Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa
File:                     54a0cf80-064a-3965-a2cf-152399e7a2c7.roa (raw, json)
Hash identifier:          BUOKALxg8E9nPQxOVxc4vmtzlGC/60jgpiWCijCpbDc=
Subject key identifier:   90:92:FB:42:56:33:34:63:06:39:C8:96:B4:EB:3C:A3:7D:D0:A3:2D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285848FFDB23438CE65D9A36D1C8A0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa
Signing time:             Tue 25 Feb 2025 11:39:33 +0000
ROA not before:           Tue 25 Feb 2025 11:39:33 +0000
ROA not after:            Mon 26 May 2025 10:39:33 +0000
asID:                     30036
IP address blocks:        192.119.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ff:db:23:43:8c:e6:5d:9a:36:d1:c8:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Feb 25 11:39:33 2025 GMT
            Not After : May 26 10:39:33 2025 GMT
        Subject: CN=4ffa6bb8-0dd8-4425-bf99-91148c8ab7eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:8b:f2:2f:c3:fa:dd:a7:e9:f6:5c:89:27:
                    80:2a:b2:1f:2a:13:f7:6b:19:a7:74:bb:8c:ef:61:
                    39:84:5e:5b:4b:56:f6:a7:08:a1:9d:a1:e1:da:ff:
                    79:7f:c5:8d:29:89:da:00:2e:7b:32:c4:6e:8c:b6:
                    33:e7:5a:4e:87:cd:94:19:05:4d:73:21:06:87:44:
                    4b:2f:89:2e:3a:92:52:0f:79:1e:02:52:c7:aa:bc:
                    d2:af:df:f2:6a:fe:fa:53:a2:d4:9a:c3:b5:15:87:
                    11:84:77:d7:77:c5:11:21:ae:39:e4:8f:79:2e:53:
                    5e:74:11:6d:17:9c:7b:f8:54:09:4f:9b:1c:59:4f:
                    d2:83:9e:a8:55:c4:24:6a:5b:4c:b7:d8:60:d4:96:
                    f6:20:ec:64:e2:99:30:8e:3f:ca:6f:5d:67:c7:0e:
                    06:9b:9b:e5:39:34:31:36:fa:53:c0:7f:2d:aa:ae:
                    5a:39:79:7e:db:22:c4:c8:6f:b2:8f:a7:85:13:25:
                    ff:96:14:24:52:26:09:11:1b:5e:43:ba:34:b0:7e:
                    01:bf:b8:9d:a6:88:df:b4:86:7a:84:53:6c:d7:a1:
                    fd:00:8f:f3:94:4e:4c:be:84:9a:2f:31:fa:19:57:
                    42:f9:e8:b2:95:5c:5d:04:3b:ad:c0:6c:61:88:c4:
                    5c:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:92:FB:42:56:33:34:63:06:39:C8:96:B4:EB:3C:A3:7D:D0:A3:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/54a0cf80-064a-3965-a2cf-152399e7a2c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.119.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:85:64:b9:ae:6e:8f:bd:dd:5f:5b:6d:d7:9b:99:52:f8:38:
         82:90:9f:0a:ac:2b:19:b6:c4:d5:3d:33:62:a7:0e:c3:e9:45:
         88:37:cd:ff:97:c2:77:d0:e5:ea:ac:e8:1e:44:36:5f:c6:7b:
         84:89:9c:4b:33:71:18:b6:ea:bb:92:a3:cf:d5:b2:ff:23:c6:
         9c:6c:83:53:da:0c:06:da:9e:09:8b:81:86:7a:fa:26:51:5a:
         10:ec:ed:6b:6b:c9:c0:65:eb:0c:95:31:69:9c:77:99:35:2e:
         a7:32:75:f7:53:9b:f4:32:48:54:af:65:d5:82:5b:2f:7d:e6:
         1a:fb:ad:3d:9a:d6:a1:ac:70:4d:da:bb:1e:57:06:61:11:88:
         61:49:31:44:38:ba:a9:44:ef:74:91:2f:b9:81:d8:5d:0b:b6:
         3e:e5:ac:92:8c:fa:cf:e2:e7:00:b0:56:29:73:33:98:c3:53:
         95:ea:9d:b6:1c:8e:56:18:15:44:db:04:a3:01:fe:87:c4:e6:
         c6:b9:04:a5:3c:c0:e7:09:ac:1c:61:89:e0:d1:ce:31:e6:1b:
         9b:0a:a9:ac:e1:ff:38:33:96:37:1e:11:41:28:1b:86:93:1f:
         79:8d:67:c8:bc:60:e2:1d:53:14:8f:22:d4:2e:81:1a:32:88:
         f9:87:b2:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 00:03:46 2025 by rpki-client