Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa
File:                     4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa (raw, json)
Hash identifier:          L5FGv0aL5Vn6jieC6gfXxF0BWneJKWV5yW35CTwEzrU=
Subject key identifier:   C5:85:AF:03:E4:55:FB:24:45:13:4D:09:48:12:B5:56:98:20:11:12
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898672FD9E7F7C70E51356E0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa
Signing time:             Tue 15 Apr 2025 19:10:28 +0000
ROA not before:           Tue 15 Apr 2025 19:10:28 +0000
ROA not after:            Mon 14 Jul 2025 19:10:28 +0000
asID:                     0
IP address blocks:        208.220.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:72:fd:9e:7f:7c:70:e5:13:56:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:28 2025 GMT
            Not After : Jul 14 19:10:28 2025 GMT
        Subject: CN=07dae400-0067-4e05-83e3-7f8f6ed8b1cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1b:60:f6:d9:b2:14:40:55:22:c6:06:a4:3a:
                    36:83:d5:da:0b:b5:6c:0d:e1:07:2b:01:d9:cb:3d:
                    e3:86:fe:04:f3:92:36:73:89:38:79:01:ef:b2:8a:
                    fe:15:de:3a:08:e4:3e:c0:bf:45:7e:13:a0:f2:30:
                    3b:97:6a:07:5d:20:df:4e:ba:b4:52:bc:90:fe:82:
                    8d:6f:fc:a1:fa:9c:61:34:b5:e4:f0:d2:0b:ac:09:
                    6e:c9:08:a3:8a:dd:70:cc:37:49:8f:86:a3:7f:6d:
                    ba:54:0a:72:fb:7c:d3:98:a1:f5:33:4c:95:54:f0:
                    7b:f6:76:3b:2f:0d:d5:de:60:e1:14:f4:7a:69:7e:
                    9f:62:0d:d0:65:8e:fd:76:6e:62:42:b3:69:bb:e4:
                    21:bf:83:78:43:eb:25:33:6e:e5:95:7a:7c:41:b9:
                    39:a3:a3:75:fa:95:17:44:42:80:4b:34:3c:77:92:
                    78:1a:66:c8:5b:ad:2f:23:70:95:86:b6:7b:dd:91:
                    b9:06:69:52:84:9b:8a:9f:c5:25:ac:19:bb:83:70:
                    90:f4:ce:33:23:42:77:24:70:7b:72:40:0b:b1:fa:
                    f9:c6:e1:85:c5:8e:72:26:6b:34:d8:53:11:a9:4e:
                    1b:71:e5:cf:32:c3:80:c7:cb:f7:07:a2:ed:f6:62:
                    e9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:85:AF:03:E4:55:FB:24:45:13:4D:09:48:12:B5:56:98:20:11:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/4331ce79-c65e-3c2c-b7bf-82996f3dd211.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.220.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:54:8f:03:95:dc:8a:58:59:0d:e8:04:8b:34:b2:29:24:78:
         8c:54:1b:5a:74:fe:c0:66:e3:38:98:e5:4b:b2:81:b7:bf:88:
         e1:39:3a:cc:f1:f3:a0:a3:83:fc:56:fe:6f:ed:75:9f:32:1b:
         16:3a:a3:f1:3b:0d:ee:48:4a:8d:76:92:44:1e:96:a3:fd:10:
         4b:fe:29:b5:c0:4e:68:6e:b7:31:9a:87:0a:82:44:f0:c7:06:
         24:95:c3:b6:89:b2:34:5c:41:77:44:ab:23:cd:46:78:0a:e4:
         fa:39:9b:8c:0d:88:1a:76:79:cb:67:a3:af:ce:ca:13:ac:fb:
         5b:af:eb:62:ff:24:03:d4:1f:b1:cb:71:8e:c3:d7:a8:2d:7d:
         43:d3:40:29:cb:c2:3c:df:be:d8:0c:54:80:98:23:fb:ae:a8:
         86:87:7d:ae:67:21:3f:88:42:f9:f5:2d:09:33:f8:1c:be:b2:
         1e:87:9a:fe:da:b9:f3:3d:96:15:ff:c7:94:65:4f:40:be:a7:
         f3:8d:1f:16:e0:ae:2b:9f:c3:6f:92:9d:73:4e:0d:e3:0d:cb:
         5d:7a:f6:0e:dc:d7:3c:12:f5:1c:f7:ce:c0:d4:df:40:3b:d9:
         03:80:34:da:da:cb:57:9b:16:94:f5:49:31:52:29:2b:e2:e4:
         fa:34:dc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 12:56:23 2025 by rpki-client