Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa
File:                     66c413c9-53d9-34f7-9004-f3fe204017cd.roa (raw, json)
Hash identifier:          kSrOk43xSIanAiBwnMSKKQYJwjPYWxYx7NFOrElv4ns=
Subject key identifier:   76:38:2B:F3:B6:3A:1B:8E:78:BF:3E:86:F1:5C:DC:3D:FF:2F:2D:4C
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F43285848EF614377A76FE9AF049EB060
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     25899
IP address blocks:        192.95.68.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:43:77:a7:6f:e9:af:04:9e:b0:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=b8a88613-cf2d-4dfd-bbdd-4e59c447d21a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:82:68:44:e0:9a:e6:38:65:0a:56:c3:e9:e1:
                    e2:e3:c8:f0:00:75:9b:34:6c:6d:e7:8a:bf:ee:db:
                    d8:9d:aa:4e:ad:b3:70:37:64:d0:70:b0:46:5a:7c:
                    07:75:91:46:d3:b8:e8:d0:d9:f2:22:a3:96:30:d0:
                    a9:6b:f9:6d:e3:d5:d0:d0:de:23:84:e9:c5:33:90:
                    33:51:58:27:d9:03:a1:35:11:8d:ad:b7:fc:03:3b:
                    23:35:72:49:a6:e7:8c:20:a7:83:3b:a9:db:11:15:
                    7c:99:51:25:ab:4b:cd:c6:e3:a0:c5:37:c5:18:88:
                    32:3d:76:9b:ce:3d:28:81:7f:04:66:c7:c6:7a:af:
                    c6:cc:66:f9:de:6d:21:da:4d:f7:01:5d:bf:5d:bf:
                    b2:c2:d1:43:2e:0d:99:04:06:67:a2:5f:be:e0:dc:
                    97:66:8b:e7:5e:3d:fc:b3:35:6c:0d:96:5a:28:f7:
                    31:bc:10:ab:ca:39:a9:68:46:9a:8a:c4:5a:ee:db:
                    b5:fc:e7:ef:33:e6:a7:cb:19:ed:f7:2d:42:05:bf:
                    a8:c8:82:3f:9c:51:17:73:52:bc:7c:21:a6:ce:b5:
                    24:0c:28:c9:66:01:39:d8:98:c5:2f:a0:5d:d9:71:
                    f7:72:56:a7:e2:e4:b8:78:59:85:79:8f:be:34:15:
                    01:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:38:2B:F3:B6:3A:1B:8E:78:BF:3E:86:F1:5C:DC:3D:FF:2F:2D:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/66c413c9-53d9-34f7-9004-f3fe204017cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.95.68.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:8a:0f:19:0e:e0:73:c5:37:eb:c4:56:79:45:a9:e3:a4:b1:
         35:68:41:0e:70:f3:f3:c6:d5:ed:03:96:5b:61:27:5a:a5:69:
         16:cd:a1:65:da:3c:66:f5:80:a3:0f:da:8b:c1:d3:cb:9c:f9:
         7a:b9:7b:d5:2d:98:e9:00:30:f7:88:68:bf:83:da:24:11:1c:
         7a:8a:3a:32:85:31:d0:91:f3:70:95:4b:fc:07:d7:60:f4:d7:
         ed:37:ad:ab:10:84:b4:85:fc:cd:d2:ba:08:45:20:d2:77:18:
         6d:ad:88:1a:0d:18:6d:85:5a:15:6c:60:fc:d3:9d:53:d2:86:
         2e:46:a1:9b:f5:c0:ed:3b:55:eb:d3:42:5f:ec:8e:3d:c4:bd:
         b4:b8:b3:6d:e2:10:a6:07:b9:f2:04:94:9a:3a:72:a7:de:6f:
         aa:b4:0b:b9:b9:2c:51:66:fe:18:a3:60:2f:58:86:4f:51:aa:
         82:a5:7b:c2:e0:03:66:80:a0:57:5e:22:91:dc:01:a9:ee:e2:
         11:70:96:95:a4:d0:5d:70:02:10:6a:2f:02:30:dc:ec:8e:7b:
         39:77:12:f6:66:0e:3a:ea:9f:87:d5:ea:b3:4e:e7:2d:dc:e5:
         15:a4:07:ec:da:07:ed:c3:9c:08:73:47:6a:ed:af:15:26:eb:
         cb:35:7a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 05:00:02 2025 by rpki-client