Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa
File:                     6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa (raw, json)
Hash identifier:          Tv5Wc+KtbwwQyTf8aVbRDGk2lX3RASesrjFrHc+OT+A=
Subject key identifier:   0D:B0:D7:4B:85:7F:4A:1D:A9:9B:F5:57:10:9F:D4:46:53:EB:4F:3E
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858490CB16AB186DA8C70E052EC80
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa
Signing time:             Sun 02 Mar 2025 02:00:40 +0000
ROA not before:           Sun 02 Mar 2025 02:00:40 +0000
ROA not after:            Sat 31 May 2025 01:00:40 +0000
asID:                     32696
IP address blocks:        8.19.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0c:b1:6a:b1:86:da:8c:70:e0:52:ec:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Mar  2 02:00:40 2025 GMT
            Not After : May 31 01:00:40 2025 GMT
        Subject: CN=458c65d8-4efc-46bb-a413-abac505516bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f8:9a:93:e4:48:af:95:54:71:70:55:7b:e2:
                    ab:43:e0:ca:4c:ca:50:9f:37:d3:6d:1c:4e:43:bf:
                    1a:a4:93:c5:26:93:d5:90:ba:c6:28:50:bb:0c:e4:
                    df:3e:53:43:cc:2e:b9:d9:5c:04:5f:c3:cd:07:53:
                    88:12:a4:61:8b:34:06:c0:c4:61:d4:98:b8:39:b6:
                    8c:2d:31:d6:39:05:72:d2:a4:45:2e:fb:a1:c5:aa:
                    70:85:5d:fc:b8:d6:51:ae:2d:06:25:8c:02:45:6f:
                    02:dc:c4:0e:61:0d:fa:ae:90:17:ef:0d:02:53:95:
                    7c:61:29:9c:8e:2a:37:98:d9:58:a8:7d:2a:80:5b:
                    16:3c:05:3a:98:1c:2a:65:c6:33:ba:67:e3:1a:30:
                    24:15:54:db:0d:27:f3:02:a2:19:91:6f:7f:a6:8d:
                    12:4d:9d:71:db:e0:c9:a2:7c:a2:6e:f4:f1:87:38:
                    be:3c:22:5b:3c:0f:5f:40:b8:07:2c:38:60:6c:70:
                    38:27:15:e6:d4:cf:73:07:bc:ca:51:56:b4:db:00:
                    60:bf:2b:8c:32:0e:5c:1e:fd:ab:14:6e:b3:9f:3c:
                    f0:ac:b7:96:51:ff:1a:cd:66:9b:e3:79:01:cb:44:
                    4b:69:e7:16:3b:2c:47:22:f1:6f:e4:6a:f5:0f:be:
                    4e:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:B0:D7:4B:85:7F:4A:1D:A9:9B:F5:57:10:9F:D4:46:53:EB:4F:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/6444af44-c35b-358b-b7c1-9f0304ad3e1f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  8.19.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:1d:d2:61:ec:9f:3a:e2:21:82:03:47:5b:7e:0c:a6:26:c2:
         ea:44:f1:a3:45:f1:ae:63:48:c6:7f:ef:cb:3a:6b:5c:fa:8a:
         7d:6d:ac:78:c8:0a:18:16:2f:ba:7a:44:e4:14:e4:a4:fe:89:
         10:24:53:c4:22:38:70:0b:9d:3a:e7:94:4d:42:36:35:db:a0:
         d1:0b:c6:bf:83:bc:ed:94:cc:49:e9:19:5c:b8:b9:c5:06:75:
         af:06:d1:9d:95:8d:b4:ed:62:e4:ff:63:2b:e8:86:ea:43:76:
         f6:f4:fb:32:78:da:c6:37:63:6c:4c:f0:b6:e5:de:89:a7:b0:
         8f:56:70:cc:b4:49:e8:1d:b5:a6:64:ff:85:61:f5:ca:ea:7f:
         d8:5d:a3:88:58:50:4b:ca:e9:bd:84:59:3c:cc:b6:0a:b9:b9:
         20:81:f9:42:a5:93:1b:80:64:d3:aa:95:7c:2a:84:ee:ea:b7:
         32:be:e7:bb:5a:2d:ec:ac:dc:70:f7:ba:59:93:4c:36:76:0e:
         a8:b8:e3:23:0d:86:9d:c9:b3:93:bd:3f:e4:30:6f:0d:58:9c:
         01:6d:db:21:c0:7e:9a:1f:49:77:75:66:4a:bf:21:af:f0:50:
         b1:df:14:d9:92:03:4b:43:e9:bb:0a:0f:b3:61:6c:a4:aa:d1:
         cb:79:2b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 08:38:09 2025 by rpki-client