Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa
File:                     b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa (raw, json)
Hash identifier:          zsZJERxLvipy9jYiOb7toa3LB+orxet12dtdjpejhww=
Subject key identifier:   22:44:DA:45:32:C1:18:D1:20:DD:25:50:4A:A1:D5:2A:54:E0:61:34
Certificate issuer:       /CN=40392fe9-312c-47a6-8066-48fda2f4c80b
Certificate serial:       010D0C9F4328584973DEEDD8624290A817210440
Authority key identifier: DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa
Signing time:             Tue 08 Apr 2025 01:00:47 +0000
ROA not before:           Tue 08 Apr 2025 01:00:47 +0000
ROA not after:            Mon 07 Jul 2025 01:00:47 +0000
asID:                     394177
IP address blocks:        207.189.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:73:de:ed:d8:62:42:90:a8:17:21:04:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40392fe9-312c-47a6-8066-48fda2f4c80b
        Validity
            Not Before: Apr  8 01:00:47 2025 GMT
            Not After : Jul  7 01:00:47 2025 GMT
        Subject: CN=0ab036b9-8fb6-4a4f-849d-6d13c91dedc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:2a:2b:1a:c1:fe:11:70:d0:07:68:d7:6a:75:
                    2b:ac:28:21:61:87:e6:79:5c:d4:48:0a:d2:d6:60:
                    9a:93:8c:df:ff:d6:67:dc:ef:48:77:d0:53:5e:97:
                    5e:8e:e9:b7:33:5d:b3:a8:de:8a:7f:7c:e2:c2:5f:
                    fa:f7:00:47:26:90:6d:7c:86:d0:d0:32:6f:6a:d9:
                    5a:58:14:05:7d:f9:19:3b:ea:1b:1f:a7:83:97:60:
                    bb:be:0a:93:7c:d6:ee:c0:09:c1:a0:17:38:d0:4f:
                    2f:d0:99:69:fb:28:6a:01:4c:df:72:6d:d5:b4:4a:
                    66:85:56:5e:94:fc:0e:3d:4e:98:41:6e:6f:d8:94:
                    f3:d1:bf:4e:fa:13:00:ee:32:26:e3:95:f2:14:bb:
                    21:97:17:b4:47:47:1a:be:b2:f1:7b:02:13:5d:59:
                    01:8b:9d:d1:14:b9:dd:00:74:e9:75:79:9d:92:37:
                    3a:a6:96:b5:af:b3:40:c3:a0:c8:31:f9:57:0f:9f:
                    4c:dc:8d:69:11:a0:fd:68:f4:7d:69:68:34:56:5a:
                    cf:40:68:ba:78:a7:e9:dd:e2:c7:29:ee:26:99:3a:
                    aa:48:14:51:46:71:b5:cf:09:c7:17:2a:fc:09:f0:
                    e4:39:15:f4:f6:dd:70:18:27:c2:1b:6c:64:64:41:
                    14:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:44:DA:45:32:C1:18:D1:20:DD:25:50:4A:A1:D5:2A:54:E0:61:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/b93cc2fe-6a07-3b60-bbd2-12fdea98b02d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b/40392fe9-312c-47a6-8066-48fda2f4c80b.crl

            X509v3 Authority Key Identifier:
                keyid:DA:1E:F6:6A:D9:31:B6:C6:1E:B2:40:C0:82:9E:5D:06:45:B8:2F:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40392fe9-312c-47a6-8066-48fda2f4c80b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.189.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:c2:82:7d:ef:7a:1e:b2:9a:21:6d:5b:ab:fb:7d:95:ce:b0:
         9e:8e:08:5b:87:f7:92:ed:8d:45:1b:f1:d6:a4:97:2e:a3:f7:
         3d:79:03:da:97:37:08:45:6e:43:0a:50:b9:17:3b:fe:eb:4d:
         41:b7:7a:f8:43:55:92:a6:37:9a:30:eb:51:d0:a7:23:c7:e2:
         bf:b8:de:bd:59:18:9b:73:b7:3b:90:7a:39:71:c3:90:47:53:
         33:77:22:be:b1:4d:9e:69:09:c7:2b:b2:89:8d:a7:96:b4:7d:
         72:8b:bf:9e:2b:15:49:a7:c0:4e:21:3d:35:a3:83:a7:2a:57:
         f4:e1:7c:da:d1:cb:23:d7:d8:ce:26:71:f6:75:a4:42:e6:8a:
         01:4f:06:d2:8f:0e:ce:35:78:ad:79:01:d5:69:4c:ed:e7:39:
         95:05:a7:c4:b6:1b:b1:fc:cf:32:8d:9f:30:47:f9:24:2b:61:
         3d:37:5a:82:7c:0f:ab:4e:3b:e8:19:a2:7a:4c:ab:63:26:e7:
         b7:b0:fb:8a:7c:66:31:bf:5c:48:a3:42:13:71:79:a8:bf:03:
         42:79:28:9d:2e:d4:ea:10:eb:0c:86:34:2f:3b:88:fe:71:ed:
         d1:d7:7b:fe:67:47:80:ab:a0:6b:a7:4b:ae:d3:2e:a0:c1:00:
         15:6c:68:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:21 2025 by rpki-client