Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b454a99-691a-3800-8c9e-acc1ec105556.roa
File:                     1b454a99-691a-3800-8c9e-acc1ec105556.roa (raw, json)
Hash identifier:          /Gvl229NNLaCFyenfF8gghKA7ZyEKtqqhxmhAwuAkVk=
Subject key identifier:   63:DF:0E:80:27:97:FB:56:83:03:04:04:01:11:3A:45:14:02:38:74
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BEB67177C1BEA5071CA40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b454a99-691a-3800-8c9e-acc1ec105556.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     19955
IP address blocks:        209.82.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:eb:67:17:7c:1b:ea:50:71:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=66cd6a60-6c00-4b95-83d3-d99269d8e669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:23:9c:58:89:a1:70:0a:8f:e7:27:53:82:b4:
                    99:a0:43:05:ce:6b:db:05:a4:91:d7:99:13:1b:bd:
                    fe:cc:a6:48:34:6c:f6:10:6a:7a:10:a0:6e:72:b4:
                    b0:28:2a:dc:6b:0a:68:c4:f9:9f:7d:c8:34:f7:92:
                    f6:ac:50:1b:91:c4:b1:40:4b:6f:7a:74:cd:9b:d6:
                    aa:7b:8a:d7:e5:61:e0:b2:2a:82:bc:cb:08:36:87:
                    f2:6d:62:58:6a:b9:12:1d:e6:56:63:20:ac:4a:80:
                    9f:df:a8:59:1c:12:97:3d:54:4a:3c:3e:88:a9:f8:
                    bf:46:fe:a0:c7:ee:c6:c0:42:cc:00:67:cc:f0:14:
                    9e:a7:f0:65:f6:8f:11:4f:b0:bf:d8:bb:5f:49:a4:
                    7b:85:2e:5a:bb:5e:de:14:3d:b4:30:ac:75:1d:cd:
                    c8:87:bb:c8:4b:50:c4:ec:8c:eb:7d:73:0a:07:78:
                    b5:d1:c9:8e:7d:87:94:24:d5:94:bc:f9:f8:f2:f0:
                    a5:3f:d4:2f:ce:05:bd:cc:64:b3:4e:1d:f5:c6:0a:
                    c1:75:fe:6e:71:d4:51:32:02:ba:cd:65:f4:85:02:
                    d5:73:be:32:a4:2d:ba:0b:37:d1:12:29:88:82:33:
                    2f:cb:c7:f9:09:50:33:71:19:d1:5e:30:18:39:f1:
                    ff:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:DF:0E:80:27:97:FB:56:83:03:04:04:01:11:3A:45:14:02:38:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/1b454a99-691a-3800-8c9e-acc1ec105556.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:1a:e5:2a:f2:17:4c:51:5d:08:ae:0f:a1:3a:2c:9c:d5:
         64:e8:22:86:4e:80:2a:fa:9c:ed:67:fe:92:eb:67:7a:e8:7a:
         cb:86:44:ed:bb:dc:3b:d4:9c:e2:c7:6d:f4:72:7f:f8:51:4e:
         d2:01:b1:99:8a:30:e3:03:bb:f9:90:a1:50:70:67:41:f4:40:
         36:82:83:d9:3e:27:02:8c:19:87:64:f8:33:f4:89:1a:a4:b7:
         16:b8:81:10:83:cf:96:6d:8e:a1:2e:93:36:aa:63:58:92:ea:
         57:d7:55:4c:17:f1:96:30:33:02:47:f7:f7:5b:1f:b3:7e:06:
         29:48:d8:ef:c0:d1:d2:a0:94:3a:57:51:0f:61:e8:78:94:a3:
         cf:51:d6:54:0a:fe:ec:0a:3e:c1:22:30:d0:53:33:67:22:80:
         12:43:a6:e0:65:f3:97:44:43:1e:03:d7:51:56:ac:2f:4f:05:
         15:77:83:30:35:b9:e4:91:d5:94:3b:35:39:d2:00:dc:4f:f0:
         56:59:50:7b:e7:d4:20:66:b9:7a:93:8d:e2:85:e0:92:58:01:
         8c:cc:f8:f8:ed:d9:7d:ef:c4:69:78:5a:a5:ec:f6:9c:56:bf:
         fe:80:c8:c9:4c:ba:4d:18:07:d4:76:06:88:70:62:ed:1d:bc:
         01:de:a3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 09:24:23 2025 by rpki-client