Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/323228a0-d12e-300e-8b0e-ea1e794f3b4c.roa
File:                     323228a0-d12e-300e-8b0e-ea1e794f3b4c.roa (raw, json)
Hash identifier:          Dh7ZURviDbzK3u9NWHeHc+WX0a3TrudnWPr7qST4D0Q=
Subject key identifier:   0D:3F:0F:5E:C5:D2:F2:D8:D3:CE:1A:86:6D:AE:15:33:54:87:3F:24
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E88C5900BC234C5758280
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/323228a0-d12e-300e-8b0e-ea1e794f3b4c.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     6559
IP address blocks:        198.86.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:88:c5:90:0b:c2:34:c5:75:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=e81acb54-f8fc-4e6d-a81d-b7408aad63e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ca:76:50:fa:ed:eb:36:48:86:3c:6f:74:ab:
                    46:66:aa:1b:64:fb:84:a6:de:a4:e1:9d:aa:47:74:
                    fc:bb:5d:da:17:e8:cc:88:8e:59:f1:1a:6e:93:8a:
                    3a:88:f1:d8:42:57:3d:83:db:eb:5e:83:ea:73:c0:
                    a5:ae:37:5d:8c:86:28:ba:85:bf:54:47:e2:df:02:
                    ce:e4:46:1a:41:97:d4:f3:13:f6:1a:f5:36:5a:71:
                    72:ba:ec:66:ec:19:7e:d2:98:13:92:b5:1e:59:67:
                    e1:14:95:4a:ce:80:21:9b:e0:d6:08:37:5a:a7:0d:
                    7e:8e:d7:5e:a8:34:21:e4:c0:1f:07:4f:ed:c7:fc:
                    64:69:65:2b:03:f0:c9:74:ed:f4:f6:e1:1f:ca:a0:
                    5e:b5:3b:36:f1:5e:e6:70:46:45:86:f1:dc:54:e3:
                    56:cb:56:b9:24:f7:52:2c:af:dc:9f:9d:a1:91:de:
                    c2:35:6b:0f:cc:4f:61:b2:0a:51:5e:a3:24:ee:09:
                    98:bd:9f:8f:69:2f:ec:34:eb:5d:35:9e:cc:4d:88:
                    a4:32:ef:05:f6:1e:19:31:bb:91:bd:e4:e0:e1:b0:
                    60:36:af:02:9a:0c:59:a3:7e:ac:05:09:01:6d:de:
                    24:11:6d:10:ab:dd:1d:2c:50:20:16:d4:f6:a2:05:
                    f2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:3F:0F:5E:C5:D2:F2:D8:D3:CE:1A:86:6D:AE:15:33:54:87:3F:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/323228a0-d12e-300e-8b0e-ea1e794f3b4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:51:9f:c6:36:63:98:29:33:ed:f4:d3:51:2c:15:79:d9:2a:
         04:4f:60:1c:4c:06:d6:8e:bc:bf:02:ec:36:a3:51:67:15:87:
         a7:92:2d:fb:36:fb:e2:f1:7d:31:a7:63:56:7f:de:49:24:ae:
         2f:b9:e4:9f:06:b6:0d:40:06:c9:a9:97:fe:95:34:c8:37:bd:
         90:97:be:72:2a:ac:dd:a9:32:09:a7:2c:a7:2e:f2:87:74:bf:
         f1:11:ee:fa:84:5d:98:be:58:1d:41:65:8a:b4:19:aa:ce:43:
         93:3d:0b:9c:eb:1d:f7:0c:24:49:7e:29:bd:65:ac:01:2e:b4:
         8e:3a:7d:e4:13:30:56:c8:c3:2b:94:5b:de:21:14:91:88:a4:
         ba:a0:c4:42:d1:82:9d:49:dd:36:0b:1f:e3:83:57:49:10:7b:
         3a:98:74:ce:52:c9:31:ef:e3:e9:60:56:8e:9b:35:5f:87:a9:
         91:34:c6:b0:ac:17:e4:40:9d:b5:f9:89:40:a3:b0:c4:bf:65:
         0e:23:10:6d:df:d0:12:38:ee:ab:72:13:ae:7b:97:3b:92:44:
         94:21:e7:ed:4c:ff:55:87:d3:ae:6c:92:07:4c:99:02:f4:dd:
         cd:ee:6e:f9:30:b0:ba:05:92:0a:1b:53:e3:c2:24:45:02:34:
         ac:bf:2a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:00:41 2025 by rpki-client