Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa
File:                     ec912a2c-ef89-31ab-8ffd-60360a102815.roa (raw, json)
Hash identifier:          Bu+vfs8sZx0tJasWkoPXWyVvfGKA75AEzXYIy3fOWWk=
Subject key identifier:   69:ED:4A:1F:09:75:BC:64:60:3B:10:5A:CE:52:C7:62:58:29:25:F2
Certificate issuer:       /CN=a32f8632-bd41-4783-afca-fc93bcb85260
Certificate serial:       010D0C9F432858490E16C9F302B6D5AEB7DD7900
Authority key identifier: 4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa
Signing time:             Sun 02 Mar 2025 14:00:52 +0000
ROA not before:           Sun 02 Mar 2025 14:00:52 +0000
ROA not after:            Sat 31 May 2025 13:00:52 +0000
asID:                     398850
IP address blocks:        192.234.172.0/24 maxlen: 24
                          204.235.170.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0e:16:c9:f3:02:b6:d5:ae:b7:dd:79:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32f8632-bd41-4783-afca-fc93bcb85260
        Validity
            Not Before: Mar  2 14:00:52 2025 GMT
            Not After : May 31 13:00:52 2025 GMT
        Subject: CN=460d6a39-daf8-4e45-902a-19d2e58c14e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0d:f6:e9:aa:a0:d1:7a:4c:df:99:91:e6:91:
                    d8:9e:66:b6:32:58:05:57:7f:0c:88:ec:2b:23:37:
                    ae:7b:fb:5e:ac:99:3e:90:d4:b2:ef:85:de:01:59:
                    a6:e8:e8:b6:aa:e1:36:ef:47:e8:72:da:d8:ed:b1:
                    35:cf:4c:9f:58:f4:4c:c6:b0:51:d8:e9:82:b4:38:
                    96:03:b6:ac:d3:13:2b:a7:cb:c8:4c:60:85:4d:b8:
                    20:0c:94:03:d0:d5:59:6f:33:40:e8:53:b1:a6:d8:
                    ec:bf:b9:ea:20:15:cc:dc:1e:54:2b:9f:ab:f5:1d:
                    c3:75:68:38:b4:01:07:2b:93:b7:22:d9:be:32:14:
                    d4:8c:e2:f3:ae:89:27:49:6e:65:91:a6:16:1f:e6:
                    00:bd:d8:0a:11:03:78:98:23:a5:76:a3:7a:42:f5:
                    ea:f5:a6:eb:ff:c8:9a:d1:97:7f:1b:f0:4d:83:48:
                    0e:90:8b:35:b3:3c:60:95:75:81:df:18:66:79:67:
                    6c:36:a4:b7:98:37:3c:13:31:33:c6:71:59:95:3d:
                    fb:35:46:ee:3e:af:d5:28:ed:13:3d:0d:e2:13:a6:
                    fd:fc:a4:b1:f6:f9:1d:fe:53:e9:04:c0:72:31:85:
                    ac:9b:ce:51:c7:33:0b:e6:66:dd:a9:39:93:5e:82:
                    92:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:ED:4A:1F:09:75:BC:64:60:3B:10:5A:CE:52:C7:62:58:29:25:F2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/ec912a2c-ef89-31ab-8ffd-60360a102815.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260/a32f8632-bd41-4783-afca-fc93bcb85260.crl

            X509v3 Authority Key Identifier:
                keyid:4E:76:F5:2D:CF:B4:A8:64:5D:50:9F:3E:9A:C1:31:4D:4D:87:F3:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32f8632-bd41-4783-afca-fc93bcb85260.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.172.0/24
                  204.235.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:f8:b2:50:eb:c7:7a:c5:d0:34:dd:fb:f1:7c:35:bd:78:93:
         8e:c2:8e:c1:8c:6e:04:60:b3:d5:14:bb:bc:3a:27:04:81:f1:
         cc:74:5f:6d:41:20:fa:a6:e0:f6:62:8d:52:4a:c0:d8:a4:d9:
         ed:ae:55:0a:63:98:a6:b6:e5:48:14:07:fe:6a:a1:89:07:e6:
         5c:24:34:06:08:cb:1d:2d:c1:6e:1a:80:71:85:91:3e:4f:79:
         b8:ae:27:e7:f2:67:d4:26:fd:9a:53:76:2d:27:1e:a7:95:22:
         bf:1a:f6:46:ba:e1:7c:7d:66:54:fe:96:8b:c7:99:45:77:61:
         19:f7:30:5f:8c:44:d3:c7:bc:e3:5b:4d:9c:18:74:c7:5c:25:
         77:72:97:5b:15:51:61:9a:2f:ba:7b:56:b0:28:e6:4e:aa:93:
         f2:9f:d1:62:c7:17:17:02:9b:d5:02:82:be:0c:77:7a:f3:68:
         f7:9a:99:06:ca:e8:b8:bc:f4:a2:41:67:18:5d:ca:05:91:7f:
         2b:ff:c4:1f:47:a6:80:43:00:83:f8:f2:42:08:c8:7d:bd:d9:
         98:d4:4f:f0:80:cf:8c:86:08:ee:c6:0d:54:0c:93:95:37:ab:
         2f:83:49:b0:29:0a:2b:51:7b:29:9f:ed:67:57:98:ec:10:38:
         f2:2b:36:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 03:28:49 2025 by rpki-client