Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1228e657-b025-3287-bb91-697aaf67d544.roa
File:                     1228e657-b025-3287-bb91-697aaf67d544.roa (raw, json)
Hash identifier:          Utd/4OaSIU9ViVJ0QtBmk154JuL97iXxMkHMLrFX7kE=
Subject key identifier:   6A:9C:35:86:D6:1D:0B:A1:97:A9:CD:F4:4B:B5:29:E3:BD:18:76:B7
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F432858491246CBC99EB184AA1515C240
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1228e657-b025-3287-bb91-697aaf67d544.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     3356
IP address blocks:        192.53.44.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:cb:c9:9e:b1:84:aa:15:15:c2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=1d9436fc-31b3-43f0-9f9f-92253ea4f8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:05:0a:08:cf:8d:71:fe:e8:4c:11:af:5f:1c:
                    8f:98:0f:21:3d:1a:3c:7c:54:c9:01:18:aa:12:4f:
                    ed:84:c9:af:c7:f9:a2:5b:4e:99:b9:66:13:3a:03:
                    c6:1f:f1:1e:d8:b8:a5:3c:e9:50:08:44:ac:97:b5:
                    55:3a:d3:d9:d9:39:26:6d:7c:8a:75:f9:bc:13:63:
                    ce:65:2c:f8:90:5e:10:dc:07:a1:41:a7:6f:f5:f0:
                    6c:42:94:aa:f4:bb:84:dc:39:86:65:5e:dd:b4:98:
                    19:8e:48:5f:12:48:c0:15:84:0d:9e:01:27:c6:c3:
                    41:18:90:5c:36:20:97:c0:03:ad:7b:1d:42:9c:32:
                    61:b5:0c:9b:3f:88:22:52:a6:ac:e9:fc:f2:bb:71:
                    16:38:7e:a1:ec:35:85:13:44:e6:31:53:fb:d7:56:
                    b4:75:cb:37:ad:f9:f6:54:ce:cb:c7:7d:3f:b1:6b:
                    7a:a4:84:e5:7d:50:09:3a:62:53:2a:e8:4d:66:af:
                    4b:95:2b:0c:a9:4f:af:ee:f2:15:f7:bf:dc:db:6e:
                    ee:87:08:77:17:64:b7:17:86:00:26:eb:24:ca:3b:
                    f3:9b:2c:f6:41:f9:19:da:87:82:a3:36:a5:5e:f0:
                    fc:40:fa:ee:27:2c:c3:ec:f2:f5:53:4e:59:03:84:
                    39:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:9C:35:86:D6:1D:0B:A1:97:A9:CD:F4:4B:B5:29:E3:BD:18:76:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/1228e657-b025-3287-bb91-697aaf67d544.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.53.44.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:3a:7f:47:e7:15:64:14:bf:52:f2:71:05:fa:f9:99:85:4d:
         f8:e8:bd:33:e1:46:ea:1d:85:78:94:cd:9e:e3:4f:69:8d:8b:
         f0:ac:bd:c5:ec:69:9d:d4:ac:a8:88:b3:f6:60:d7:25:a9:21:
         51:36:aa:9a:19:9a:be:4d:29:6e:c0:99:99:ce:9d:10:19:5c:
         8f:8e:ab:9e:59:60:5a:7d:8f:65:15:c8:06:8c:9c:04:14:5a:
         ed:e3:f0:1f:26:b9:80:1a:20:ac:14:2d:bf:e9:1b:ad:7c:50:
         fd:f7:0b:6e:3e:26:29:00:31:e7:bc:5f:b5:8a:01:dc:63:7b:
         46:30:b1:a4:0f:87:6f:a0:84:d8:79:ae:36:b0:94:47:4a:e4:
         de:98:6c:c3:f9:ca:65:56:1e:0d:11:af:5b:df:d5:ef:f0:27:
         f8:9e:be:f6:0a:bb:8a:78:78:c8:99:ab:ea:23:0b:80:d1:b6:
         6d:50:1b:c0:c7:9e:d4:87:99:f2:ab:80:07:d4:bd:bb:11:99:
         96:96:a1:82:10:c4:ea:67:fc:70:03:47:74:b5:e0:93:f8:18:
         42:88:01:34:33:74:fd:02:8d:5f:e8:e9:a9:57:31:87:af:08:
         9d:fe:ff:5a:f8:29:0c:c8:90:75:0b:09:92:b0:02:d1:94:66:
         eb:b0:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 13:45:22 2025 by rpki-client