Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa
File:                     31409530-14e0-3a8d-b6d7-6af611c15963.roa (raw, json)
Hash identifier:          UBfASFsM28f7pDfeF9RR++5wGBPQe72lnKM1fBMuYEw=
Subject key identifier:   5A:E1:A7:0F:E7:52:52:C4:BC:BF:B4:D9:EE:1D:41:16:99:87:8B:D7
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848E9CBF15C97F6AE547EA762C0
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa
Signing time:             Mon 17 Feb 2025 14:00:52 +0000
ROA not before:           Mon 17 Feb 2025 14:00:52 +0000
ROA not after:            Sun 18 May 2025 13:00:52 +0000
asID:                     25899
IP address blocks:        199.91.224.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e9:cb:f1:5c:97:f6:ae:54:7e:a7:62:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 17 14:00:52 2025 GMT
            Not After : May 18 13:00:52 2025 GMT
        Subject: CN=eaafb49a-5ed4-4466-9028-640642c2ab07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:e9:29:4b:d4:97:99:e5:52:bf:45:3a:c4:88:
                    7c:9c:2a:cc:3e:6d:4c:c0:0f:43:54:cc:b0:56:25:
                    85:3f:97:67:7a:ae:76:05:51:6f:cd:68:39:2a:af:
                    b1:61:25:93:2e:37:b5:08:c6:53:1c:38:f9:3e:0b:
                    13:5a:f2:b9:d7:f4:de:e5:45:05:f6:be:e0:53:78:
                    8e:70:04:bb:74:d2:a0:31:77:23:d9:0d:63:62:b0:
                    99:34:8d:08:8d:20:29:7a:0c:09:f0:18:2c:d7:ea:
                    2d:8b:7d:8f:23:ce:1d:d0:09:9a:a5:6c:06:69:61:
                    e6:c3:d0:f7:92:89:4e:b6:31:40:74:4e:ca:0d:c7:
                    b7:68:70:b9:aa:20:50:d6:33:66:35:e1:d1:0f:33:
                    5a:71:f5:07:67:91:da:6f:96:ab:c3:3b:35:4f:7a:
                    9c:94:0f:35:68:bc:ae:25:a1:3a:fc:88:c4:54:0f:
                    e0:db:69:a4:52:fb:df:e1:4d:6f:8c:15:23:ee:5c:
                    6e:c2:b7:e3:1b:3e:f4:be:59:c1:d1:10:7d:88:94:
                    81:cf:35:d9:d5:ad:bb:a9:9b:d0:bb:24:c1:a7:db:
                    eb:fb:07:fe:5e:53:53:3c:9f:66:88:f8:ce:92:49:
                    3e:ce:ec:17:57:05:fc:18:cb:39:ef:f6:01:cd:a0:
                    85:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:E1:A7:0F:E7:52:52:C4:BC:BF:B4:D9:EE:1D:41:16:99:87:8B:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/31409530-14e0-3a8d-b6d7-6af611c15963.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.91.224.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:39:63:ef:06:1d:91:e8:1d:ac:6a:a7:ba:1c:bf:63:29:fb:
         cb:63:1e:9a:7b:5e:05:b6:63:cc:6b:23:13:36:cd:86:cd:20:
         b3:d5:56:6c:a8:e8:36:28:29:2e:5f:30:41:bb:d3:4d:b7:70:
         16:20:03:fa:5a:b6:e8:26:d5:1d:37:9e:83:75:27:c8:66:84:
         2a:f0:7f:38:60:a7:ae:8e:12:4f:28:2e:63:d9:6f:b3:c0:30:
         ba:e7:6a:74:d5:44:48:02:3c:39:a8:84:14:22:d6:fd:95:af:
         f1:5e:d7:08:de:79:92:cd:f8:92:a0:7b:ee:55:f2:26:f2:12:
         dd:7e:21:f7:14:01:2f:74:40:62:09:45:62:b2:2d:20:cc:71:
         15:e8:7f:9b:92:b7:b5:49:05:c0:fc:06:e0:ef:a3:d0:4a:e3:
         6c:c0:f9:d7:b1:1d:c0:01:24:64:66:f8:03:63:e7:f0:67:f5:
         b1:a3:ce:ee:7a:a9:85:20:22:53:f6:3f:b3:80:ac:59:46:a9:
         84:ba:45:bd:7e:db:93:fe:43:93:53:43:cf:79:68:c4:37:9f:
         54:6b:ab:0e:02:b2:26:2b:d4:9b:75:d8:83:7c:d1:9a:d5:d3:
         07:38:67:aa:b1:0e:05:98:b6:a2:cd:2f:5d:70:b9:72:a1:20:
         1b:f0:53:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:15:47 2025 by rpki-client