Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/ac303319-1312-3743-bd0b-c78e09f300d0.roa
File:                     ac303319-1312-3743-bd0b-c78e09f300d0.roa (raw, json)
Hash identifier:          L+0XRW2XU7D3tbp3fuDce9V/HFA04dcPJkHUahjqOp0=
Subject key identifier:   F9:F5:BC:E4:66:BE:57:48:04:60:2B:E7:AE:12:E6:E5:A6:69:42:87
Certificate issuer:       /CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
Certificate serial:       010D0C9F43285848B090AF10AB0133BBC230F900
Authority key identifier: 8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/ac303319-1312-3743-bd0b-c78e09f300d0.roa
Signing time:             Tue 28 Jan 2025 02:00:39 +0000
ROA not before:           Tue 28 Jan 2025 02:00:39 +0000
ROA not after:            Mon 28 Apr 2025 01:00:39 +0000
asID:                     26677
IP address blocks:        192.75.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 18 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b0:90:af:10:ab:01:33:bb:c2:30:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39b7a1af-10b3-4d25-bd3d-063971b6afbc
        Validity
            Not Before: Jan 28 02:00:39 2025 GMT
            Not After : Apr 28 01:00:39 2025 GMT
        Subject: CN=1f25e44d-0df6-41ec-aaad-5c1e27962e4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:2d:bc:20:8f:d5:33:86:7d:e8:25:76:87:c0:
                    99:c4:6d:65:97:cc:38:a9:10:c1:60:78:8d:bd:ed:
                    0e:f2:e9:4a:9a:8a:22:ab:72:80:d1:dd:f8:90:9d:
                    7e:a8:cf:5a:92:f0:f2:a0:f1:a0:be:a1:81:5e:69:
                    7b:4d:6c:d5:a0:c8:af:da:05:54:a4:92:1c:25:16:
                    1c:ad:52:bc:71:f0:dd:07:2f:0e:d9:07:b2:eb:ac:
                    4b:fa:a5:e3:f0:0b:7a:c9:4d:9b:36:49:5d:a3:f8:
                    bb:ca:ec:d2:9c:31:ea:a8:88:c7:61:35:16:61:db:
                    e6:ab:28:bb:96:81:69:6d:2c:76:4b:5c:66:c2:8f:
                    a2:93:24:5a:88:82:62:62:b5:46:71:92:50:66:3c:
                    8a:9e:0c:16:65:93:0e:db:74:f5:7c:53:e4:3e:86:
                    a6:b3:23:72:05:b3:1b:65:8a:14:30:f0:c5:f1:da:
                    8f:14:b1:00:1e:e2:ea:2a:0d:e7:cf:96:f8:ea:a0:
                    ec:07:ad:48:4b:6d:4a:77:30:e0:fa:0a:42:78:a5:
                    37:6b:cd:04:ad:27:74:04:51:66:53:14:a4:17:4c:
                    55:3b:ed:11:e1:1c:fe:ed:56:37:9d:41:32:ce:7f:
                    39:b1:6d:94:0f:59:bd:d3:3e:03:a4:e1:24:f7:ac:
                    c1:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:F5:BC:E4:66:BE:57:48:04:60:2B:E7:AE:12:E6:E5:A6:69:42:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/ac303319-1312-3743-bd0b-c78e09f300d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc/39b7a1af-10b3-4d25-bd3d-063971b6afbc.crl

            X509v3 Authority Key Identifier:
                keyid:8D:1A:CB:CB:3C:93:76:93:9D:F1:49:93:22:36:91:24:54:AB:60:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/39b7a1af-10b3-4d25-bd3d-063971b6afbc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.75.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:77:69:e6:1d:be:42:5d:62:5d:91:e5:77:24:dc:e0:1d:b1:
         b6:1a:f3:c2:84:b6:2e:a5:1f:07:4d:ef:1d:1c:4d:8a:0e:e0:
         bc:b6:1c:ff:9c:76:3c:f6:58:e9:c0:4a:db:0a:3e:0e:81:ed:
         28:c6:3b:fe:1a:bd:8c:76:af:28:3e:a3:c8:db:f0:48:07:e2:
         46:cc:96:8b:ed:06:17:74:28:1d:76:da:49:a6:5d:94:e7:a3:
         1a:49:7a:a2:a7:67:c7:fd:ee:19:d2:1a:31:3a:05:c9:2a:71:
         be:fa:7b:57:67:41:b0:5b:4d:0c:0a:65:2b:2d:c6:0f:09:ae:
         c2:c1:d2:c4:27:6f:57:f2:f1:74:7b:75:e2:e7:97:8d:86:81:
         3e:9a:1a:59:b3:6c:69:f3:9f:45:a5:f6:8c:3a:f8:42:3f:0e:
         79:cc:72:bf:0a:71:f5:ba:c0:5c:6a:70:7d:01:51:91:80:cb:
         71:b1:c2:74:3d:63:79:b8:d4:0e:94:ca:ad:03:45:55:1a:07:
         c5:83:7f:b7:b9:84:c6:eb:68:62:c4:34:1e:a2:6b:6f:50:4f:
         66:11:b2:27:53:87:17:57:ef:29:88:68:44:e7:7f:98:c2:07:
         af:57:36:bd:a6:2e:b1:b0:64:7f:69:1b:3f:a2:a6:12:37:58:
         bf:1d:04:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 02:21:26 2025 by rpki-client