Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
File:                     3048f25b-01bb-3ce6-a347-f94feaca53ce.roa (raw, json)
Hash identifier:          bQMDEkWHVHfQq23SpT6QmZkPxIZHyShR2fq6XAFMkuM=
Subject key identifier:   AB:71:38:FA:5D:7F:C8:3B:E9:E4:E7:F1:02:F2:F7:CB:43:44:2C:61
Certificate issuer:       /CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
Certificate serial:       010D0C9F43285848B8F0D09646FA9E0A41A28700
Authority key identifier: ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     54885
IP address blocks:        192.102.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:d0:96:46:fa:9e:0a:41:a2:87:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a6361d2-bce7-409a-8f19-ddd81a1f6249
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=4004c95b-5e3c-470a-9dbe-ba0c5571c16e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a5:99:96:5a:3d:2a:5a:20:c2:67:ef:3f:da:
                    34:6a:06:6b:74:ca:92:c5:f0:4f:86:33:5f:d1:73:
                    9d:80:c6:7a:a6:c4:33:9a:42:da:23:66:29:5f:07:
                    1f:48:6c:ca:aa:b9:34:b9:74:4e:96:e6:e3:a2:6f:
                    2f:96:f9:76:1a:4b:35:c7:9c:ba:2f:6b:1d:4a:b3:
                    1b:b4:c0:7f:f0:b7:6c:7d:da:db:7e:bd:2e:be:04:
                    4f:1e:a3:51:bd:8e:63:e2:ec:16:3f:e5:85:ad:f1:
                    b8:62:93:fb:88:52:19:39:c4:5a:c2:67:aa:6d:11:
                    dd:b4:a1:f4:31:b3:c5:25:b1:72:76:d8:e1:4e:3f:
                    45:3c:79:38:bd:35:50:8c:33:52:d9:c8:fe:4e:4c:
                    82:52:f7:6f:df:44:05:15:5b:f1:65:10:f5:d8:fb:
                    cd:24:38:a7:e6:9e:19:c2:f3:90:ee:13:0a:85:13:
                    bf:c2:c1:cd:0e:67:9b:53:6b:83:4b:f4:78:6a:f4:
                    f6:96:38:30:c6:ac:ce:e4:73:e2:33:1c:75:8d:7f:
                    e3:a3:e4:bf:80:0d:0b:7e:a2:55:69:dd:54:85:1a:
                    48:d0:a4:3d:e2:07:f3:bd:8e:c5:6b:1b:1a:12:82:
                    cd:58:f2:e6:37:76:9a:3c:67:e2:d6:81:27:be:7d:
                    1e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:71:38:FA:5D:7F:C8:3B:E9:E4:E7:F1:02:F2:F7:CB:43:44:2C:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/3048f25b-01bb-3ce6-a347-f94feaca53ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249/9a6361d2-bce7-409a-8f19-ddd81a1f6249.crl

            X509v3 Authority Key Identifier:
                keyid:ED:A2:46:4E:57:ED:17:66:3D:8C:B0:2F:61:8B:F4:78:6A:4B:5B:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9a6361d2-bce7-409a-8f19-ddd81a1f6249.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.102.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:ad:36:ce:bb:97:50:da:01:0d:c1:d0:5e:8d:5c:df:dc:87:
         89:98:9f:1a:46:77:1d:61:2f:22:56:db:14:ec:7f:c1:c9:c9:
         9f:3f:4f:70:c4:85:5b:0a:a2:3a:ed:b6:13:2b:f7:9b:dd:b4:
         b9:e1:32:d2:b6:4d:c8:3f:d6:3c:e6:6f:ad:95:d2:0a:83:42:
         3f:24:d5:68:04:cc:cf:2a:a3:29:28:a9:9a:2a:ac:61:8d:b6:
         fb:8a:da:fc:37:6e:52:11:fd:8a:8c:e2:a2:26:a6:75:ab:e3:
         38:9b:ee:d4:fa:cf:33:d1:b1:57:2f:59:39:e8:0f:ac:c5:20:
         b0:1a:a9:9e:c5:19:0b:5f:f2:23:4c:8a:f6:51:ef:ed:cf:6e:
         e5:cb:8c:65:0a:4e:8c:2d:f2:d9:40:72:42:0b:be:27:af:9c:
         48:8e:4a:63:54:c0:be:57:c7:51:65:ff:4b:30:db:25:32:98:
         29:95:02:8a:c4:77:d9:45:cb:8e:20:6f:69:42:e9:1b:58:12:
         ca:58:e5:05:25:e7:d5:3e:99:3e:c5:6d:e0:c7:5f:31:95:6c:
         8b:07:e7:28:2d:23:ca:e8:01:da:da:ab:51:ab:53:04:2f:11:
         ae:be:7f:52:13:0b:86:f5:36:59:c0:b4:b5:11:df:df:e8:ab:
         da:65:67:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:17:16 2025 by rpki-client