OIojifM+OrejWB76ITrK42No=
Subject key identifier:   CF:4A:CA:C1:FE:16:AD:32:39:4C:99:E8:D3:66:F8:31:06:C0:F6:99
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A84123821E94A2AFDF8745EA0
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/919ddb1e-c59e-3a06-9ddf-ab9fcde92ef8.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        208.117.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:38:21:e9:4a:2a:fd:f8:74:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=dcc815fd-1354-4e01-9110-e70c4a99f200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:82:97:1b:f1:3c:6e:e0:04:13:d6:9d:54:9d:
                    1f:54:2d:b4:3f:5b:41:7b:a3:75:10:3a:74:1d:d6:
                    16:0b:12:bc:06:2d:2c:3e:7e:1f:2e:79:0b:ad:f0:
                    c8:07:4c:06:a3:7f:87:de:59:c5:37:ba:43:d5:27:
                    d9:bb:39:81:7b:46:71:63:60:cb:14:8d:10:85:52:
                    11:23:cb:9c:81:0f:b0:8d:ae:50:33:f1:04:de:79:
                    ef:09:0a:8b:01:73:55:36:5d:90:e8:13:91:fc:10:
                    2a:72:55:9e:66:3f:22:90:44:d1:4b:38:b9:23:03:
                    38:13:b8:c2:88:20:1d:39:94:89:b1:38:7a:fc:cf:
                    17:d7:64:0a:76:1b:ac:94:9a:ba:76:9a:d4:0f:9c:
                    ca:db:27:fd:b1:83:3a:ed:f1:db:ed:55:c5:34:dc:
                    29:0f:8c:bd:20:5b:65:01:8d:34:e1:71:4c:97:2a:
                    95:c2:91:ed:c5:57:74:55:ee:55:53:8f:8d:99:b5:
                    d3:e6:8a:b0:e1:26:08:5f:e0:7e:d5:c1:3d:01:1c:
                    63:18:a5:4f:52:05:b6:fd:37:31:0f:1b:b7:0f:df:
                    bf:31:49:e4:73:dd:0a:e4:07:39:6d:98:61:ad:40:
                    8c:1c:10:ff:85:e3:7b:85:2f:dc:8f:0b:4e:01:a0:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4A:CA:C1:FE:16:AD:32:39:4C:99:E8:D3:66:F8:31:06:C0:F6:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/919ddb1e-c59e-3a06-9ddf-ab9fcde92ef8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:28:06:d1:26:15:65:a3:d5:49:d2:ce:11:3b:c9:56:eb:33:
         03:62:31:63:c2:5b:0b:17:5f:59:a6:59:e0:b9:e4:bc:c1:b6:
         97:62:be:77:ba:b4:9b:9b:92:2e:fd:a4:20:a4:c0:02:aa:3a:
         89:3e:ee:3e:e3:86:c9:af:fa:02:2c:6c:f9:b5:d9:96:83:46:
         d7:f6:9d:80:dc:1d:fa:60:f4:39:b4:ba:e6:50:3c:a7:32:86:
         0f:c3:fc:de:01:b3:da:af:63:59:e3:cb:df:96:57:40:2b:36:
         a9:56:c2:a2:68:3e:52:a9:80:61:51:76:b8:c4:50:87:f1:2a:
         d3:e7:3b:f6:a9:3e:b0:12:a5:99:e6:f4:9d:65:15:06:9d:9d:
         42:3b:97:4d:a1:34:1d:c1:af:58:75:b5:d0:bc:36:32:23:f8:
         46:ad:43:63:9c:f4:40:c8:78:00:6f:a9:c8:20:97:4f:4e:f9:
         02:e3:6d:20:45:5d:50:90:34:5b:34:2d:f5:78:9c:2c:4a:ec:
         bf:00:22:88:ee:7c:91:fd:cb:ba:b4:6e:f9:3c:66:c8:0b:77:
         24:0e:4b:ac:10:32:44:a4:cc:fa:57:c0:9e:63:dd:ee:ca:51:
         70:cc:4b:55:76:7e:be:aa:b8:e0:80:e5:bf:87:78:1f:76:37:
         b6:95:a1:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:38:08 2025 by rpki-client