Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa
File:                     48e822f5-6e96-38f9-9fcc-84ef283ae575.roa (raw, json)
Hash identifier:          B0utJjJcqK0ZMDWomF2x+VnEOEkJvTYVHUc8DjsNVrQ=
Subject key identifier:   7D:48:7B:92:7B:8B:04:F9:F6:0A:AD:E6:EC:BC:E8:11:3D:22:E5:03
Certificate issuer:       /CN=48376997-5b17-4e52-923f-f46bcbd7b94e
Certificate serial:       010D0C9F43285848F22C7133EDB241FCAE3B8280
Authority key identifier: E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     394971
IP address blocks:        192.31.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:71:33:ed:b2:41:fc:ae:3b:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48376997-5b17-4e52-923f-f46bcbd7b94e
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=49ca1e4d-6264-469a-ad76-f173f77cef7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d4:92:2d:11:90:da:c8:2b:11:89:df:de:3e:
                    b3:f5:9b:dd:48:29:e5:ff:90:37:3a:6b:33:6b:4b:
                    66:0b:40:e9:10:1d:b5:33:9e:a1:54:3f:f1:aa:06:
                    a5:c8:79:c3:df:8f:b2:d6:e3:9a:4c:ca:e8:94:7a:
                    17:fe:bd:1e:83:09:ab:da:05:b5:68:2d:97:27:63:
                    88:5c:6f:26:1f:d8:4e:8b:ae:54:0e:68:cf:31:a1:
                    9b:d5:dd:ac:16:c0:20:2d:c7:54:85:46:4c:d7:61:
                    78:2b:90:47:3a:d5:1b:cc:c8:1c:ad:aa:1e:86:4a:
                    fd:4d:3c:5d:5b:f7:8a:db:b1:44:ea:24:ac:da:35:
                    17:30:31:c1:a4:4e:0a:55:70:71:77:17:5c:ea:43:
                    b8:7f:57:1f:ed:00:f4:e7:ae:c7:1f:17:f4:aa:4d:
                    b2:16:32:24:e8:26:36:e5:e2:02:62:0d:03:68:af:
                    41:b8:f7:c0:34:93:54:a4:8f:cb:29:ff:95:98:74:
                    03:fb:29:7c:67:fc:01:92:7b:53:4f:ce:91:5b:90:
                    d9:00:e2:9d:64:1e:16:99:46:b5:d3:0c:8e:88:dc:
                    44:6f:d4:fd:3e:6a:ac:0d:ec:02:b3:26:40:ab:0d:
                    48:d0:3c:56:84:14:83:48:ad:02:c8:3c:70:62:cd:
                    9f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:48:7B:92:7B:8B:04:F9:F6:0A:AD:E6:EC:BC:E8:11:3D:22:E5:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48e822f5-6e96-38f9-9fcc-84ef283ae575.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e/48376997-5b17-4e52-923f-f46bcbd7b94e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:F2:FC:4B:70:1B:DB:CB:C0:FA:18:54:4C:4A:CE:22:9F:4B:DD:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/48376997-5b17-4e52-923f-f46bcbd7b94e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:04:93:98:dd:9f:47:09:04:16:e0:6e:a2:53:fd:a9:ae:86:
         8b:fd:2c:30:d1:3e:c4:b9:a1:b9:e7:4e:47:9a:24:da:12:df:
         04:ca:c0:cb:e8:91:5a:8f:c1:5c:46:fd:1f:8a:8a:4b:40:42:
         70:33:f6:88:0a:c6:33:f7:24:a3:f3:72:12:9b:a8:9e:db:c2:
         30:1f:d2:9a:25:61:60:e7:c0:0d:a7:84:08:47:a0:59:1b:8c:
         10:52:df:ab:d8:58:89:32:77:e9:db:35:5d:e8:82:38:80:ed:
         7d:a1:aa:a9:13:a5:e5:97:b9:53:af:17:13:d9:ec:f5:dc:b4:
         72:11:66:10:e8:1c:6c:d3:a2:26:de:5f:c9:7d:ab:a8:85:cc:
         db:04:e6:fc:fa:78:cf:14:f5:d8:0f:d6:29:13:25:03:36:df:
         23:29:8f:ff:4b:91:1a:c4:de:21:2b:88:4a:c2:3a:f2:8c:94:
         2f:ce:3b:f6:c7:7b:fb:05:7b:df:1a:67:82:1e:34:de:a0:bf:
         cf:43:d9:e2:a1:3f:03:f0:b8:c0:e3:f5:17:bd:1d:09:52:a3:
         84:60:6a:27:1b:3a:51:d2:07:79:ae:f6:51:c2:67:b3:96:40:
         6b:b4:48:10:e8:2b:89:1d:8d:06:69:50:be:f6:7c:15:28:7d:
         2c:42:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:03:51 2025 by rpki-client