Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/181d355f-2850-3183-957c-4b3dcb191c9c.roa
File:                     181d355f-2850-3183-957c-4b3dcb191c9c.roa (raw, json)
Hash identifier:          pZlqIR+Ntud98MgU/DnGQGrsQxKcQPRE6T+1fV3c7kc=
Subject key identifier:   7E:20:22:F3:CF:25:88:C0:C8:A6:31:1F:A1:09:B5:87:7E:EE:98:AA
Certificate issuer:       /CN=063abcef-47ff-4267-9198-eb628aba7842
Certificate serial:       010D0C9F432858490F7BFFFA4841A0158F3D1500
Authority key identifier: 2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/181d355f-2850-3183-957c-4b3dcb191c9c.roa
Signing time:             Mon 03 Mar 2025 02:00:39 +0000
ROA not before:           Mon 03 Mar 2025 02:00:39 +0000
ROA not after:            Sun 01 Jun 2025 01:00:39 +0000
asID:                     397976
IP address blocks:        146.12.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 20 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0f:7b:ff:fa:48:41:a0:15:8f:3d:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=063abcef-47ff-4267-9198-eb628aba7842
        Validity
            Not Before: Mar  3 02:00:39 2025 GMT
            Not After : Jun  1 01:00:39 2025 GMT
        Subject: CN=79565e20-0939-472b-9256-20ece509778d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:e9:6e:c0:ba:89:d8:f9:ef:8e:8b:38:cd:
                    3d:49:b5:83:f5:83:8d:c5:45:87:c3:5f:63:ce:e4:
                    94:d2:b6:0e:df:c8:36:64:b0:ff:12:4a:47:17:79:
                    98:2a:f5:07:1d:08:d9:62:85:f5:56:f4:2f:d9:66:
                    0b:1b:65:68:ea:80:16:2c:f5:ae:1b:f7:43:bd:c7:
                    8c:36:1c:e0:f0:d9:a4:d2:6f:91:77:bc:4d:74:93:
                    49:28:00:fd:cc:af:61:4c:e4:26:48:fb:b0:5e:0c:
                    87:3e:20:ba:62:dd:a1:c2:36:2d:f4:1f:28:1a:d2:
                    55:98:ab:b3:04:e9:28:8d:52:ce:f6:ff:80:0a:31:
                    8a:6b:45:35:3d:e2:90:40:a5:6d:ff:2e:b0:80:94:
                    92:9d:1f:cb:5a:5d:d6:8d:b3:5f:4a:93:28:ed:b7:
                    1b:c6:bc:52:c2:72:4b:2f:68:cc:cc:d4:d8:14:14:
                    28:b1:5d:4e:48:0d:8b:d8:f9:f7:25:b4:64:fd:32:
                    c6:03:67:b3:57:64:d9:0e:06:7f:49:17:95:d8:f4:
                    6f:78:b3:88:53:5a:64:40:d8:e8:d2:a0:36:51:5b:
                    8c:1b:b7:fd:df:e5:57:e4:75:08:cb:58:24:be:6f:
                    a5:bd:73:d8:53:52:bf:01:63:ba:b6:ae:d6:d0:c9:
                    6e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:20:22:F3:CF:25:88:C0:C8:A6:31:1F:A1:09:B5:87:7E:EE:98:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/181d355f-2850-3183-957c-4b3dcb191c9c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842/063abcef-47ff-4267-9198-eb628aba7842.crl

            X509v3 Authority Key Identifier:
                keyid:2D:3F:AD:6D:5B:1F:E5:FE:7F:3E:DB:22:2B:0E:F6:CC:CD:68:7D:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/063abcef-47ff-4267-9198-eb628aba7842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.12.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:e3:69:d2:44:8d:95:91:a2:11:2e:12:9c:27:37:a2:10:7f:
         24:4c:7d:49:3a:6d:25:2c:66:05:45:8a:b9:b8:ca:eb:b9:bf:
         7b:3d:e2:a3:2d:cb:7b:03:d8:a6:e1:7a:be:46:7a:35:1d:e6:
         b4:97:42:68:21:c2:4e:39:0d:6a:b7:57:9f:01:61:86:f7:13:
         3d:10:e7:28:30:55:d5:88:63:80:66:8b:43:10:dd:cd:3a:df:
         47:75:bc:43:1d:d2:ce:33:5c:8d:0c:d5:f9:65:9b:7d:23:f8:
         29:c5:0f:e0:34:f1:46:da:08:31:83:bb:f8:a7:ec:37:15:53:
         3d:cb:ff:bf:16:5a:b1:c8:99:28:18:64:f2:30:7c:c3:68:3e:
         64:95:18:43:3c:90:a9:eb:fe:c3:a8:c0:1f:9e:8a:fa:53:84:
         28:98:44:69:8b:6d:4b:1c:b5:26:67:8d:26:da:c1:69:40:82:
         f6:a6:dc:88:80:e4:63:e2:31:fd:ce:d2:c5:41:21:08:e0:b2:
         41:84:dc:8e:e0:9f:de:5d:2e:b6:b9:bd:16:ed:bb:7c:77:98:
         7f:34:f5:e9:30:70:ac:22:a1:0f:27:3b:09:03:03:4b:94:38:
         53:5d:bc:36:79:cb:54:62:05:e1:64:55:fb:20:1a:e5:6f:c7:
         ca:2e:10:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 11:25:05 2025 by rpki-client