Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa
File:                     20ed0538-aee1-3f30-9484-bcbcb2febd93.roa (raw, json)
Hash identifier:          AQQK4lG+TffNmG/+IMpXjeDhDhRSgyVeg111MwLLFMA=
Subject key identifier:   C8:F2:22:3A:0B:1D:D6:27:60:4B:7F:A2:6E:92:A0:8F:25:E4:40:06
Certificate issuer:       /CN=a7a512b9-2c70-4de8-b33f-6b56d395dbb2
Certificate serial:       010D0C9F432858496A19AA0862018341F02059E0
Authority key identifier: E7:67:6A:D0:86:69:0C:3F:DE:FB:AB:E6:55:1D:C4:BC:70:F4:C3:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        192.234.104.0/24 maxlen: 24
                          192.234.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:aa:08:62:01:83:41:f0:20:59:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a7a512b9-2c70-4de8-b33f-6b56d395dbb2
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=197a43ef-e5a9-4985-a65f-30452f42c1da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:78:fd:de:88:79:8b:43:3b:39:07:1a:8d:1a:
                    b3:47:8d:a1:93:c8:9b:ba:4e:6f:3b:40:9e:d4:d9:
                    d7:cc:13:eb:db:e5:f6:6c:a9:5a:0d:2b:ea:4a:84:
                    c1:86:ea:33:90:32:97:38:18:40:ba:03:14:49:97:
                    b3:e6:e5:4d:5d:81:c1:81:10:fc:69:0a:c1:43:51:
                    1d:10:71:3a:a4:16:22:ac:3d:f1:ef:ba:a7:93:be:
                    14:5c:d9:d9:28:21:a3:1f:35:63:cf:f0:d6:5d:80:
                    5d:6e:bb:d6:bd:db:65:1e:fe:9c:4c:de:e4:1f:89:
                    db:d8:cc:8e:de:eb:44:7d:3d:c1:e0:1a:c2:83:eb:
                    bb:25:c3:5c:7d:7d:a0:6e:78:5f:6e:32:f7:7c:3d:
                    53:2c:d5:32:4b:dd:40:26:98:e9:5a:7b:29:68:50:
                    ca:34:6e:2b:f5:86:a9:91:86:4e:39:36:52:ed:96:
                    0d:4e:ff:ed:47:1d:4f:0e:bb:fa:e5:4a:bf:5e:bc:
                    6e:fb:aa:96:6b:7f:cc:1a:ba:cb:4e:2e:23:09:51:
                    ba:88:9c:6e:2c:8f:7e:47:8a:9e:f4:19:08:d5:c8:
                    62:de:ee:ed:cc:6f:1e:64:62:bf:82:3c:bc:72:30:
                    e2:73:4e:e9:fe:fc:8a:91:3c:34:3b:1e:59:db:00:
                    87:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:22:3A:0B:1D:D6:27:60:4B:7F:A2:6E:92:A0:8F:25:E4:40:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/20ed0538-aee1-3f30-9484-bcbcb2febd93.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.crl

            X509v3 Authority Key Identifier:
                keyid:E7:67:6A:D0:86:69:0C:3F:DE:FB:AB:E6:55:1D:C4:BC:70:F4:C3:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a7a512b9-2c70-4de8-b33f-6b56d395dbb2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.104.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ab:6b:27:44:43:8b:61:d3:05:0f:01:db:7e:a1:5f:a5:97:
         39:12:d2:33:b0:27:ef:27:e7:24:e0:6b:f7:6a:7f:32:60:ae:
         cf:9a:d1:9d:0e:d8:a0:01:0f:49:38:03:dc:09:88:1e:03:9a:
         c0:6b:f6:70:cd:f9:93:15:14:f4:ff:ce:db:be:18:79:08:84:
         8d:d9:a7:fe:db:7e:c2:d1:4d:aa:59:c8:16:ab:01:28:bd:9f:
         56:86:9f:d1:ba:88:4b:27:68:f6:ba:82:d3:41:a1:6a:41:7b:
         29:8b:8c:db:13:77:6d:a0:20:fc:42:ae:85:06:4f:4f:8f:e4:
         2a:38:53:0d:29:91:fa:dc:64:f6:d8:7a:78:4f:b0:96:26:43:
         8e:12:8c:24:53:ad:48:82:81:fb:e0:b9:90:cb:ff:fe:16:a5:
         1a:c7:17:b0:a3:b9:85:70:79:ab:27:ee:fa:a1:71:c3:50:7d:
         07:a9:54:91:03:6c:d3:cf:f9:a9:42:85:79:75:7d:d8:c8:79:
         5d:3b:eb:61:84:50:e7:8e:9e:f0:d1:ff:05:8d:9b:86:34:ca:
         a7:ed:7f:7a:92:95:8d:2b:8c:10:3a:7c:8f:ab:18:93:e4:b7:
         c6:32:25:7b:22:b1:ec:15:5c:d9:94:68:42:56:8e:dc:91:7b:
         bc:6a:1d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:35:55 2025 by rpki-client