Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
File:                     2f0b7f49-a633-3566-aa0c-7f199a78611a.roa (raw, json)
Hash identifier:          M/xgKo3mIlhsJuVm/lrym4CyOCC492yBsdI2yneiHi8=
Subject key identifier:   51:EC:82:29:6B:9F:4E:18:43:D6:4C:D0:4B:B3:16:50:A2:5A:5C:06
Certificate issuer:       /CN=9c841696-0857-4d7c-8db5-21941a77450c
Certificate serial:       010D0C9F43285848AC60D69F0FD125E4D1389D80
Authority key identifier: 62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa
Signing time:             Sun 26 Jan 2025 14:00:52 +0000
ROA not before:           Sun 26 Jan 2025 14:00:52 +0000
ROA not after:            Sat 26 Apr 2025 13:00:52 +0000
asID:                     237
IP address blocks:        192.138.137.0/24 maxlen: 24
                          192.160.192.0/24 maxlen: 24
                          192.160.204.0/24 maxlen: 24
                          192.245.252.0/24 maxlen: 24
                          192.245.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ac:60:d6:9f:0f:d1:25:e4:d1:38:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c841696-0857-4d7c-8db5-21941a77450c
        Validity
            Not Before: Jan 26 14:00:52 2025 GMT
            Not After : Apr 26 13:00:52 2025 GMT
        Subject: CN=4d649daf-7947-43c5-bf33-d3000213d6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:37:f7:9a:4f:fd:db:13:be:55:60:26:59:d8:
                    94:87:3e:3a:94:c2:68:97:5a:ac:ad:c0:4e:cf:01:
                    9f:7f:1c:70:9e:98:49:d0:00:9d:ca:c4:0c:b2:f8:
                    08:6f:4f:a7:bd:29:d1:c3:82:5d:67:23:40:2e:ed:
                    49:dc:10:2b:d1:0f:5b:a6:52:65:06:93:5e:c6:d8:
                    b3:71:40:16:b2:52:83:77:9f:0c:bf:7b:41:e9:92:
                    b8:bf:c9:73:4a:4e:9f:f2:f2:c6:02:00:0f:a0:fc:
                    fb:4d:df:7d:37:c0:a7:35:e0:f4:73:e2:b2:ca:cc:
                    34:20:33:cb:2f:f9:8e:e3:a3:53:23:9a:44:82:28:
                    27:06:21:95:85:b6:5e:7f:90:ee:ee:7e:3f:55:40:
                    50:15:b0:c0:4b:6a:c3:cc:93:46:bc:45:f7:5e:cd:
                    f8:85:b8:2e:b5:69:30:18:d3:7c:1d:9f:50:68:58:
                    71:84:91:cd:79:4b:31:6e:08:3e:9a:e4:ae:9f:cd:
                    a5:53:aa:d5:9e:51:c2:48:10:25:4c:f5:07:06:86:
                    ca:d2:0d:73:8b:ba:3a:9e:41:61:c4:7e:98:e1:4f:
                    53:53:6a:24:40:9e:a9:cc:05:15:a5:e6:06:84:5f:
                    9a:89:ed:ce:e0:c3:df:84:71:d6:ca:85:05:04:30:
                    52:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:EC:82:29:6B:9F:4E:18:43:D6:4C:D0:4B:B3:16:50:A2:5A:5C:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/2f0b7f49-a633-3566-aa0c-7f199a78611a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c/9c841696-0857-4d7c-8db5-21941a77450c.crl

            X509v3 Authority Key Identifier:
                keyid:62:50:96:69:18:22:A8:38:CD:B8:E9:3F:9D:92:50:43:2C:1A:AC:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9c841696-0857-4d7c-8db5-21941a77450c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.138.137.0/24
                  192.160.192.0/24
                  192.160.204.0/24
                  192.245.252.0/24
                  192.245.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ce:3a:a2:36:53:ea:a4:25:e5:57:ab:63:dc:9d:58:e3:5d:
         3c:e2:a3:5a:4b:87:b4:7c:6d:15:9f:1c:e2:c9:52:e9:b1:8b:
         a7:58:d5:b3:d6:a8:ca:19:09:e2:d9:45:44:8f:60:0e:33:2a:
         7b:4f:a3:06:13:ae:62:ee:23:c9:d4:7f:6b:6a:83:5a:cd:30:
         cc:4c:2c:60:0a:16:60:95:40:9c:ef:d6:07:2d:c0:03:57:f1:
         e7:fa:23:01:76:48:12:d9:10:e3:14:a5:0e:45:d9:08:d0:df:
         3c:0c:52:a1:ff:00:43:55:d2:83:75:f4:95:4e:b2:a7:b3:aa:
         4a:f9:e7:8f:3e:de:01:99:f1:7a:43:36:11:2c:3c:9f:70:19:
         a4:c7:79:9d:3b:89:1b:e8:8a:cc:13:fa:f6:04:8e:40:02:43:
         a3:92:9b:16:80:35:42:eb:8b:ec:b0:10:26:17:7c:f6:06:30:
         90:88:58:8e:80:82:80:f5:97:75:37:68:a8:c2:a7:17:f6:84:
         48:b1:d9:cd:59:c1:f2:d5:86:3c:b5:bc:d2:e4:ff:38:bf:2d:
         c2:38:ba:f8:69:8a:6b:1a:b4:c5:72:f7:d2:80:10:e8:bb:80:
         78:1f:d8:19:9f:47:2c:b2:ac:07:c5:6f:26:36:74:31:90:bf:
         d5:f4:65:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:39:45 2025 by rpki-client