Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d586c751-4e0e-35f1-95ff-160fb4dfe302.roa
File:                     d586c751-4e0e-35f1-95ff-160fb4dfe302.roa (raw, json)
Hash identifier:          y5E6xd04pQZEx6EHoHx9GrWzpZQg0HeWPzBJMNuiIqc=
Subject key identifier:   6A:91:45:8E:F0:C1:0A:F6:3F:FC:B8:1E:B7:72:7E:81:35:B1:61:4F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858492CAF3314BAF7B5D1A8525FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d586c751-4e0e-35f1-95ff-160fb4dfe302.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     33491
IP address blocks:        24.1.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:af:33:14:ba:f7:b5:d1:a8:52:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=738fa0f1-54ab-4f4d-b770-03c0399490e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f2:54:69:96:39:b9:d5:74:c9:17:9b:75:ad:
                    c5:e9:42:b3:ed:e8:43:4c:1a:09:a1:2f:14:50:4c:
                    a2:8c:26:ed:44:70:ac:76:af:5a:08:aa:f7:77:34:
                    c0:52:0e:8d:af:3b:24:d7:d2:ab:f1:70:50:44:ea:
                    ff:8d:33:76:de:ef:49:53:38:4d:75:1d:70:5d:bb:
                    df:85:21:11:dc:ec:0c:94:cf:68:cc:24:27:0f:cc:
                    98:ff:fe:47:2c:e3:3c:1f:a6:e6:6b:46:64:b9:ff:
                    a8:85:b0:b4:35:14:29:3f:f1:74:6d:7e:c3:ef:5e:
                    61:9c:cc:33:58:4f:72:75:82:99:7b:0b:9f:41:00:
                    3c:7a:e4:72:6c:f4:4b:e9:0d:ef:77:38:39:a5:25:
                    df:9a:62:ec:8c:82:d1:7d:c8:56:c0:b4:1e:76:de:
                    07:f5:6a:e5:f8:e7:33:c9:d3:bb:af:2b:9d:63:11:
                    e7:c7:22:0b:a7:18:07:fc:72:9b:ee:d5:d7:7b:1b:
                    59:cf:ba:b9:3d:3d:ac:8f:b7:0c:be:b7:2d:9d:34:
                    26:ca:de:cb:71:53:1a:24:9b:1d:3a:cf:c8:5e:ff:
                    a0:65:0f:05:81:15:6e:23:7b:e0:e5:9d:13:4d:bb:
                    18:a1:f0:3f:ce:7d:e7:60:e7:cf:02:39:e0:b7:69:
                    20:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:91:45:8E:F0:C1:0A:F6:3F:FC:B8:1E:B7:72:7E:81:35:B1:61:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d586c751-4e0e-35f1-95ff-160fb4dfe302.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.1.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:33:ec:3b:7f:97:5d:94:7a:7f:29:07:3a:e8:45:1c:b1:
         c2:ac:79:2a:b2:14:64:b5:2b:00:2d:67:e8:94:41:a3:bb:88:
         49:a8:ae:ac:b4:7a:ae:9a:6f:2d:46:56:2f:71:d5:1f:de:96:
         e9:5d:4a:bc:5a:a9:94:91:34:81:8a:6c:29:75:a9:53:db:1d:
         f7:9f:af:ec:36:80:8c:07:3d:24:5b:18:5e:7d:f5:8b:6d:df:
         03:e6:5c:41:d5:37:fa:35:fc:8d:a6:93:a9:00:f3:02:ad:72:
         51:62:03:69:ec:60:9e:e1:98:f9:c0:c7:d7:41:03:e5:b4:50:
         65:c6:a5:53:bc:de:ac:56:0d:f8:55:25:6e:a9:13:a9:d3:61:
         51:16:35:4b:30:06:ac:15:74:3b:61:d3:de:a6:0d:be:ae:48:
         84:da:e0:45:90:d2:c4:e9:cb:a4:ca:f6:42:f5:82:09:06:62:
         1b:a8:b2:90:1e:11:d0:4c:f9:79:7f:6b:5a:41:cc:d7:a7:82:
         2f:dd:50:56:8c:91:3d:0c:3b:ba:17:ac:5c:6b:7a:7f:79:60:
         51:53:2c:43:9e:b3:ba:44:01:6d:29:9c:df:dc:22:fa:96:9d:
         41:74:41:20:c7:1c:c4:d6:ef:e9:7f:7d:26:ef:98:9a:3b:81:
         b5:b6:b6:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 09:46:54 2025 by rpki-client