Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa
File:                     40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa (raw, json)
Hash identifier:          HPtPzr8PwFlor9nRexBs94B7ZyweRuUv75BsS65SIyA=
Subject key identifier:   BE:1F:DC:97:90:14:6A:05:42:8D:0C:C8:B1:5B:CB:CA:7C:FE:1C:BB
Certificate issuer:       /CN=c0737391-61e0-4d30-9aa1-7caa06980033
Certificate serial:       010D0C9F432858489340AAC4C5187622AB791200
Authority key identifier: 4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     14041
IP address blocks:        204.228.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:aa:c4:c5:18:76:22:ab:79:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0737391-61e0-4d30-9aa1-7caa06980033
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=d6202921-2188-4757-bc6b-86d415751148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:02:4d:91:a7:31:a1:97:aa:e8:26:43:37:60:
                    5c:8c:b2:fe:48:eb:18:c0:db:db:11:91:dc:38:34:
                    2b:af:84:0e:c0:0c:35:67:5e:cf:05:47:3a:42:44:
                    50:63:e2:89:0a:97:59:03:84:6e:ec:e7:c1:18:64:
                    3b:9e:73:65:56:c4:28:86:8e:1c:5f:fa:7f:9f:4c:
                    10:d5:9c:11:86:47:95:4e:d3:ab:98:4d:a7:0a:83:
                    b3:be:74:f4:b4:af:fe:21:7e:09:12:22:a0:da:95:
                    3e:ac:9b:60:d8:9f:fd:cf:b1:65:26:97:bb:94:04:
                    36:3a:63:cd:af:61:9c:18:72:8c:19:a6:f6:8d:8a:
                    86:1d:5d:b2:01:0c:9d:f3:ad:c4:a5:15:59:d9:5c:
                    28:87:b7:ed:c9:33:71:b0:0c:f3:e0:be:ac:d5:82:
                    6f:b2:8c:f0:4c:66:2d:ef:f6:7e:e9:93:50:55:31:
                    80:aa:f1:e1:9f:f8:b0:7a:5b:5a:07:63:74:e7:17:
                    bf:c5:be:70:55:c1:65:ff:ab:74:df:18:19:2f:5a:
                    63:ee:be:f1:37:f4:a0:36:f4:d9:9c:0d:b0:93:f8:
                    e0:a4:67:47:d4:4c:28:92:4b:97:07:b2:f6:b3:f9:
                    0d:d6:5c:03:97:c0:9b:c6:ec:93:52:7d:d4:8b:a6:
                    e6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:1F:DC:97:90:14:6A:05:42:8D:0C:C8:B1:5B:CB:CA:7C:FE:1C:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/40c32eaa-28a8-3d8b-ae8f-af03b4f28837.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033/c0737391-61e0-4d30-9aa1-7caa06980033.crl

            X509v3 Authority Key Identifier:
                keyid:4E:F8:70:1B:25:5E:DC:B1:EC:18:C3:8E:C4:C3:EA:40:5D:51:63:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c0737391-61e0-4d30-9aa1-7caa06980033.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.228.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:02:d6:f3:41:48:21:8c:44:06:c4:ee:c4:8e:9c:1c:3e:8b:
         9b:8d:2f:84:aa:87:31:75:ed:56:22:09:72:ae:f9:91:1d:0c:
         81:59:f3:6a:a8:11:33:3f:15:1f:07:dd:9d:b1:ae:58:82:c7:
         f6:3c:07:5d:77:09:da:24:e9:df:0e:b5:e6:58:a8:3f:e6:fa:
         75:04:43:3c:bb:b8:e3:f3:84:c0:29:6d:60:d4:41:f4:07:e9:
         1f:8b:c3:c8:d0:4b:9d:d4:42:8f:8a:5c:60:fa:b9:5b:d5:8a:
         bd:e9:05:ed:ca:8c:37:6e:60:fd:37:49:ca:1e:be:50:e2:7c:
         d0:09:73:9b:bc:40:87:8a:bb:21:4a:f8:c8:31:40:8c:92:eb:
         e1:40:7f:83:26:c8:20:d8:29:ab:23:ce:83:e3:77:70:b0:46:
         ec:69:29:4e:7a:a3:32:aa:88:9f:f5:a8:9c:31:e2:6c:ae:1a:
         84:42:cb:8d:36:48:2b:ef:d5:a0:81:b4:43:1e:07:a9:f7:2d:
         f0:73:23:4a:4f:68:76:16:d5:ea:a8:b3:18:b9:91:81:70:f3:
         2e:a7:0c:96:f6:78:ac:2e:3f:07:d0:c8:05:6d:20:3e:0e:88:
         e0:91:51:f9:41:66:2e:08:f3:41:c3:e7:6d:f2:dc:a7:aa:c4:
         bd:a7:04:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:19:36 2025 by rpki-client