Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ffcdce72-43df-3b34-b575-f02c0690966d.roa
File:                     ffcdce72-43df-3b34-b575-f02c0690966d.roa (raw, json)
Hash identifier:          FKv2Pmo6VBzzGiQThQb1PfU9TPnyxb3lMQprLwOIZXE=
Subject key identifier:   E0:B8:1A:C4:5B:15:92:3C:7E:31:01:D3:84:36:41:E9:09:2B:83:12
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849350E8BE7A17C41BED157D380
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ffcdce72-43df-3b34-b575-f02c0690966d.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     20231
IP address blocks:        192.62.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:8b:e7:a1:7c:41:be:d1:57:d3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=10ba5d2f-a135-4084-a5be-5f9b3dae73b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:49:69:b2:e8:83:f3:2c:3e:f4:5d:e8:ac:a7:
                    a4:fa:9a:7e:47:a3:12:6c:27:38:87:c8:07:f1:c8:
                    86:7f:36:b9:a1:cf:f5:20:c2:96:41:f8:15:09:7d:
                    99:2b:a4:c3:b6:7c:e3:66:ff:f6:2e:eb:85:2a:86:
                    a8:72:c3:8e:17:e3:ba:c5:ea:2c:35:48:64:ae:5c:
                    e3:9c:70:0b:f1:41:b6:d4:25:3a:84:6d:48:2f:8d:
                    fe:cd:b9:dc:9f:63:54:3b:88:72:c1:28:52:b4:3b:
                    d6:27:26:a8:80:6c:ae:f9:fc:29:05:62:26:28:1e:
                    be:cb:df:4b:29:ac:65:b7:01:c9:15:21:1e:e2:33:
                    8e:04:93:f9:bc:0f:04:22:57:92:f3:10:aa:34:23:
                    e1:63:fe:ec:17:d2:ec:4d:41:d1:b7:e1:c2:26:44:
                    98:d7:10:fb:98:ce:25:50:5d:cb:75:11:58:f9:43:
                    ec:eb:3c:c2:10:97:e6:1b:28:a8:90:55:df:22:7a:
                    d4:d5:44:17:67:23:e3:53:63:03:83:87:26:4a:5c:
                    ce:6a:67:5b:89:00:01:53:2d:60:0d:69:07:f1:63:
                    fc:68:89:8e:26:82:c1:fc:82:90:5e:1a:28:94:86:
                    f8:b6:a1:3f:80:87:48:2a:db:ae:fe:96:0b:e2:87:
                    d7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:B8:1A:C4:5B:15:92:3C:7E:31:01:D3:84:36:41:E9:09:2B:83:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/ffcdce72-43df-3b34-b575-f02c0690966d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.62.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:b7:b4:67:a9:85:fd:e6:59:3d:d7:ad:d9:bd:fc:a4:35:ed:
         f9:fd:a8:54:03:66:8a:fa:8d:b0:63:83:0f:e7:4f:9a:1a:cd:
         17:1c:90:f4:c5:07:90:ca:d3:74:de:4e:1b:34:a5:bb:81:2b:
         93:36:79:e6:93:51:86:41:c2:f4:cd:65:fa:e3:a2:fe:92:75:
         4c:33:05:46:a3:33:b2:76:47:b0:4b:e6:b5:93:ae:35:69:b8:
         ed:1b:29:63:2a:8a:92:b0:0e:e8:fa:7b:b4:52:d1:48:be:a4:
         ec:bb:e7:9c:ce:c5:cf:d8:93:92:22:6f:01:0d:23:57:de:82:
         20:e6:af:14:db:de:88:61:1d:c6:f2:a6:29:df:4d:c0:a3:d4:
         73:0e:3c:1e:c4:d2:da:4b:e7:3d:85:cc:20:e1:b0:90:ff:d4:
         16:ad:97:bf:0e:3b:1b:5d:2f:24:99:89:51:1a:20:2b:6f:46:
         76:da:f8:cc:6f:7f:b1:5c:8b:ec:e8:7e:9d:2f:55:98:8a:af:
         37:f8:0c:4b:4c:44:8a:d1:64:74:9d:fc:5a:3d:a1:62:2e:a9:
         2b:e7:4e:54:30:9f:b2:d0:da:94:b5:10:ab:90:24:b3:74:83:
         32:70:03:49:8e:8e:08:c3:07:02:b0:90:cf:96:13:a2:d2:db:
         0d:4a:f7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:16:08 2025 by rpki-client