Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa
File:                     f88c85f3-7db0-3dc7-a075-7fddec604c43.roa (raw, json)
Hash identifier:          zxsHfPC17pwzRXnE/KEjtMwGJ8IdqlV/25T93w22gBE=
Subject key identifier:   1E:06:B1:6D:24:51:65:E7:38:41:9A:6A:B1:53:00:01:9F:22:EB:A4
Certificate issuer:       /CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
Certificate serial:       010D0C9F43285849435122E1B85748013F6B94C0
Authority key identifier: 36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa
Signing time:             Fri 21 Mar 2025 15:36:28 +0000
ROA not before:           Fri 21 Mar 2025 15:36:28 +0000
ROA not after:            Thu 19 Jun 2025 15:36:28 +0000
asID:                     30406
IP address blocks:        192.69.133.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:51:22:e1:b8:57:48:01:3f:6b:94:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ec8359-4ede-4036-8702-23e5dd37a9ba
        Validity
            Not Before: Mar 21 15:36:28 2025 GMT
            Not After : Jun 19 15:36:28 2025 GMT
        Subject: CN=de5596c1-7e86-4c53-ab4a-0d8ab6560676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:6d:d2:76:84:e5:c8:58:27:8a:95:17:2e:
                    fb:c7:bf:39:fb:3f:60:cc:da:37:5f:e0:3e:7d:f5:
                    29:bf:95:98:a9:11:0c:58:3e:7a:d6:3e:a3:1a:1b:
                    9a:c3:ba:85:b6:ff:99:a6:75:ba:d0:67:1d:9e:28:
                    7d:d1:5a:5d:0a:95:9f:09:a0:7b:60:cc:f7:fa:b4:
                    56:31:90:ad:80:3b:58:37:d7:ce:8e:b9:e3:92:98:
                    d5:26:36:30:64:bc:72:44:62:15:f6:36:d8:57:94:
                    3a:49:88:4d:8a:7b:4e:b1:0a:78:b5:57:8a:d7:84:
                    d7:d1:fa:98:55:70:da:e4:57:94:f6:03:12:4d:ab:
                    72:87:bc:42:aa:9f:17:97:df:2f:f9:4f:19:17:a5:
                    e7:b9:36:29:dc:6b:f3:1d:0e:6f:84:e5:ba:e4:d4:
                    9d:d8:f5:51:57:ee:3a:b9:79:f8:1b:64:a6:bc:3a:
                    6f:0b:2a:4a:28:9e:3c:84:45:b6:ae:35:cf:25:59:
                    fd:15:d5:3d:b8:fc:e6:0a:07:67:90:25:c9:54:1d:
                    30:44:0d:91:dd:24:31:cf:41:78:ce:de:15:46:1c:
                    88:5e:ca:f6:88:c8:a0:ed:02:47:d4:9a:dc:51:bf:
                    f5:ae:23:91:b7:76:6b:74:99:18:36:91:09:05:5a:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:06:B1:6D:24:51:65:E7:38:41:9A:6A:B1:53:00:01:9F:22:EB:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/f88c85f3-7db0-3dc7-a075-7fddec604c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba/05ec8359-4ede-4036-8702-23e5dd37a9ba.crl

            X509v3 Authority Key Identifier:
                keyid:36:0A:E8:03:24:2B:BA:C6:75:78:32:2C:14:A5:B9:5D:11:5A:00:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/05ec8359-4ede-4036-8702-23e5dd37a9ba.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.69.133.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:64:1b:3a:33:d2:b3:03:8a:a9:f5:91:6d:a2:b1:4d:aa:15:
         df:bc:d6:04:8c:1a:ab:fa:b2:91:f4:90:22:94:a6:b0:31:55:
         c4:6c:2e:d0:85:8a:a5:7d:5e:43:b7:a6:c6:7f:56:3d:fe:80:
         20:b5:cf:71:34:ef:bc:3b:cf:1b:51:f8:77:3d:95:cb:c9:59:
         a2:7d:b3:cf:42:66:9c:45:a6:8e:b8:ef:ba:04:97:c1:2c:3e:
         a7:31:91:74:c3:63:ca:56:d6:ee:f9:cc:1e:3a:f2:73:55:46:
         15:3f:51:c6:e1:45:7f:45:a1:cf:6d:59:17:71:ad:1b:18:80:
         a9:e3:82:e4:1d:d2:73:1b:16:67:84:18:3e:f8:32:b1:0b:1b:
         fa:23:88:4e:6f:16:14:52:d4:b1:73:2a:c7:16:9f:f9:39:a1:
         4c:8d:7f:b8:5b:0a:f6:ce:14:bf:53:b6:12:ff:0a:3c:16:6b:
         eb:78:02:b4:0b:40:12:21:08:c9:37:70:c7:28:f4:a5:e1:d6:
         44:a5:8e:4e:05:71:2f:38:d0:4f:27:19:15:9f:7f:2d:d7:c5:
         3f:d2:56:6c:0b:ec:3f:3c:61:bb:ab:69:19:a0:b6:93:ea:90:
         16:21:91:eb:f7:7d:a3:40:8a:bf:6f:78:1f:65:16:85:e0:95:
         77:9f:73:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:08:00 2025 by rpki-client