Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa
File:                     93d5c845-6382-3da3-ba5b-a89b4547f349.roa (raw, json)
Hash identifier:          d1+1wnQKTc+BtcikVY0kRbJOEr7ADGuDv0c98l6f4Zk=
Subject key identifier:   51:C9:53:2F:E8:73:C5:BF:73:69:25:6A:00:C9:5F:71:70:54:C6:A3
Certificate issuer:       /CN=674c2e16-6a5c-4ae2-961d-f9d291126728
Certificate serial:       010D0C9F43285849DC8FC9A1D1377457BA6D0B40
Authority key identifier: E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     5466
IP address blocks:        192.56.21.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c9:a1:d1:37:74:57:ba:6d:0b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=674c2e16-6a5c-4ae2-961d-f9d291126728
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=216bdd54-a414-42bd-b01d-46f9e40d6bae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b6:4b:6e:17:0a:96:d5:94:23:6c:c5:b0:4c:
                    0c:d7:e2:9e:23:5e:b1:99:4e:75:b5:4b:15:43:c5:
                    7d:dc:15:91:5e:4d:4e:9c:75:c5:cb:b0:42:56:7f:
                    f9:ad:94:d2:06:68:9c:d2:02:29:3f:3e:5b:44:f6:
                    f2:3a:74:af:12:a7:bb:12:92:06:8f:96:1f:10:42:
                    68:ee:25:a2:59:6b:57:9d:f3:cd:e9:ed:39:6f:18:
                    c7:f6:d6:51:d6:85:d7:eb:cf:cc:13:28:fb:c5:45:
                    51:71:9f:1a:4b:9c:3f:7f:41:1e:8b:34:a9:c5:b3:
                    62:2c:c6:70:c7:1f:b0:bd:df:53:30:d1:2c:2e:5e:
                    76:14:85:d0:84:3d:a7:d5:2e:d2:b7:ee:60:14:8e:
                    c8:3e:9c:80:7c:81:37:a0:a5:b0:18:76:71:77:54:
                    a9:74:35:3e:10:60:31:d7:1c:e5:5d:c3:ca:7b:64:
                    a6:05:cc:78:b7:ee:1f:09:ea:86:68:7b:1d:97:f2:
                    cc:dd:63:5c:ae:af:6f:cd:33:63:b2:10:7c:e6:2f:
                    86:0c:71:c9:40:d7:76:2d:85:7f:74:01:b1:ff:2b:
                    6f:a4:93:0b:c4:f9:a0:0c:92:8d:b7:bc:77:c9:17:
                    ee:03:67:86:f3:f9:61:d3:fd:e4:d7:b3:cc:cd:05:
                    6b:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C9:53:2F:E8:73:C5:BF:73:69:25:6A:00:C9:5F:71:70:54:C6:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/93d5c845-6382-3da3-ba5b-a89b4547f349.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728/674c2e16-6a5c-4ae2-961d-f9d291126728.crl

            X509v3 Authority Key Identifier:
                keyid:E5:CD:70:D7:DC:C5:BD:7C:3F:F0:91:FD:5F:FF:08:45:23:8E:EA:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/674c2e16-6a5c-4ae2-961d-f9d291126728.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.56.21.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b1:93:d1:1e:a2:97:ea:ae:c3:86:8c:4f:7a:cb:6c:7b:a2:
         b2:2f:49:15:b6:a2:76:f2:a3:12:70:32:f1:f4:83:1b:ff:2c:
         fc:9a:64:3d:92:1d:1f:e1:c8:63:47:d2:fc:43:69:ac:c8:16:
         fb:41:93:a4:4f:7f:9c:30:75:01:cc:f3:96:4b:71:0c:12:17:
         3d:26:9e:32:d1:f6:d0:32:ac:b9:6f:ad:ef:ed:dc:12:e1:10:
         1d:b5:db:02:8a:a7:5d:39:66:62:3f:5d:28:bb:1b:fe:a2:1a:
         a9:17:cf:74:75:cf:cd:3c:82:d4:5d:ff:45:e9:31:12:f2:26:
         b7:26:16:a2:be:a1:2c:04:9e:08:a7:d2:e2:40:83:9b:b6:f0:
         90:58:70:c9:1a:03:50:fa:1f:55:2d:4a:9c:63:55:e6:e8:28:
         36:57:8a:ed:c0:5d:51:11:a7:5d:f5:8a:59:d8:f8:07:c7:44:
         10:96:da:8a:ba:49:8b:2a:71:f1:65:18:34:64:51:a6:25:f4:
         9a:ca:7a:27:78:d7:1e:16:74:13:53:53:76:82:88:6b:26:9e:
         81:90:f1:d0:0d:04:60:fd:0c:a7:cd:09:9d:8e:fd:f1:60:f8:
         6d:39:f1:b4:25:36:a7:af:d7:98:8d:d4:c0:0d:17:2e:75:63:
         8d:b1:b3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:52:19 2025 by rpki-client