Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/200185fa-2b20-3efc-8e81-d7da210932f9.roa
File:                     200185fa-2b20-3efc-8e81-d7da210932f9.roa (raw, json)
Hash identifier:          pbIBjfIAoTgHfVTcwcqjwFOba9XO+5KoXcIF9ewegvY=
Subject key identifier:   B3:CE:B2:EC:82:56:A1:DC:2E:7A:DE:34:F7:40:98:73:7A:FD:88:74
Certificate issuer:       /CN=c027d584-e794-440d-8395-8f6806801867
Certificate serial:       010D0C9F432858494E2EB525844D65078168EF80
Authority key identifier: 0C:01:5C:13:6B:67:14:69:D6:A8:59:F3:D7:1F:A8:33:97:0D:83:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/200185fa-2b20-3efc-8e81-d7da210932f9.roa
Signing time:             Tue 25 Mar 2025 13:00:51 +0000
ROA not before:           Tue 25 Mar 2025 13:00:51 +0000
ROA not after:            Mon 23 Jun 2025 13:00:51 +0000
asID:                     8075
IP address blocks:        202.90.34.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/c027d584-e794-440d-8395-8f6806801867.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/c027d584-e794-440d-8395-8f6806801867.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4e:2e:b5:25:84:4d:65:07:81:68:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c027d584-e794-440d-8395-8f6806801867
        Validity
            Not Before: Mar 25 13:00:51 2025 GMT
            Not After : Jun 23 13:00:51 2025 GMT
        Subject: CN=0fc203f4-7323-4362-9d63-3a984ec254d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:cf:b8:66:f9:3a:c6:c1:01:42:c2:6b:6f:d2:
                    d0:2a:4c:91:fd:17:03:9c:20:de:3c:75:14:ee:34:
                    4a:a6:44:6d:06:c9:e2:c8:30:32:55:57:34:94:f6:
                    e9:47:ac:3e:d5:c4:e4:52:42:91:c5:88:9b:3b:73:
                    6a:ac:6c:81:85:16:c9:8b:e4:a6:ff:12:d7:fd:f5:
                    50:39:04:63:a7:5b:f9:a3:6c:90:e4:d5:f9:78:43:
                    7a:66:7e:1c:b8:0e:95:74:57:06:9f:39:7f:5c:79:
                    9b:30:19:ea:14:cf:91:ef:02:91:39:4f:53:ce:fa:
                    73:44:48:17:59:12:30:77:c6:e8:af:9a:c7:42:9b:
                    98:e2:cd:cd:53:b9:0a:b1:0a:26:f1:6d:87:b3:0d:
                    d1:54:59:47:e0:51:b2:ad:c6:73:f5:2f:81:fd:22:
                    08:d9:8e:3e:bb:3e:82:eb:2b:97:b6:6c:04:db:a4:
                    61:c1:37:90:d7:3f:2e:42:55:72:52:ea:9f:32:15:
                    72:53:d7:fd:2f:fc:65:9c:3c:78:68:82:07:a4:3e:
                    70:6b:95:0d:9e:da:18:60:ce:79:f2:70:2e:e3:3d:
                    6c:c3:5c:8e:3e:7f:de:2d:b3:fd:d8:08:23:eb:ff:
                    ef:a9:88:6a:b2:fc:3e:62:a0:2c:38:e5:17:24:c1:
                    f0:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CE:B2:EC:82:56:A1:DC:2E:7A:DE:34:F7:40:98:73:7A:FD:88:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/200185fa-2b20-3efc-8e81-d7da210932f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867/c027d584-e794-440d-8395-8f6806801867.crl

            X509v3 Authority Key Identifier:
                keyid:0C:01:5C:13:6B:67:14:69:D6:A8:59:F3:D7:1F:A8:33:97:0D:83:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c027d584-e794-440d-8395-8f6806801867.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.90.34.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:49:86:50:42:1c:a4:ac:b5:31:96:bb:30:ca:ca:7f:f4:79:
         04:ff:94:a3:c8:15:e7:61:1d:c2:db:44:c3:2e:83:82:d7:a4:
         38:52:31:b4:c6:4d:06:29:47:64:84:c9:48:db:f8:dd:cc:7c:
         10:4a:a9:6f:ba:2b:1d:4b:2e:ce:fc:79:97:55:92:1c:56:f7:
         50:ba:7a:5b:bd:7a:b7:53:e5:34:e5:fa:16:17:5f:db:0b:70:
         9b:9c:45:e4:d9:24:f3:5b:19:b6:ca:c7:73:4b:66:d6:a3:43:
         64:20:4d:37:14:d0:f1:88:a2:fe:7b:29:f4:93:c4:55:17:d4:
         45:b3:56:67:0f:a0:30:4c:1c:da:ea:07:fb:a5:d1:e3:c1:0c:
         96:6c:41:46:66:f5:56:04:bb:d8:44:fa:4f:c5:20:28:82:cb:
         65:8e:af:c9:97:09:d6:33:e1:19:23:97:d0:db:0b:8f:a7:9b:
         3b:81:d2:f7:c0:e0:10:9c:3d:aa:0f:5f:ae:37:31:be:f7:1a:
         a1:16:84:11:18:82:a1:a8:01:d7:0d:fc:ac:cf:7a:03:84:8b:
         7f:ac:7b:8c:66:95:0a:c8:46:a1:c7:e2:14:9d:6c:80:e5:67:
         1b:76:b0:86:b4:32:9e:0d:fa:cc:8e:b6:78:aa:8f:d0:fa:94:
         7d:d1:cb:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:55:47 2025 by rpki-client