Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa
File:                     dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa (raw, json)
Hash identifier:          /21BLSpAL+B7KSok4lvbrlPAyRZEQeAdtViNwuOnU1Y=
Subject key identifier:   1A:D9:ED:25:FA:BA:52:9D:CD:EC:C7:3C:41:39:EC:03:A8:11:CA:79
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F4328584937D93961E6C2270BC3AEB340
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa
Signing time:             Mon 17 Mar 2025 13:00:52 +0000
ROA not before:           Mon 17 Mar 2025 13:00:52 +0000
ROA not after:            Sun 15 Jun 2025 13:00:52 +0000
asID:                     398210
IP address blocks:        168.220.184.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:37:d9:39:61:e6:c2:27:0b:c3:ae:b3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Mar 17 13:00:52 2025 GMT
            Not After : Jun 15 13:00:52 2025 GMT
        Subject: CN=e4276824-2252-4185-865a-be17398aeee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d4:f3:5f:ce:6b:73:f6:c5:78:06:34:ab:9d:
                    b0:3e:ab:34:84:74:7e:8d:ae:d2:6e:2a:00:a4:cf:
                    de:b2:b6:ee:bb:45:ce:38:f3:e4:b1:f9:89:c6:78:
                    03:c8:8d:bc:3b:ab:10:82:ea:6d:a2:47:ab:8f:87:
                    f6:a3:c0:69:de:1b:ba:e6:60:81:cf:df:38:29:e1:
                    80:a9:08:d4:98:23:df:87:21:b5:61:d4:0c:8e:d3:
                    1a:bb:aa:9b:a8:b9:ed:67:cd:7f:0d:f7:22:97:1a:
                    bc:5d:76:57:62:09:f5:6d:38:7a:dc:73:52:6b:5a:
                    8c:d8:3a:09:15:d1:76:c9:38:b6:83:7a:18:b0:51:
                    c9:8d:e8:ce:5d:da:3e:ac:7c:16:35:e3:da:da:3c:
                    26:16:71:0f:cb:58:7a:a8:1b:ec:1d:3d:21:2d:39:
                    70:07:8c:07:cd:38:ec:b4:3d:31:a3:cb:93:2f:7e:
                    4d:ad:bb:70:b7:79:f3:ea:40:1f:24:72:15:60:4a:
                    a0:6e:ba:64:91:0a:6a:16:74:4c:86:cb:f4:6c:c6:
                    59:04:64:7a:8f:73:e7:fc:39:a6:b6:e4:d3:95:0c:
                    d2:a8:b4:4f:14:82:e7:5f:bd:bb:42:da:73:de:0e:
                    4b:cf:c9:a2:ca:46:c7:44:bf:8d:1a:92:21:cd:35:
                    0f:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:D9:ED:25:FA:BA:52:9D:CD:EC:C7:3C:41:39:EC:03:A8:11:CA:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.220.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:7c:ea:e3:f8:b8:65:4d:d1:82:56:b2:20:cd:d1:6d:b7:1a:
         e8:71:c4:3b:d3:ca:9c:e3:d8:64:bd:90:53:9d:77:46:98:db:
         13:8c:5a:bb:ef:21:50:99:31:05:a6:8b:59:67:34:18:a1:9b:
         6c:87:5e:ed:35:c0:f8:7a:7d:55:ad:ed:2f:1c:64:73:ce:ad:
         3e:83:f1:c7:63:63:91:d9:90:ae:f2:52:4b:ca:69:72:11:9c:
         1c:37:b5:f9:ea:2c:e0:1f:b2:2a:d9:35:bf:fc:da:3b:41:06:
         88:7c:82:ca:c1:8b:5c:e6:b1:bc:20:9a:fe:44:b1:f9:0c:16:
         ec:c4:a5:df:66:3b:75:4c:a5:96:63:1f:4a:9a:95:51:52:b7:
         a1:68:31:73:d5:24:0d:26:f4:6d:15:d6:b1:33:6f:77:51:7f:
         91:4a:d1:6b:45:ba:e2:96:cb:b6:9a:02:bf:93:42:aa:30:8d:
         e8:38:c1:e4:14:f9:4f:0b:30:7a:5b:1d:44:c7:29:51:d4:74:
         05:59:c9:ea:31:43:4e:15:f3:d8:af:f7:db:3e:00:86:f0:81:
         f6:69:8d:7b:8e:b8:f4:98:78:3c:d0:4a:c4:e0:0d:e8:50:c3:
         8b:e0:10:0f:09:b8:c1:e0:8d:03:bb:52:d2:bb:cd:f6:df:bb:
         86:4e:ba:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:47:25 2025 by rpki-client