Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa
File:                     28ea5e59-350b-3d56-b121-a1ecb503d959.roa (raw, json)
Hash identifier:          +YiFfzbABv97+9F1Li5V5u++qzzZirX05kmjs5EAamc=
Subject key identifier:   2D:A7:61:15:C5:29:98:93:DD:51:30:8E:3C:35:73:DB:39:BB:6C:12
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F432858490B4C1EBB2E6F94EC78320A80
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        164.92.64.0/18 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1e:bb:2e:6f:94:ec:78:32:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=50199cf5-3f0c-4fc6-8077-5a45a11c6d28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b7:b1:b7:f6:0a:4d:d2:70:e7:cb:e7:a3:68:
                    2b:5e:8d:17:34:e1:e3:b3:bf:4d:e9:46:7d:b0:fb:
                    6f:e8:ed:6b:9a:45:38:c3:79:5f:79:92:66:97:80:
                    98:6c:d8:bd:c8:e5:5c:29:f8:ce:12:b3:ee:51:7a:
                    19:2e:09:5a:3a:e8:fd:38:41:00:90:3f:dc:7b:e0:
                    9f:7d:4c:48:de:fe:ab:50:2b:a1:8b:5f:7d:ae:50:
                    f2:02:12:c7:ee:65:f5:7b:c7:9c:5b:d9:92:81:b8:
                    56:1f:02:54:ca:b4:bf:9c:e6:e6:56:7e:99:2c:27:
                    ec:ae:a9:de:26:32:02:c6:58:f7:86:99:09:88:c8:
                    89:68:e0:dd:db:bc:01:32:8e:29:9f:02:82:a4:47:
                    c2:83:a6:ca:3c:b2:11:0f:a9:eb:e9:47:c8:56:7a:
                    35:44:b0:b3:9d:27:57:73:f0:f2:68:59:6a:aa:70:
                    1c:a3:f1:b8:f8:4e:96:61:c7:7a:28:73:64:7e:5e:
                    51:11:46:ac:3b:27:f3:73:c5:26:49:2d:83:61:91:
                    47:0d:d5:7d:92:b7:e2:a3:dd:6c:1e:38:ba:52:64:
                    ba:7b:d7:df:8f:44:09:6c:56:13:7b:73:1d:60:c6:
                    d0:1e:dd:f3:c3:1d:15:97:db:1a:a6:29:c6:8c:2a:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A7:61:15:C5:29:98:93:DD:51:30:8E:3C:35:73:DB:39:BB:6C:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/28ea5e59-350b-3d56-b121-a1ecb503d959.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.92.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c4:5a:82:19:c4:ac:cf:0f:d9:79:4e:21:71:7a:ba:5c:6b:
         33:2a:88:bc:a3:04:58:56:b0:85:da:01:26:5a:ac:6f:86:6d:
         87:4f:04:2e:9b:2c:b5:a5:a6:06:4a:97:9b:25:70:25:9c:b5:
         76:74:12:09:3a:b9:09:db:65:38:77:c2:64:32:de:50:b2:df:
         3b:d0:2f:de:e1:b9:d8:66:14:c4:93:16:c7:f7:5b:01:c7:83:
         69:bf:73:51:56:d7:77:32:e3:26:89:c5:a1:1f:5a:ba:94:7a:
         0b:39:90:ef:ec:ed:4b:81:07:5d:9c:11:c6:69:75:d1:5c:af:
         5f:7e:3e:c6:93:59:49:07:49:e6:a3:f5:2c:d6:ae:4e:2b:8f:
         82:5b:73:ce:c0:73:ee:92:ae:54:1b:48:a9:29:df:9f:fe:76:
         19:6c:85:84:6d:3b:40:3a:b5:cf:1a:64:21:9d:31:73:16:e8:
         32:45:7a:3e:58:35:7a:04:2a:c2:ca:b7:cf:93:96:3a:32:bd:
         55:a3:08:ac:1c:3b:69:f6:57:de:9d:07:ba:b3:3a:11:31:57:
         9e:4f:9f:91:c9:12:5a:4d:11:5b:fa:c9:ba:31:19:81:73:a7:
         c3:3c:e5:d7:a2:87:ea:1c:d5:b5:42:2a:5f:7c:60:87:51:62:
         3c:5a:80:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:03:29 2025 by rpki-client