Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f9c95abd-b689-3842-9cea-93094e8c8820.roa
File:                     f9c95abd-b689-3842-9cea-93094e8c8820.roa (raw, json)
Hash identifier:          6NAFtfgk7n0SBC+VHfxo88TbHqrGe2zeoeG4Sz0XZyI=
Subject key identifier:   95:06:A1:21:56:9F:99:ED:B9:9D:1E:3E:15:0F:75:0D:02:B6:6D:E9
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F432858489075FC6DD956D857099EA840
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f9c95abd-b689-3842-9cea-93094e8c8820.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     1742
IP address blocks:        199.94.32.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:fc:6d:d9:56:d8:57:09:9e:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=1b1d5f08-5b4e-4153-8b34-6ed1ce22cdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:02:4f:10:0c:53:81:62:65:6a:63:7d:6c:e6:
                    c5:7d:e5:02:e9:aa:66:63:2b:dd:a1:0e:d1:db:c7:
                    62:a9:5a:4e:cf:bf:32:a1:91:9a:f8:0f:e0:95:09:
                    5d:fd:be:fc:7a:17:c7:c0:19:25:7c:30:6a:67:e0:
                    f5:82:0e:18:a1:f6:02:d6:d8:0f:4f:49:84:2e:ab:
                    f5:a3:27:e6:cc:f2:ff:53:c1:7a:de:c8:3b:29:92:
                    18:80:3d:3a:18:3f:48:49:a7:7f:92:be:71:4c:a6:
                    ae:30:dd:a3:03:8f:11:0c:4b:b7:e3:d8:c6:fe:f3:
                    47:67:75:5f:a5:9c:1c:76:0c:67:53:48:21:1f:ff:
                    72:e6:fc:a8:96:c8:5a:c0:df:77:cb:43:ce:7a:3e:
                    62:90:a2:cb:cf:c8:ce:fb:4b:40:ba:db:48:9f:19:
                    26:d9:b7:f4:c4:ac:d5:d5:94:0c:e3:b2:27:80:37:
                    a1:df:b5:fe:ec:47:9c:9d:02:df:e5:aa:40:62:82:
                    86:17:47:e2:86:9a:d2:db:08:0a:0e:39:7e:65:70:
                    af:82:51:1e:aa:dc:f5:ed:21:25:1f:16:d6:7e:40:
                    c5:56:b4:35:37:93:32:b6:29:b8:2e:1a:95:cc:5c:
                    dc:f4:bb:aa:1c:c3:76:da:02:e9:f0:0a:6c:4f:d1:
                    ed:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:06:A1:21:56:9F:99:ED:B9:9D:1E:3E:15:0F:75:0D:02:B6:6D:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/f9c95abd-b689-3842-9cea-93094e8c8820.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.94.32.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ee:da:13:c8:38:a2:90:24:ae:a8:9a:c3:d1:79:9f:84:10:
         3a:ff:67:7d:89:67:fe:a6:6a:68:76:d6:f5:e3:04:ea:e9:05:
         ea:1e:45:89:db:8d:b1:2c:8f:46:79:09:7b:89:88:2e:a6:b2:
         20:7f:bc:c3:83:70:9d:90:78:fd:02:45:44:5f:7b:f2:d3:77:
         10:43:5e:63:cf:7c:70:dc:22:ea:e5:67:ca:79:24:31:1a:fe:
         f6:57:b1:46:c8:e9:cf:9f:f4:79:7a:34:4e:6f:29:aa:30:d7:
         1f:b2:b7:4c:39:91:f6:9d:4d:48:da:c4:73:f7:00:e3:21:8e:
         22:6f:e4:3c:ef:7b:04:e9:8f:62:14:88:68:33:cb:d8:d3:43:
         23:59:26:0d:18:33:0f:1e:10:cd:83:d5:61:7a:af:37:1a:eb:
         33:cb:53:43:3e:aa:82:cd:b1:89:d9:2f:ba:19:de:37:54:f4:
         4f:3a:de:36:3f:3a:3d:d7:cc:f4:4b:0d:f9:a3:b1:4e:3f:7e:
         e5:f3:19:ac:b7:01:30:da:c7:81:f5:95:8d:18:83:4c:bb:85:
         d8:0e:6b:89:2c:47:d0:ef:b5:81:28:c7:2c:a8:91:71:d6:e7:
         5d:59:53:f8:9e:e8:d6:5e:2a:52:22:38:6b:ef:da:8c:f1:97:
         3d:eb:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:43 2025 by rpki-client