Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa
File:                     92b92da0-8eaf-3821-81eb-7969dd0e6741.roa (raw, json)
Hash identifier:          yEuzEc61HiX50uHW/JYV9o0GJ3ivnbpI8nHSP2vnVcg=
Subject key identifier:   2B:F4:3D:BA:54:6B:78:56:6E:0D:F9:B8:50:61:34:81:46:8A:56:8E
Certificate issuer:       /CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
Certificate serial:       010D0C9F43285848B8F0C6A517782026D4D0B6E0
Authority key identifier: E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        168.86.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c6:a5:17:78:20:26:d4:d0:b6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dc32e52-7919-4ad4-a486-4bed23a5c3ab
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=502d7c3d-81d3-401e-be8e-6e6cd5722cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d4:b8:67:8d:fb:48:78:16:d5:2d:f3:47:01:
                    e5:49:b9:e4:7f:9b:78:1b:5a:fe:1f:ae:29:48:bd:
                    c9:d0:4a:30:b5:0b:18:18:d7:83:16:e0:d8:58:98:
                    45:1a:1b:79:bd:23:ff:e1:e6:fd:69:d1:c7:2c:8a:
                    0b:60:35:47:82:56:6e:7c:71:53:74:02:f8:1c:13:
                    83:cf:cd:13:c7:5b:1b:8b:04:82:b4:fe:93:ea:31:
                    5e:4c:3a:d7:82:b3:cf:f8:12:6e:cb:ed:7a:36:43:
                    2b:14:16:3d:49:86:bb:2c:cd:c2:26:32:32:d9:e8:
                    2a:e4:3e:e4:22:73:e1:ab:fb:55:19:50:4e:5c:8e:
                    d1:4a:0f:96:b0:63:e0:e9:7a:d3:fd:24:f8:14:f9:
                    10:52:9f:38:5f:a2:b9:26:e2:d6:a8:67:b4:37:a9:
                    f6:5a:5d:e8:ca:cd:8b:69:fe:1c:a2:7f:88:0e:d6:
                    1c:53:c9:52:a9:09:b2:91:5d:b3:36:31:2f:6d:6e:
                    fb:a7:94:12:5c:85:f5:db:09:9d:9d:29:9f:17:43:
                    e8:48:38:e3:32:1f:46:34:3e:69:91:cc:89:c1:ca:
                    8f:b4:a1:62:db:f5:74:60:a9:7d:dc:d1:fd:72:2d:
                    e5:59:6f:57:2c:22:ed:66:b7:40:aa:15:ab:12:76:
                    fb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:F4:3D:BA:54:6B:78:56:6E:0D:F9:B8:50:61:34:81:46:8A:56:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/92b92da0-8eaf-3821-81eb-7969dd0e6741.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.crl

            X509v3 Authority Key Identifier:
                keyid:E5:FD:14:F3:B0:8F:71:D2:1F:E9:CA:63:A4:F4:70:53:F8:F0:02:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0dc32e52-7919-4ad4-a486-4bed23a5c3ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.86.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:35:de:3e:ff:26:5a:5b:a9:6f:36:2b:98:89:c9:6d:2e:3a:
         fe:b1:0f:e1:1d:6d:e8:e1:4e:9e:fc:87:c8:28:95:33:fd:69:
         e2:aa:48:ba:97:8e:8e:29:cd:7f:d6:56:ec:97:d0:85:28:af:
         21:b4:95:15:0c:1f:51:b9:64:dd:5e:84:88:c8:f6:4e:bd:ad:
         2a:a1:f2:34:70:f2:f6:6e:2b:8b:1c:97:77:5f:c1:72:38:b9:
         19:cd:32:3e:4f:6f:f3:db:37:1a:9d:bd:c3:62:1a:de:16:fb:
         9f:21:5d:aa:c6:03:16:6c:68:2a:90:07:5c:e6:be:30:13:37:
         81:35:24:9c:7d:43:e5:4f:c7:69:bd:48:12:d3:37:78:9d:ed:
         08:c5:19:e2:ad:60:93:80:48:98:04:02:c3:07:e7:c6:83:14:
         e3:82:dd:9e:8c:46:4e:b6:be:b8:42:c5:de:6d:6f:cd:64:0f:
         25:7c:9f:d1:fe:55:39:de:88:ec:e1:0f:37:dc:3c:42:1b:11:
         3d:f4:a5:9e:1a:14:6d:15:f3:7d:06:9b:2d:45:43:bf:43:1d:
         61:d8:1a:e4:64:c1:99:bb:01:fc:ff:5b:2e:4b:30:bd:5e:32:
         15:98:39:bf:bc:fa:30:70:33:8f:be:2c:e5:ae:80:68:80:ab:
         b1:48:17:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:45:01 2025 by rpki-client