Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d083ae5c-e90d-357d-bef9-188370db9183.roa
File:                     d083ae5c-e90d-357d-bef9-188370db9183.roa (raw, json)
Hash identifier:          mpgaQ3jJfPUwN06dQbPZeJpkO+GfTedGIgPwgOzCW/U=
Subject key identifier:   2D:5A:19:02:45:65:D9:CB:F4:A7:42:56:F4:A2:99:E8:27:3B:75:FA
Certificate issuer:       /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial:       010D0C9F43285848ECF4B8B9AE7A8FD5AE669D00
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d083ae5c-e90d-357d-bef9-188370db9183.roa
Signing time:             Tue 18 Feb 2025 17:10:44 +0000
ROA not before:           Tue 18 Feb 2025 17:10:44 +0000
ROA not after:            Mon 19 May 2025 16:10:44 +0000
asID:                     20365
IP address blocks:        199.119.232.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:f4:b8:b9:ae:7a:8f:d5:ae:66:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
        Validity
            Not Before: Feb 18 17:10:44 2025 GMT
            Not After : May 19 16:10:44 2025 GMT
        Subject: CN=c7ec37e2-cd75-4a80-b612-ecb599407699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:aa:6d:47:7f:ec:08:b1:26:00:ce:be:68:bc:
                    6f:5d:a5:46:ee:bc:88:23:e4:c3:9f:f4:9a:c4:00:
                    48:fb:54:d9:73:7a:c6:1e:59:c6:f9:e9:97:9a:f7:
                    da:3b:b6:18:21:f0:30:52:69:68:be:65:03:ea:86:
                    28:0d:b9:9c:33:c0:f1:7d:d1:7f:eb:57:58:98:a9:
                    b9:45:04:74:cd:65:af:4b:e3:5d:ff:f8:6d:78:d2:
                    43:9c:cd:ec:10:0e:9d:68:22:70:4c:f7:21:40:21:
                    5c:be:dc:90:cf:c8:b1:a9:b9:44:32:26:40:f1:c1:
                    2b:5a:ba:86:03:8d:5b:1c:fa:31:46:88:a3:03:cf:
                    7b:90:cd:8f:0e:9a:58:ea:41:bc:a9:6c:e1:de:10:
                    84:43:1e:d4:e4:24:5b:0d:f3:de:4d:03:f8:32:23:
                    0e:d6:6e:95:9f:36:06:33:ee:6d:ad:e4:c7:1a:ae:
                    d5:6a:61:77:55:bc:c4:7e:72:fc:19:6c:3b:d0:d3:
                    cf:62:fd:7e:e7:db:68:b8:51:4c:48:56:03:54:0a:
                    df:e3:bd:13:37:49:92:6f:63:20:d3:7f:30:de:8f:
                    97:d4:85:51:d6:81:a8:9c:0a:9f:02:a8:12:4f:73:
                    94:39:23:58:1c:88:cc:06:98:b3:88:b0:42:c2:16:
                    50:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:5A:19:02:45:65:D9:CB:F4:A7:42:56:F4:A2:99:E8:27:3B:75:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/d083ae5c-e90d-357d-bef9-188370db9183.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl

            X509v3 Authority Key Identifier:
                keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.119.232.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:70:3c:4b:d9:1e:4c:1c:96:79:31:dd:9a:4e:47:03:5c:6b:
         26:0d:0b:05:9c:33:a4:2f:f8:de:58:4d:00:fa:90:95:32:f3:
         56:fc:1f:c8:85:51:b6:d4:f7:bc:02:96:e8:8c:dc:bb:49:39:
         f0:09:50:0e:26:78:83:6e:4d:bd:e5:08:52:dc:32:73:3a:35:
         ab:04:0e:47:c8:17:e9:f0:56:97:e9:2f:9e:7c:b6:42:c4:7e:
         38:80:03:a9:d5:66:60:4e:ed:25:13:9c:d0:e5:83:3b:be:91:
         36:e2:b0:f5:ac:2e:a6:92:5b:68:4c:d1:bf:d7:89:da:32:a3:
         89:79:e3:ac:a5:df:98:a1:45:b6:bc:a7:d3:05:2b:49:b3:01:
         a5:1e:59:63:04:d9:bf:c3:fb:d2:8e:cd:12:b5:7a:8e:38:5b:
         83:f0:ef:d4:15:73:75:64:f6:15:28:29:ad:dc:69:74:54:24:
         24:c6:16:4f:e8:a8:c8:6d:5c:fe:a1:98:9d:dc:24:05:b1:6d:
         cf:00:e5:7a:ae:5c:0f:29:6c:a4:89:00:60:18:ef:07:69:37:
         b4:b9:0a:be:b8:97:72:bb:7b:84:33:b0:01:40:48:43:c6:9d:
         3d:e3:d4:de:6c:d2:1b:9d:41:3f:37:57:42:7f:e7:fd:fb:8a:
         43:87:da:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:21 2025 by rpki-client