Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa
File:                     1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa (raw, json)
Hash identifier:          NMU2Z/jikXRb6ALO9kNufXzAi2fS35WgRKpfCR2xSm8=
Subject key identifier:   94:6A:84:03:2B:A8:95:D8:BD:8A:FA:69:EA:A3:07:D6:AB:7F:BB:14
Certificate issuer:       /CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
Certificate serial:       010D0C9F432858491D718124A45FF944FCE51C40
Authority key identifier: 32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     11052
IP address blocks:        199.249.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:81:24:a4:5f:f9:44:fc:e5:1c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b985122e-f2ff-4349-8e7b-d604ee2577f1
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=ca1c0d20-c7b2-4326-bd83-249340e6aced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4d:84:76:16:16:3d:47:9a:94:7c:35:35:c5:
                    d8:78:ad:ae:b4:40:b7:de:10:94:d5:a6:02:33:ee:
                    f7:20:ac:53:42:54:2a:0c:97:15:fd:4a:3c:b0:8b:
                    e6:29:dc:a4:81:94:11:1a:0a:67:d5:8e:f2:a6:d7:
                    45:56:ab:03:fd:ff:d5:91:2e:4a:19:df:7d:8a:13:
                    e4:c5:78:f6:e4:38:ea:0c:34:4b:01:f1:89:07:23:
                    77:4f:2a:11:4f:9c:bc:28:7a:55:ca:6e:90:b3:40:
                    e4:0c:93:0d:fe:72:51:90:9f:67:04:fe:29:1b:e0:
                    bb:ce:ec:d2:e0:3c:7e:d4:c9:20:77:00:29:8a:8a:
                    66:22:dc:f1:fc:46:1f:dd:ec:86:c1:f7:b0:f5:aa:
                    2c:f1:7b:f6:7d:bd:34:ed:94:8a:f4:52:0a:ff:57:
                    2f:c6:64:34:90:d1:0c:76:4e:47:f3:45:c3:fd:16:
                    1c:15:55:fc:c7:a0:68:b3:05:03:16:92:23:b4:0e:
                    d1:4d:94:df:cd:3d:5d:bb:1b:f7:53:dc:99:f0:1b:
                    c9:4a:8d:b1:be:1b:6a:19:fe:63:17:b7:ee:66:2c:
                    61:f5:3a:43:c6:68:45:05:37:d7:8f:af:29:1b:6b:
                    32:c1:cb:07:68:a3:0a:61:76:a2:fd:3d:0e:ff:26:
                    6e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6A:84:03:2B:A8:95:D8:BD:8A:FA:69:EA:A3:07:D6:AB:7F:BB:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/1cd203cc-512e-3c5b-ad81-8200b4d1cfcc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1/b985122e-f2ff-4349-8e7b-d604ee2577f1.crl

            X509v3 Authority Key Identifier:
                keyid:32:43:E7:3C:F7:1B:05:DF:36:0A:46:4E:31:16:51:4B:87:61:26:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b985122e-f2ff-4349-8e7b-d604ee2577f1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.249.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:e8:1e:9f:8b:a3:d6:18:4d:4f:cf:fb:a8:3c:64:21:8c:89:
         a8:61:b1:9d:ed:89:87:f9:0d:3f:85:63:88:9f:31:d2:d6:f5:
         23:99:22:7f:2b:99:40:25:4c:24:ff:74:ad:79:bb:a8:85:9b:
         be:ed:cc:d0:10:ab:05:32:d2:3b:21:bc:66:47:65:8e:27:20:
         d9:9d:61:ae:ba:31:aa:49:af:f1:91:2f:7c:45:f5:74:f1:20:
         c8:a0:5f:a6:f5:9e:2e:5d:79:d7:d9:4c:85:00:78:5e:82:93:
         23:d8:5b:fc:c7:e7:02:d8:22:8a:17:c8:fb:1c:4e:9b:39:18:
         f8:85:d8:eb:ac:5b:4f:3b:86:87:a5:65:8f:48:77:3d:a8:73:
         35:e0:2c:2d:01:e4:73:4a:19:7e:ca:98:86:43:18:fb:93:0a:
         48:7d:04:9f:5c:61:3d:f9:79:12:66:94:f7:1c:6b:f0:53:ff:
         4e:7a:48:ed:44:be:b9:75:04:38:e7:68:a6:40:92:c8:5e:5a:
         b5:be:5f:9b:28:ca:6e:7b:c7:35:e5:4c:69:dc:63:58:5e:ef:
         e6:80:c3:df:f7:83:f7:db:52:8f:14:29:bb:d3:bd:93:e2:10:
         9b:6a:3d:a2:67:3b:ed:ef:64:6b:6e:33:a4:c9:85:45:4a:07:
         d8:a5:9e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 15:04:51 2025 by rpki-client