Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
File:                     556c32cb-56ac-3007-88c8-3f234c1b45af.roa (raw, json)
Hash identifier:          z6RdFLkSMEHxui4kx4T+83+H9FKk29otLD0soj71yGs=
Subject key identifier:   1B:24:2A:66:29:3D:54:6B:62:21:2D:D2:61:75:76:A0:D4:FE:65:1B
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584910E17F334C2DF53D440B37E0
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa
Signing time:             Mon 03 Mar 2025 14:00:53 +0000
ROA not before:           Mon 03 Mar 2025 14:00:53 +0000
ROA not after:            Sun 01 Jun 2025 13:00:53 +0000
asID:                     18888
IP address blocks:        64.42.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 15 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:10:e1:7f:33:4c:2d:f5:3d:44:0b:37:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Mar  3 14:00:53 2025 GMT
            Not After : Jun  1 13:00:53 2025 GMT
        Subject: CN=a1b5eb13-9197-4362-8b3a-45ba8fa2c204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:09:1e:31:fd:cf:e4:a4:61:56:ca:d4:0a:c7:
                    9b:ff:31:1a:56:52:d3:64:ea:0f:8d:b5:2f:e4:70:
                    f7:64:7f:17:81:da:a1:30:53:69:9a:31:5d:ee:3a:
                    d4:55:0a:3d:6a:b5:d5:d1:d9:23:3b:1c:a6:8d:f0:
                    0b:93:f7:16:6d:b6:5b:2d:1d:d1:2d:99:3b:30:e5:
                    5d:7f:28:28:81:9d:94:aa:28:7a:15:48:52:48:6b:
                    bf:6c:e5:32:ad:f0:72:5d:05:3d:0f:26:f4:f0:ae:
                    e0:1e:a7:d1:df:cf:66:9d:95:f6:d5:00:d6:38:78:
                    ee:da:76:81:a7:ff:76:0f:7d:3c:de:66:ed:9e:60:
                    02:46:13:41:89:0c:d5:3e:1c:55:83:c5:25:7e:da:
                    d3:ec:1a:13:01:82:a0:24:e2:fc:a9:35:61:b4:c8:
                    2c:e0:7e:81:2a:5c:c7:9f:56:ec:93:16:39:31:2d:
                    70:88:0d:c5:59:7f:a6:cc:2e:20:45:b3:d8:76:9f:
                    54:fd:f2:e3:5f:b8:8d:cc:1f:74:a9:da:e4:20:e7:
                    df:1a:3c:c0:43:9e:95:0a:91:18:18:78:4a:80:79:
                    c4:e1:fc:e3:a3:93:ef:15:12:89:f6:f0:f1:dc:03:
                    d8:1a:63:0b:4e:da:40:e8:4f:73:96:dc:a6:b7:90:
                    bb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:24:2A:66:29:3D:54:6B:62:21:2D:D2:61:75:76:A0:D4:FE:65:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/556c32cb-56ac-3007-88c8-3f234c1b45af.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:c9:a6:a0:52:b3:26:ea:f8:d8:d1:e3:08:93:45:f9:e0:1f:
         c2:f8:f8:9e:93:0a:bb:2b:a1:61:0c:a4:c3:69:8e:c2:de:4d:
         11:16:84:f7:a4:1e:c7:25:5f:c5:fc:3d:56:8e:35:9e:22:b0:
         64:48:7d:d3:3d:0b:ac:11:28:c4:93:0b:a9:4a:90:63:86:40:
         ea:42:59:4a:87:ef:9a:3c:6c:60:70:90:99:1e:09:4f:74:1c:
         c1:8c:5b:12:3a:e8:d0:63:71:2b:28:53:6e:ca:f3:11:13:71:
         6e:f8:3b:35:45:50:87:bf:25:6f:92:97:ac:ca:dd:a9:03:38:
         7f:16:d4:cf:b9:f8:2e:2c:70:fa:de:81:0d:c5:44:a3:02:91:
         63:b5:37:e0:81:28:19:be:ca:9a:4d:99:13:d2:dd:f9:d0:bc:
         b7:c5:02:17:4c:20:87:70:78:1a:db:66:bd:fb:cb:e6:fe:0e:
         3c:e3:77:7e:8a:50:5d:9a:e2:f7:22:a2:e6:3f:67:ae:52:42:
         20:16:35:83:e3:b8:9f:95:76:59:5e:c8:b7:14:94:a4:aa:d5:
         ec:21:3b:e1:8e:e7:39:39:39:5b:ba:54:de:35:85:36:2c:56:
         21:82:c6:e5:49:bb:d6:df:c8:ca:3b:8e:29:a5:34:fb:d6:71:
         b7:d9:73:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 13 18:38:22 2025 by rpki-client