Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
File:                     91115247-b441-3259-a41f-3fbc5e5d5de0.roa (raw, json)
Hash identifier:          vdjzaQdK3/WY4LUG963EhyzmGLST8YG+ub+7lvwZS9g=
Subject key identifier:   0C:43:EC:73:C4:73:7B:77:3D:8B:4B:5F:8A:2A:CB:C3:33:91:93:CA
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F4328584902EC03D6E2BB20C338096200
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     209
IP address blocks:        64.192.95.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:03:d6:e2:bb:20:c3:38:09:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=4d6d0cf2-52be-49b1-a317-05bb0882e8e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:08:d2:df:57:ae:d6:4a:9e:89:87:01:86:e0:
                    c0:e6:87:d1:7c:85:60:64:30:57:3e:d3:e0:8d:7b:
                    c1:fc:fa:7a:a1:c0:a2:3f:e4:af:62:c1:7d:13:e2:
                    bd:c8:fa:2f:3a:b8:c9:66:8d:8e:09:be:f9:e0:35:
                    84:63:fa:27:81:18:8b:ac:42:95:d6:85:4f:1c:89:
                    ae:1a:93:f6:d0:62:12:ec:c3:a7:68:c0:9e:7b:96:
                    ef:11:51:53:e4:3a:1f:f2:7a:23:40:c5:85:1f:18:
                    fa:ac:62:fe:b0:c7:6a:e9:70:04:b6:f0:22:52:03:
                    75:49:99:ad:24:b2:b5:54:19:c2:23:ff:c1:2c:70:
                    af:61:57:60:5d:e1:23:56:b9:0d:79:be:39:d2:86:
                    8b:ae:32:eb:71:e0:05:fb:bd:36:8d:13:fa:69:b5:
                    40:41:a5:23:a1:05:c5:ae:9f:c2:1d:1c:24:69:fe:
                    bf:82:5f:54:97:fa:14:8b:31:df:41:9e:43:fe:9b:
                    98:ec:c6:5f:4d:ab:b6:f1:5b:0a:dc:0d:5a:b1:88:
                    f5:e3:1d:ad:50:94:2e:7f:5f:67:ad:ec:5a:4a:04:
                    d6:99:09:1b:aa:5f:c2:b6:41:65:eb:e0:c4:40:ac:
                    a6:d6:51:63:99:cb:ab:2f:bd:1e:1e:fc:99:33:2a:
                    a5:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:43:EC:73:C4:73:7B:77:3D:8B:4B:5F:8A:2A:CB:C3:33:91:93:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/91115247-b441-3259-a41f-3fbc5e5d5de0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.192.95.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:68:ed:45:f2:b3:bf:ba:d4:0e:45:a4:10:75:f3:f2:4f:e4:
         98:c5:42:6c:c9:56:db:88:bb:5b:2b:82:ad:e3:fb:e5:cd:70:
         bc:c0:36:ae:b7:3f:4d:ec:c9:78:2c:a4:dc:fa:1c:c4:dc:a4:
         36:08:e6:7e:c1:ee:82:ed:81:0a:f2:42:ab:e8:39:b5:3c:0b:
         5c:ff:20:a4:f5:79:b8:cb:74:45:a4:4d:04:e8:0a:86:e2:21:
         e6:7d:56:0e:c7:c3:ca:42:08:40:53:7d:61:c9:d4:c5:55:3b:
         a1:b3:42:82:1f:cc:2e:88:e6:f0:a0:10:86:a5:9a:7d:a9:e1:
         7c:fa:30:e0:0e:2e:b9:23:ae:05:40:2c:57:98:19:ff:4e:09:
         bc:ff:4f:7a:55:a1:9e:1e:8d:dd:37:66:f0:5d:7d:37:88:2e:
         d9:ca:bf:2d:bb:fd:d8:ae:d5:23:cc:bc:c2:58:ef:d2:a7:7d:
         d7:d9:b3:f8:28:86:a4:9d:e4:4b:15:93:08:d2:50:51:5c:98:
         8c:38:18:c2:11:b6:8f:7c:cc:9d:bc:48:77:ba:e8:71:25:2b:
         36:c7:c1:d7:2f:7d:7a:85:dd:a3:22:f3:39:b7:5c:92:a4:17:
         4c:6b:a9:c4:03:7c:03:7e:65:3c:f5:24:e7:0f:1f:4d:32:8f:
         a5:77:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:16:18 2025 by rpki-client