Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa
File:                     1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa (raw, json)
Hash identifier:          rruTAK2/S5DWAj3do7K9dxcX1Pxxmrwf0pV3T1wR46I=
Subject key identifier:   35:C6:91:3F:79:E3:5B:19:6F:98:F6:27:46:F6:F0:71:A3:F0:4F:B8
Certificate issuer:       /CN=d370c49e-f70c-46fb-a30f-df2475852cc2
Certificate serial:       010D0C9F432858491ED6E76E69CD5529C4E68DA0
Authority key identifier: A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        199.11.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e7:6e:69:cd:55:29:c4:e6:8d:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d370c49e-f70c-46fb-a30f-df2475852cc2
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=1810e096-c3e9-42b7-a9f1-e7ec44b9434e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:ec:52:24:4f:66:3b:e1:20:df:23:a3:6a:
                    7c:47:de:d5:24:02:2b:41:69:a3:cd:fe:68:44:1b:
                    62:06:ba:b4:27:3f:e2:b6:d7:1b:d3:a6:eb:7a:59:
                    f9:07:27:7c:eb:72:06:45:84:1d:50:d4:c7:cb:1d:
                    fa:97:83:a7:68:4e:a3:db:7e:5f:08:8d:8f:71:8d:
                    8e:23:c7:92:79:dc:c8:8a:ab:48:a4:da:07:f6:ac:
                    18:fa:c9:f4:4b:3f:bb:15:f0:05:fa:b6:cb:de:10:
                    7f:19:8a:97:d6:ef:52:ce:28:92:12:04:1f:d6:eb:
                    b9:af:52:c6:12:c2:93:8c:4b:3c:dd:d7:de:25:b6:
                    4d:49:32:04:5a:b0:0f:b5:5f:05:d9:23:fb:55:3d:
                    71:f6:f7:01:1e:26:82:00:a1:ef:18:84:1a:e6:78:
                    59:ba:75:b2:43:b9:a1:9a:a7:96:55:9c:bf:cf:9f:
                    78:e0:c4:11:d7:47:31:b3:ca:4a:fa:8e:25:e2:f9:
                    0a:b0:ba:5d:38:29:2a:e4:a0:24:fc:67:91:f3:70:
                    2f:b1:ce:50:dc:7d:66:29:4f:82:2d:1a:8e:b3:fa:
                    55:66:95:18:bf:f3:eb:f4:8d:e6:21:dd:c0:e6:67:
                    55:d6:b3:fd:e0:1e:40:0a:ec:75:20:ab:bb:ec:5e:
                    d2:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:91:3F:79:E3:5B:19:6F:98:F6:27:46:F6:F0:71:A3:F0:4F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/1b7492c1-6637-37b3-9d1f-a4a7d76422a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2/d370c49e-f70c-46fb-a30f-df2475852cc2.crl

            X509v3 Authority Key Identifier:
                keyid:A2:86:B5:10:41:62:0D:8E:CB:CF:CD:B1:F3:1E:AA:AA:25:5C:67:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d370c49e-f70c-46fb-a30f-df2475852cc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.11.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:6c:f4:39:3a:f5:da:2e:36:72:e2:34:03:d6:d0:4c:56:30:
         6e:7c:74:6d:1f:ed:1e:53:c5:06:7d:11:3c:62:ed:eb:37:4b:
         5b:0d:c8:11:b8:73:0c:b8:61:b6:e6:de:76:90:e6:76:93:7b:
         a3:2c:2e:a4:68:40:6b:02:2f:78:7c:7e:69:92:4e:39:54:db:
         f6:95:c1:11:37:70:31:f9:91:99:ad:cc:9b:5f:cd:1f:9a:c8:
         de:7a:a3:6f:6e:2e:0d:63:56:bf:25:59:23:c9:a6:8d:98:df:
         8a:84:41:b3:c5:00:a8:93:96:8a:5e:75:06:93:c3:ef:22:b3:
         a8:23:01:9d:89:2f:1b:40:2b:6f:6a:45:5b:4c:1a:d1:10:20:
         c9:39:0e:3e:a7:f9:75:05:61:ea:c0:8f:1e:bf:ad:fd:53:24:
         2a:5f:18:5b:c6:4f:dc:0a:ab:9d:9a:ef:b9:95:9c:ec:c2:8c:
         8e:32:da:a5:45:e0:5e:ad:56:ce:35:40:1f:8b:8a:ee:04:a8:
         af:0a:19:3b:cd:98:e2:da:d3:4b:23:0d:2c:38:57:36:11:21:
         0f:91:c6:94:a7:18:bc:4b:7a:34:80:f5:38:48:67:be:d3:5a:
         a1:e3:26:90:fe:0b:7a:8d:4c:50:05:23:19:59:7d:4e:fc:ff:
         cd:34:67:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:24:14 2025 by rpki-client