Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/884071d5-2b9d-332a-9902-2f2a58f13d66.roa
File:                     884071d5-2b9d-332a-9902-2f2a58f13d66.roa (raw, json)
Hash identifier:          K3qR70u63KZc8K+LgqYMOsY839B0xFCP9xUz3ttjCIM=
Subject key identifier:   42:CB:D6:CD:AC:35:7A:2A:1B:68:A2:0D:C8:DC:B2:26:4C:DB:FB:50
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F432858492134303F19925B3BC709D580
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/884071d5-2b9d-332a-9902-2f2a58f13d66.roa
Signing time:             Sun 09 Mar 2025 10:20:39 +0000
ROA not before:           Sun 09 Mar 2025 10:20:39 +0000
ROA not after:            Sat 07 Jun 2025 10:20:39 +0000
asID:                     855
IP address blocks:        99.192.0.0/17 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:30:3f:19:92:5b:3b:c7:09:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:20:39 2025 GMT
            Not After : Jun  7 10:20:39 2025 GMT
        Subject: CN=c97c68d8-b6e6-4e8d-a9d1-266f4c8e1825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:53:c7:c3:90:ef:21:88:b9:c2:2e:0f:4b:0a:
                    57:02:be:75:b3:4a:7a:e2:9a:68:2b:7c:05:f9:f0:
                    69:82:cb:09:50:eb:c9:3b:73:82:71:1b:09:21:97:
                    b0:b5:03:fa:14:98:05:2c:1b:02:0c:dc:ef:54:fb:
                    0b:05:1c:98:c2:15:91:3a:46:47:73:47:e3:17:e8:
                    78:56:a0:fd:75:01:12:da:17:be:18:7b:ba:20:43:
                    fc:0f:38:ed:53:22:79:60:09:2d:6e:9a:a0:74:70:
                    31:92:22:1d:f7:7a:5d:fc:71:11:71:1c:f6:dd:7f:
                    e2:ca:1f:8c:ea:9e:ee:59:1e:ca:3e:6f:11:b2:6b:
                    14:bc:a2:53:60:8c:f1:0f:f9:b7:d6:ec:1e:ae:5d:
                    52:2c:e6:86:5d:38:e6:36:4a:34:dd:7f:6b:b4:05:
                    04:d4:ba:86:5e:9e:a4:f8:a0:e4:be:6d:d2:84:ab:
                    3f:73:00:7d:87:21:fe:41:9e:df:5f:cc:1b:23:fb:
                    7f:1b:a4:b7:52:eb:b8:ba:06:ff:50:ae:e3:57:a5:
                    fd:d9:fb:5a:66:b1:e4:53:ab:ce:80:d2:50:4f:bc:
                    66:8d:f8:f6:3c:42:40:f7:f2:1d:18:30:e4:34:3f:
                    53:97:c0:a2:56:3f:d5:c8:5e:98:22:d6:a2:79:c1:
                    3f:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:CB:D6:CD:AC:35:7A:2A:1B:68:A2:0D:C8:DC:B2:26:4C:DB:FB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/884071d5-2b9d-332a-9902-2f2a58f13d66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  99.192.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:ac:98:e9:ea:35:d3:7f:c5:00:fd:f8:b9:ac:60:78:3d:2e:
         78:71:30:a9:f1:b2:23:51:3b:6c:92:0f:69:99:a2:34:ee:3c:
         aa:bd:7c:62:da:7d:00:fd:0b:0d:cb:66:b7:1f:1e:15:c5:1d:
         61:35:1e:ec:28:57:0c:2e:32:62:d7:94:dc:29:d6:82:82:4c:
         63:fc:63:85:f5:66:0d:c8:aa:e0:5f:2b:e3:34:b6:cb:28:66:
         f6:20:c6:46:71:de:76:0d:ba:41:cf:e8:8c:14:04:1e:06:0f:
         a2:37:94:dd:b5:c9:1e:d7:62:a0:70:0a:9b:2d:6f:48:75:c7:
         e8:35:43:b2:bc:8c:f9:8b:ea:8f:8b:8e:13:aa:0d:9e:f0:bc:
         93:f8:81:c6:0a:c2:ae:59:90:41:b5:6d:f0:c3:9d:6c:ff:e3:
         67:a9:31:34:e4:87:16:b1:30:e0:fc:3e:d6:49:fc:cf:ae:24:
         15:42:28:75:95:f0:2a:0a:8c:aa:c7:89:81:c4:63:55:55:31:
         03:15:38:27:1a:7b:1e:21:84:a0:df:8b:a0:31:6c:cc:f9:99:
         4c:20:f4:92:1d:0e:f3:7c:31:45:b6:50:f3:93:f4:0d:ef:8e:
         50:5b:a7:c9:d9:2f:2e:77:38:b8:82:5d:1b:8e:4a:bd:21:51:
         17:c4:46:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 16:52:24 2025 by rpki-client