Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/0e26948f-3610-3a8d-b07d-7d75746155dd.roa
File:                     0e26948f-3610-3a8d-b07d-7d75746155dd.roa (raw, json)
Hash identifier:          XNR2QhmlMRul6uQVfDVI8X6j+FSEroB4gzZwiz8b4iw=
Subject key identifier:   B1:32:43:9C:03:3C:9B:EF:49:73:6B:CE:EE:C1:A0:1F:ED:52:2F:B2
Certificate issuer:       /CN=a4530197-8968-425f-b6ab-d075941dc95c
Certificate serial:       010D0C9F43285849780F164A0E5B5F5F87116F80
Authority key identifier: AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/0e26948f-3610-3a8d-b07d-7d75746155dd.roa
Signing time:             Wed 09 Apr 2025 13:01:01 +0000
ROA not before:           Wed 09 Apr 2025 13:01:01 +0000
ROA not after:            Tue 08 Jul 2025 13:01:01 +0000
asID:                     401085
IP address blocks:        192.112.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:78:0f:16:4a:0e:5b:5f:5f:87:11:6f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4530197-8968-425f-b6ab-d075941dc95c
        Validity
            Not Before: Apr  9 13:01:01 2025 GMT
            Not After : Jul  8 13:01:01 2025 GMT
        Subject: CN=9a408709-7b5e-478b-9782-13217657ef31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:1a:0c:45:36:0b:a2:ef:01:78:73:59:b5:66:
                    14:d4:6e:6c:41:d1:54:f6:e8:70:c3:40:63:ed:3f:
                    1e:f3:91:57:90:d8:c6:da:d0:77:17:d6:96:4d:2e:
                    6e:f4:87:10:d7:4b:d5:3f:91:98:17:86:bb:28:58:
                    02:32:18:55:c3:19:57:8d:84:d6:9b:57:18:b7:67:
                    71:7a:e6:a7:20:ab:3a:21:47:ea:9b:57:bf:81:b7:
                    d7:00:0b:8d:c7:43:08:a3:28:30:bc:e5:ce:46:59:
                    1e:d6:c8:ba:63:c7:29:1c:17:66:7b:2a:78:e9:b9:
                    b8:a2:99:30:4c:41:c3:dc:74:44:38:34:47:3f:84:
                    a8:f3:42:54:d5:8e:11:ce:db:e9:0c:c2:01:cb:10:
                    bd:e6:ba:54:84:33:0a:44:ca:9b:35:a1:43:a2:fa:
                    42:bc:db:2e:62:b2:36:75:3d:d2:bb:cd:2e:3b:17:
                    57:e5:d5:cd:1e:8b:de:88:d3:6f:38:6c:71:44:a7:
                    9a:07:88:e7:a7:2d:1d:0e:a9:db:18:70:38:45:b4:
                    5a:62:5b:9a:bd:4e:41:7b:58:1a:aa:ea:ef:c8:78:
                    c1:72:22:e2:e6:4c:56:d7:ae:ee:d7:4a:0e:76:3a:
                    12:ef:54:96:44:af:9b:44:67:d9:bc:3f:63:6a:8b:
                    d5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:32:43:9C:03:3C:9B:EF:49:73:6B:CE:EE:C1:A0:1F:ED:52:2F:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/0e26948f-3610-3a8d-b07d-7d75746155dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c/a4530197-8968-425f-b6ab-d075941dc95c.crl

            X509v3 Authority Key Identifier:
                keyid:AC:75:9D:E1:98:8D:FE:FD:4A:14:1E:D2:AC:30:33:C3:B1:75:E2:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/a4530197-8968-425f-b6ab-d075941dc95c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.112.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:26:89:96:c6:94:92:9c:0d:ec:06:0c:05:87:3d:68:5e:d2:
         2a:f9:7e:58:77:2c:90:87:f6:4d:8b:15:23:13:9f:16:99:90:
         81:d9:5a:50:dc:00:e6:72:15:92:0d:1e:d0:a2:7b:d9:69:1f:
         d0:58:cd:2a:15:47:18:a6:77:cf:5d:42:c7:a4:1f:af:dc:de:
         50:d8:3d:5e:52:90:d7:95:cc:6c:a1:1b:e2:22:f7:d5:39:5a:
         79:3a:72:89:2a:ab:45:44:4c:17:f5:4d:0a:81:fc:d2:1a:5d:
         72:4e:95:01:05:82:7d:28:44:2e:ea:d4:c9:79:a1:a1:7b:8b:
         03:e4:e2:cb:d3:61:0c:1f:87:9a:17:bc:1e:ca:e7:f7:0e:41:
         6b:5d:ef:5e:f1:05:fb:ca:b2:f0:d0:91:24:97:dc:ec:ba:07:
         d3:b9:e1:b7:af:c0:a3:98:c4:ed:c7:ab:13:05:6f:fb:ff:97:
         68:3e:67:60:4b:ad:55:8b:47:27:18:01:ee:2e:12:39:a0:25:
         9e:b2:6d:22:fc:34:2b:a0:fb:7d:da:2c:71:3f:05:cd:8d:80:
         fc:e9:3f:2a:e5:6f:b1:8d:4a:5b:88:e0:ba:39:04:57:0c:f8:
         36:bb:e1:36:4c:be:2e:fc:60:79:5a:31:00:d3:84:99:54:df:
         4c:cb:7c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:33:11 2025 by rpki-client