Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93d60dd-94f2-33d7-87a4-362733ba072f.roa
File:                     e93d60dd-94f2-33d7-87a4-362733ba072f.roa (raw, json)
Hash identifier:          QyA4mYZk/oIIwqna38973DMDRZLZclPYAm23LpN0DuE=
Subject key identifier:   F2:A2:01:58:42:F8:6F:EF:9E:31:E4:65:18:46:C9:CC:B6:EC:61:A3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F43285849419E8901BBA01AE9A67BA980
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93d60dd-94f2-33d7-87a4-362733ba072f.roa
Signing time:             Fri 21 Mar 2025 01:00:39 +0000
ROA not before:           Fri 21 Mar 2025 01:00:39 +0000
ROA not after:            Thu 19 Jun 2025 01:00:39 +0000
asID:                     81
IP address blocks:        198.86.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:41:9e:89:01:bb:a0:1a:e9:a6:7b:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Mar 21 01:00:39 2025 GMT
            Not After : Jun 19 01:00:39 2025 GMT
        Subject: CN=6cae39d2-71fc-4e5a-86e3-11e2a2c39949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:95:ed:f8:98:d6:ab:86:64:7f:6d:20:c9:ab:
                    af:f0:b4:c9:0b:99:40:d4:fb:e0:bd:b3:71:38:c7:
                    4f:b6:6d:e5:dd:7d:d1:c7:09:5e:d2:b4:e1:86:08:
                    73:78:4c:96:0f:5f:55:e7:1b:f7:28:87:dd:e4:1d:
                    6f:e0:cb:8d:82:88:6f:13:86:00:6e:d8:4d:5d:da:
                    7a:a3:ac:fd:3f:4f:11:b3:78:63:77:9c:9e:b0:fc:
                    7b:b7:32:d5:aa:43:c2:dd:57:b2:af:ce:7a:d1:8b:
                    13:d4:db:68:09:a8:91:48:70:b8:8c:4d:aa:fb:33:
                    e4:55:4e:21:3c:47:13:b8:c2:fb:ac:b9:11:5a:c9:
                    7b:1d:b8:e8:a8:1b:ba:29:b9:04:3d:d0:f4:1b:5d:
                    1b:ff:51:ec:06:6c:2d:c2:40:65:f6:95:cf:ed:11:
                    b0:66:f9:4d:a9:a1:fc:f1:d3:c7:10:62:02:54:25:
                    56:8b:7c:d4:af:df:83:52:61:b8:e4:25:cb:21:25:
                    37:ad:9d:0d:4c:a5:b2:06:39:de:d0:b6:18:c5:00:
                    dc:63:30:4d:ac:7f:4b:4c:e7:a1:c6:13:15:e5:9a:
                    56:9b:51:42:78:95:44:62:3c:02:fe:a9:52:00:99:
                    f7:b7:4c:e7:e5:22:d7:7d:b5:0f:2e:f6:ea:f1:fe:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:A2:01:58:42:F8:6F:EF:9E:31:E4:65:18:46:C9:CC:B6:EC:61:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/e93d60dd-94f2-33d7-87a4-362733ba072f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.86.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:74:77:4e:13:e9:1a:9b:56:7d:e8:94:e5:65:c9:f0:5e:07:
         3d:a8:be:f2:98:7a:1e:23:ea:f8:84:3d:77:53:13:c9:11:53:
         5a:22:42:06:0a:6c:c4:4b:44:1e:7c:21:33:06:46:32:82:7d:
         3e:18:71:9d:40:2a:2a:80:49:8a:56:13:80:74:6b:08:3c:79:
         2a:17:25:65:cc:99:b2:85:93:f9:2e:91:5b:02:66:a0:56:46:
         8f:d7:38:10:1b:9e:fd:0c:97:33:63:1f:2e:5f:d1:94:a2:99:
         50:f8:24:3a:51:aa:de:9c:32:46:41:34:f9:77:c1:a9:ea:62:
         34:e0:a2:f1:e2:aa:9e:52:ba:32:ef:74:e6:2b:d3:10:e7:ab:
         3f:30:d3:c9:74:44:95:a2:4b:89:82:cf:46:30:78:25:31:40:
         28:52:98:ed:95:da:3a:da:44:c2:49:44:4c:2d:c8:0b:79:78:
         c6:e0:cc:2d:e5:cd:ab:ef:07:23:57:bc:76:d2:21:1e:34:92:
         72:76:da:c0:b0:02:c1:ab:e9:f4:8e:ae:84:4b:6c:24:f9:ec:
         4e:65:d1:8f:e1:33:82:c2:d8:2b:5d:6e:98:90:cc:c2:89:2f:
         3a:cf:b1:96:bf:7d:e2:38:23:88:2c:da:7b:4b:63:75:ae:6e:
         fe:76:74:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:55 2025 by rpki-client