Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2d8da8c2-eb22-3dd8-acf3-1cc62127dc47.roa
File:                     2d8da8c2-eb22-3dd8-acf3-1cc62127dc47.roa (raw, json)
Hash identifier:          EIiSP6pvWlbI+RptD4TuKoYsz7D77l0BMgKCW6/7lnE=
Subject key identifier:   C1:0F:4C:E5:75:1F:8B:9C:A6:A8:D2:60:0C:AA:89:D2:A1:5A:B2:AB
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858493AA3DF1617E37F98B863A820
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2d8da8c2-eb22-3dd8-acf3-1cc62127dc47.roa
Signing time:             Tue 18 Mar 2025 13:00:50 +0000
ROA not before:           Tue 18 Mar 2025 13:00:50 +0000
ROA not after:            Mon 16 Jun 2025 13:00:50 +0000
asID:                     394089
IP address blocks:        134.231.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3a:a3:df:16:17:e3:7f:98:b8:63:a8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Mar 18 13:00:50 2025 GMT
            Not After : Jun 16 13:00:50 2025 GMT
        Subject: CN=30f17006-ae62-496b-9aae-e5d4f6cec1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:5f:79:39:9d:63:58:90:64:3f:31:bd:f5:19:
                    4c:be:8f:c5:0c:73:8f:ff:72:74:34:8c:ba:47:fd:
                    09:d8:fb:8a:e9:44:e6:09:87:2d:79:2c:72:1f:aa:
                    5b:5c:79:fe:82:fb:fc:cc:a4:7b:ef:01:6d:29:69:
                    3f:76:44:ac:38:7e:b0:95:df:9a:a5:3f:4e:97:c0:
                    0e:f4:ae:c1:82:e1:4e:ab:16:c1:d4:6f:e7:04:90:
                    e3:36:0f:c1:83:6d:15:e9:1a:9d:39:2c:0d:ad:8d:
                    30:86:a9:4e:e5:38:8c:05:8b:9f:b4:ad:f3:11:37:
                    ff:40:8d:16:76:9d:ed:de:9e:31:36:ab:ef:e7:5a:
                    89:e7:79:30:e6:65:51:70:ed:71:a4:74:99:99:3a:
                    e3:cb:a3:2e:35:c9:93:97:d6:f7:61:1d:e6:a1:18:
                    24:31:93:3f:6b:a3:05:1f:9b:aa:da:8c:de:8a:d8:
                    0a:c8:a3:c6:9e:4f:76:ba:dd:28:0c:85:9e:bb:de:
                    a0:86:4c:1c:c8:ba:93:13:52:3b:d5:cf:d0:4b:74:
                    d5:ff:12:5b:2a:8e:62:19:0f:70:94:48:7c:8a:db:
                    ed:d5:d2:32:95:05:d8:67:4d:cf:a4:2a:79:95:9b:
                    a5:dd:c0:94:b3:a1:31:a6:08:d1:3d:ca:a2:7d:1b:
                    67:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:0F:4C:E5:75:1F:8B:9C:A6:A8:D2:60:0C:AA:89:D2:A1:5A:B2:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2d8da8c2-eb22-3dd8-acf3-1cc62127dc47.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.231.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:ff:c9:b8:6e:46:5a:cf:d3:a1:c8:cb:f9:f9:60:dd:e8:12:
         8c:6a:ed:65:ee:1a:e1:61:b3:3d:0c:7c:a9:a8:f3:8f:f4:d7:
         80:b9:13:d4:a4:a3:91:28:cd:70:21:fc:20:3b:64:87:f4:48:
         70:db:e1:5b:7d:23:d3:40:dc:2f:b5:b1:ef:f4:1e:e6:e1:cd:
         73:8d:b4:92:76:e5:4d:18:70:5d:50:c2:d3:5b:32:d5:06:62:
         92:2c:4a:b9:3f:90:62:5f:8a:aa:e4:7e:ee:ee:e4:63:d7:7c:
         e8:ba:ac:b8:d9:f8:39:48:b8:f3:6c:43:84:37:4d:fa:d6:1d:
         62:2d:e5:cc:c5:01:d8:7e:c0:3e:dd:10:0b:1f:ef:b7:ae:c1:
         bc:09:49:78:c7:21:3c:a8:1d:c9:4a:ef:7e:e8:be:34:c2:a2:
         30:c5:e9:65:74:be:c4:20:17:b5:83:c0:d6:5b:a7:b5:0b:76:
         02:58:de:a5:fd:81:bb:0a:1b:96:47:ff:84:47:7d:12:93:16:
         81:84:37:88:ec:aa:15:f0:5c:76:8e:ad:5e:f5:4f:ba:bc:c4:
         e2:15:7d:54:72:6b:0d:cd:97:cf:88:ff:75:3f:81:d9:2c:eb:
         8a:a7:51:7c:71:a5:c5:cf:88:34:39:74:24:35:e3:26:cc:b6:
         53:5d:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:29:16 2025 by rpki-client