Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bbbb48e7-a39c-3fcc-8db1-366a74e5fba3.roa
File:                     bbbb48e7-a39c-3fcc-8db1-366a74e5fba3.roa (raw, json)
Hash identifier:          e++GmjfDbwMnhF12e2SS1waYuQEXvMi0id6iHqg6aNI=
Subject key identifier:   E4:83:55:05:B4:F3:FA:68:69:CA:1D:F4:BD:3A:5A:04:E2:E0:50:D9
Certificate issuer:       /CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
Certificate serial:       010D0C9F43285848E2D119953A7FCE47257E6980
Authority key identifier: 09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bbbb48e7-a39c-3fcc-8db1-366a74e5fba3.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     397041
IP address blocks:        134.195.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:19:95:3a:7f:ce:47:25:7e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=20c4efc4-85ca-4aef-af2a-7d51d0dc31ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:09:9e:ed:0e:da:b0:b2:99:32:2d:41:60:0f:
                    92:26:0a:d9:9b:9e:86:f4:e0:8b:70:23:67:be:e0:
                    b1:60:0c:6a:40:e4:f7:5c:8a:ff:57:d9:26:a5:6a:
                    15:34:d3:a2:1e:e9:8d:f5:97:d7:02:fe:8d:92:ec:
                    f4:63:08:b5:fa:89:7c:0f:85:2e:1b:77:d6:45:15:
                    c5:ce:64:46:c8:a2:38:37:73:db:cf:85:08:d7:4e:
                    5b:c3:b0:81:3f:ef:90:b8:e1:c6:40:11:9f:f8:0b:
                    cc:6d:00:a5:3e:e6:a1:a6:3e:c8:d8:af:e7:a7:aa:
                    0b:9d:1c:00:6e:81:4d:4d:06:59:2f:1a:90:09:38:
                    36:de:80:90:10:34:3c:bf:f5:92:dc:9e:5a:1a:1e:
                    5f:14:0e:5f:0c:5c:73:86:ca:1f:ce:49:0c:7b:49:
                    f9:ca:e1:e7:72:51:71:53:17:99:38:20:e6:15:7c:
                    06:d1:6c:8d:b9:7a:b3:df:0c:ab:60:eb:92:84:36:
                    34:67:59:2a:e6:61:ec:8b:5b:07:bc:2e:ba:68:6c:
                    29:16:54:1f:17:12:a7:2b:ed:5f:86:a2:60:16:53:
                    60:3b:a5:ca:6a:6f:cd:d2:8b:9c:7d:41:5a:4a:44:
                    b3:69:15:13:d4:14:71:84:7b:ff:7a:05:b1:8a:27:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:83:55:05:B4:F3:FA:68:69:CA:1D:F4:BD:3A:5A:04:E2:E0:50:D9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/bbbb48e7-a39c-3fcc-8db1-366a74e5fba3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.crl

            X509v3 Authority Key Identifier:
                keyid:09:28:03:82:14:21:A9:9C:A8:43:E5:A3:00:37:47:84:D1:24:67:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/12b79ec0-dc3b-4ae0-ac9a-be5e440cf3bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.226.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:41:06:59:0c:54:62:f1:86:6b:c6:69:92:33:9d:54:93:1c:
         ba:10:59:9e:2c:6a:23:d8:cb:67:20:67:eb:c7:f1:24:c7:bb:
         b9:6d:99:43:de:db:6f:4e:ba:b2:8e:85:9a:8a:6e:f3:b0:ce:
         9c:48:e6:1b:82:84:eb:e7:2b:a4:18:3f:cd:16:61:03:07:92:
         73:81:ef:da:a4:54:45:93:0c:91:0d:1f:01:e5:6e:7e:be:23:
         fd:b4:70:3e:7b:bf:a4:ed:ad:f3:d6:6d:b7:36:83:b9:9e:16:
         01:39:73:fb:2e:f6:56:1f:7b:b3:7c:89:f8:35:08:49:f0:6a:
         37:62:87:8c:46:fc:26:82:57:85:1c:88:7f:71:e7:3c:a9:1b:
         2a:21:c5:b6:7d:ea:82:f6:37:ba:bb:ad:b4:78:1e:8c:0f:9c:
         92:a2:6f:2b:0b:5d:94:9b:5c:d2:f6:77:58:77:61:4e:76:43:
         58:f9:0a:af:4a:63:39:52:d3:c3:6d:7b:f2:91:29:cf:34:15:
         e9:33:cc:d1:08:b2:5f:5c:b5:2a:db:98:6f:a8:10:6e:77:7f:
         f4:b3:ef:cc:96:a7:80:78:97:68:21:38:94:c9:dc:bc:eb:97:
         16:6a:df:72:cc:ce:96:19:e8:04:c2:5f:a8:3b:97:59:ae:d1:
         da:fc:b6:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 06:33:08 2025 by rpki-client