Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/92baf38a-666c-3c6f-8c68-6bee34b902bd.roa
File:                     92baf38a-666c-3c6f-8c68-6bee34b902bd.roa (raw, json)
Hash identifier:          kgdjfdXdwc5C/M1GO/p/9f8Lu+ZtLJT87nVP8O8FRSc=
Subject key identifier:   4A:4C:03:13:B5:FF:55:CE:B1:A8:94:68:90:D2:26:0E:30:49:DD:A8
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285848F7C14168E7B14F019F086840
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/92baf38a-666c-3c6f-8c68-6bee34b902bd.roa
Signing time:             Sat 22 Feb 2025 14:00:52 +0000
ROA not before:           Sat 22 Feb 2025 14:00:52 +0000
ROA not after:            Fri 23 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        169.224.128.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f7:c1:41:68:e7:b1:4f:01:9f:08:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Feb 22 14:00:52 2025 GMT
            Not After : May 23 13:00:52 2025 GMT
        Subject: CN=2067b8ff-4f36-44a7-ad0f-b0cff8b66dcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a0:94:6c:62:c7:e0:10:71:fa:cd:ac:e5:b4:
                    61:06:86:af:13:3f:74:73:e1:eb:f6:e5:d4:8e:9e:
                    b2:60:1a:69:92:54:62:85:c8:f5:72:6a:8a:23:54:
                    ff:37:1a:f0:89:9b:36:91:27:3b:d1:23:97:2b:cb:
                    ff:18:da:22:63:a9:cf:ab:ab:1b:b7:2a:31:14:a2:
                    52:39:c4:03:1a:70:22:70:0d:29:fc:17:15:e5:2f:
                    a9:88:f4:91:e2:9a:63:2c:28:b2:e4:1e:68:9e:30:
                    72:f9:39:12:a3:ae:2c:8c:bf:68:a1:28:18:22:fd:
                    87:a5:ae:3b:26:d8:4e:cd:a4:85:70:76:bf:5d:33:
                    5f:b0:07:d5:51:bc:8a:89:07:ce:8d:67:24:76:c1:
                    4b:62:e8:a8:11:c0:c6:02:9f:2c:80:ba:c5:b5:ae:
                    33:91:f3:ad:da:26:07:ee:e4:49:fd:d7:dc:26:fe:
                    3f:d9:73:a0:20:34:19:ef:5e:60:25:4b:e7:35:25:
                    7e:99:52:0b:e9:1a:8b:15:9d:6d:fa:dd:cb:91:1f:
                    47:e4:0b:94:60:d7:a7:05:4d:7e:2a:b8:89:f9:07:
                    2e:02:83:e1:a7:02:a5:72:dc:f3:50:cd:63:d7:9e:
                    40:63:55:de:dc:66:ee:31:3a:a5:45:38:76:e2:21:
                    6f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4C:03:13:B5:FF:55:CE:B1:A8:94:68:90:D2:26:0E:30:49:DD:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/92baf38a-666c-3c6f-8c68-6bee34b902bd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.224.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:ed:c3:48:c7:a5:9a:d4:e9:b1:34:76:85:33:12:d0:6a:38:
         e4:6e:75:04:04:9a:59:ed:fb:e5:07:0b:f3:73:b3:13:b6:7b:
         95:1d:f6:ef:92:a0:ac:90:fd:dd:81:27:8d:89:94:e3:2b:53:
         6e:1b:11:be:4d:a5:00:e1:de:2c:4c:54:cd:bb:70:ee:02:b7:
         d8:aa:98:44:ff:16:c3:ca:e6:81:6e:b4:47:c3:70:8d:05:cd:
         89:c4:19:47:a6:d1:a3:3a:39:fe:d8:c1:d1:91:24:02:0b:99:
         99:89:5b:ae:88:62:dd:70:79:82:57:7b:18:24:4f:b6:94:9b:
         c6:f4:72:a8:36:c0:8d:cd:31:95:a5:1f:df:ed:5c:d6:90:c4:
         e3:5f:21:79:06:c3:6b:0f:ab:b3:c2:c3:17:66:c2:d0:e3:ad:
         21:22:87:59:2f:cc:6d:e4:7f:71:c2:d3:07:88:4b:fa:f1:3e:
         2d:8b:e5:98:12:7c:08:44:f6:23:44:30:93:ee:5b:e3:2f:3e:
         84:3e:e4:38:15:19:22:9d:4d:70:39:9b:8b:41:7a:98:2e:e3:
         05:90:21:9b:0e:65:b6:2f:34:6c:36:fe:20:55:04:04:e3:89:
         06:23:af:51:77:37:30:27:ca:01:74:34:36:bb:92:c3:cd:5e:
         db:87:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:19:28 2025 by rpki-client