Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/93f56e17-393b-3321-9208-6c38bb0c095c.roa
File:                     93f56e17-393b-3321-9208-6c38bb0c095c.roa (raw, json)
Hash identifier:          hxdra6kA1l0+GsSjdKDn+busKlr3uujBSGYeo5fZCX4=
Subject key identifier:   B6:7D:B2:25:CC:F3:BD:00:9F:05:09:49:13:70:08:EB:28:AE:23:6D
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584917DC3A13010DF2191110D780
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/93f56e17-393b-3321-9208-6c38bb0c095c.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        132.219.142.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:3a:13:01:0d:f2:19:11:10:d7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=5bc91724-d1b1-4914-8e57-dda7782e10ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:56:1c:5d:df:5b:da:df:60:f3:0c:ac:89:c1:
                    a9:1b:37:e7:41:8d:fe:95:63:c4:93:ed:7d:7f:31:
                    ad:d8:73:c1:bc:5c:f9:ed:8c:07:3b:bb:16:c3:a0:
                    f3:82:8b:ce:7f:7c:51:57:c5:50:56:d3:d4:5c:da:
                    19:2f:b5:33:0b:37:7e:fe:37:57:8a:45:c5:6e:a1:
                    aa:a6:75:6f:0e:6c:b4:60:5e:62:d0:4d:fa:10:3e:
                    25:4d:79:aa:44:e6:19:04:7f:9f:35:50:a4:5f:ce:
                    d8:48:f2:41:22:3c:93:e7:f0:7d:a7:15:63:35:f6:
                    66:f6:d6:f0:86:02:03:10:11:4f:fd:28:83:9c:99:
                    00:43:f0:68:64:d2:eb:1d:02:25:32:a7:78:2c:83:
                    30:0f:7a:31:fe:d5:e3:9d:8c:e8:a8:03:a9:dd:7b:
                    9b:28:14:55:54:44:cb:63:9a:1f:b5:15:a3:8c:c0:
                    00:b0:8d:c7:97:fe:af:73:a1:b4:26:d9:ce:b5:cf:
                    d7:a6:ba:bc:57:5b:5b:fa:22:c9:df:37:e7:a0:89:
                    d2:ff:1b:43:31:94:65:c2:3f:fc:a0:ee:ac:47:e5:
                    51:8b:ba:1b:94:19:9c:55:64:de:a2:00:17:45:dc:
                    e1:61:54:57:1c:5b:4b:9a:2c:60:08:d6:21:c8:2c:
                    ef:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:7D:B2:25:CC:F3:BD:00:9F:05:09:49:13:70:08:EB:28:AE:23:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/93f56e17-393b-3321-9208-6c38bb0c095c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.219.142.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:2c:67:cd:bf:d1:a2:e5:5d:ed:23:39:ea:65:3e:03:7f:79:
         06:f5:af:cb:b7:db:5c:f8:b6:09:eb:90:b7:d1:93:48:2d:91:
         6d:0f:36:fc:8a:9f:39:fb:fa:87:d4:27:3f:60:9e:cf:99:8f:
         a8:d4:37:52:d5:63:a4:49:29:3b:7d:a3:b6:47:b8:fa:87:ed:
         3c:f7:19:79:b8:cd:2d:bf:c0:44:b7:e0:15:0c:48:48:a2:49:
         6a:b3:f4:5b:8a:fa:37:7d:a6:27:e4:44:06:40:d6:5f:86:02:
         1f:c3:03:88:84:27:7a:03:a0:f5:50:1a:fe:3a:d3:9c:ef:de:
         d8:d5:be:7d:40:22:77:d6:e3:3f:79:75:c7:1c:54:52:fe:2c:
         3a:25:4a:29:4e:7e:87:bf:7c:4d:f6:8b:5a:b4:14:af:af:09:
         66:09:85:48:9e:a7:d9:63:6d:ea:b3:2a:83:7b:cd:2a:8a:50:
         d3:ec:a0:fe:dc:92:13:e1:ef:1c:95:4f:6a:25:75:a4:4e:b8:
         95:31:92:ed:bd:6f:3d:91:75:ba:98:5b:e1:83:42:d0:bc:cb:
         9d:d3:d5:70:b8:d9:26:8f:04:a0:ed:b3:00:0c:37:dd:15:b4:
         dc:1a:18:a8:78:67:21:f0:fc:b0:98:2d:2e:2c:e4:ec:34:24:
         a1:2c:1e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:21:14 2025 by rpki-client