Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa
File:                     96140c95-b70d-3871-a74f-b5617a9e082f.roa (raw, json)
Hash identifier:          UeFopn+noK4VELnF0UZoHUGqH8hwO4dAtmvTjjugKPo=
Subject key identifier:   F2:92:41:74:EF:B8:F9:07:FA:DB:AC:0E:50:30:30:3A:34:F5:EB:0F
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849898669EF0E27133F1E4B24C0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa
Signing time:             Tue 15 Apr 2025 19:10:24 +0000
ROA not before:           Tue 15 Apr 2025 19:10:24 +0000
ROA not after:            Mon 14 Jul 2025 19:10:24 +0000
asID:                     17119
IP address blocks:        208.197.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:86:69:ef:0e:27:13:3f:1e:4b:24:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 15 19:10:24 2025 GMT
            Not After : Jul 14 19:10:24 2025 GMT
        Subject: CN=65df153a-cdf5-46d7-be04-9545a065c777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:39:78:17:28:f1:53:d8:f5:fb:83:1b:71:e8:
                    4b:2a:9b:d7:b6:dc:93:d9:4a:ce:37:ca:84:82:d7:
                    c1:5c:3d:be:b1:e4:35:4f:41:36:72:78:ab:01:12:
                    fe:bf:35:5a:f7:44:ac:4a:6b:34:00:ea:a1:af:bb:
                    69:2d:87:e6:72:bd:d7:ba:f8:45:4e:6b:52:7a:d2:
                    96:59:a0:e9:90:6a:4c:7c:d7:35:41:2a:3d:dd:47:
                    f1:87:3f:41:5d:a2:16:b8:52:b2:ef:aa:2e:fd:17:
                    23:68:97:74:aa:90:b4:b4:7c:2d:f7:ba:6a:f7:d5:
                    85:d1:6c:d7:97:c1:bb:0b:0e:53:88:9f:10:cd:be:
                    69:96:d6:8e:75:6a:21:85:b0:94:b7:36:3c:5e:e1:
                    3d:65:54:66:cc:bf:9b:14:6e:0e:ed:e1:02:d1:2b:
                    bb:21:8f:f0:5b:59:ab:20:74:ff:69:0a:4f:68:d4:
                    d6:3d:87:a7:db:d6:54:dd:38:d7:81:ec:32:d7:f4:
                    a9:d6:f9:0a:a1:5f:2d:21:0e:68:c2:a8:20:3e:dd:
                    3e:8f:a5:d3:17:bf:2b:b5:5f:c6:98:0c:d9:e3:86:
                    e3:5d:64:55:37:3a:d9:a0:d6:16:29:cf:1e:6e:c0:
                    23:98:35:8b:c8:c0:56:e8:28:3c:62:84:45:ed:06:
                    d5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:92:41:74:EF:B8:F9:07:FA:DB:AC:0E:50:30:30:3A:34:F5:EB:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/96140c95-b70d-3871-a74f-b5617a9e082f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.197.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:52:bf:78:4f:04:74:46:0b:79:65:21:dd:e2:5f:1e:ee:4f:
         3b:d6:d8:3b:e7:6a:63:bd:80:01:7d:2b:ba:60:b7:fd:3b:1f:
         b1:f6:79:7e:b6:c7:69:82:d1:8d:a1:0e:e2:c8:fb:08:66:30:
         72:5b:43:23:8f:be:fe:94:2d:54:a7:1a:40:44:25:3d:9f:5b:
         ea:17:c9:4c:3b:59:10:d4:73:a7:60:b3:bf:4a:86:61:0c:7e:
         bc:13:31:2b:8e:56:e7:a2:a7:00:c7:e8:7e:bf:c1:ae:d4:8d:
         a7:42:ef:c5:da:d5:9f:e1:3f:b4:6e:bd:c0:a2:a3:e5:4d:6f:
         16:6a:8d:30:60:c8:84:68:66:2c:a6:f8:2a:9d:62:f8:4d:f4:
         c5:95:04:c1:bc:31:50:53:c7:90:3f:c4:ff:95:81:26:d0:58:
         2c:cf:6d:47:b4:28:46:c0:a5:4d:72:74:5a:45:2d:cf:13:12:
         40:1f:aa:76:d9:a2:3a:84:8d:0c:7a:ab:37:20:9a:e6:fc:3d:
         01:23:79:27:f8:7b:09:ac:f7:be:5e:ef:c2:8d:4c:23:eb:1c:
         1d:9c:de:f7:fc:28:fe:c5:9d:f9:6f:07:d4:23:ea:51:d2:ee:
         07:04:7f:01:2a:3c:5e:ca:fc:6a:b6:b0:e0:2b:a8:84:d0:8d:
         9d:f6:5c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:58:49 2025 by rpki-client