Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/353eb747-c576-38d0-9eba-a88b0bb216f2.roa
File:                     353eb747-c576-38d0-9eba-a88b0bb216f2.roa (raw, json)
Hash identifier:          fQMOCzgmHMcZPnnP9R1A5pb7L6y07guXeEdkhA/L0OY=
Subject key identifier:   C9:AD:97:33:51:57:11:82:AE:EB:7D:8C:A5:23:BE:BF:9A:98:D4:C2
Certificate issuer:       /CN=611dbbed-256e-489b-8656-320fdaca032f
Certificate serial:       010D0C9F432858491246A4CC779C1B78BAA0B000
Authority key identifier: 34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/353eb747-c576-38d0-9eba-a88b0bb216f2.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     26652
IP address blocks:        192.110.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:a4:cc:77:9c:1b:78:ba:a0:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=611dbbed-256e-489b-8656-320fdaca032f
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=4b4cc709-63d1-4151-881c-043dd25cb1bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:4e:45:2d:82:c5:de:f7:83:7c:11:c0:f8:
                    b8:13:4b:2f:54:e6:9c:52:9c:74:99:5b:0d:2b:51:
                    bd:96:19:e1:dc:b5:f1:9f:7a:22:10:19:bf:7e:96:
                    d2:56:5f:c4:77:6b:29:b5:7c:2e:df:45:3f:f8:a3:
                    2b:e2:86:14:9d:73:81:5d:cc:a5:e7:8e:0f:2c:a4:
                    2c:cd:28:14:1e:a0:8f:88:9b:86:b3:55:77:55:73:
                    2f:3d:ff:fa:fe:34:e5:10:87:10:bd:1f:e5:8b:81:
                    e0:f2:82:2e:a8:3f:6b:22:bb:e0:68:4a:81:47:09:
                    0f:8a:99:79:60:b6:96:9b:3e:57:f6:79:2f:89:f6:
                    df:67:12:5c:5f:19:8b:dd:c2:02:aa:30:ed:77:b1:
                    6e:8a:71:fa:88:26:d3:ee:1d:e1:f7:2a:15:1c:02:
                    0f:ec:48:c6:ae:af:74:c4:c1:da:b8:9e:78:27:ea:
                    8c:a3:ec:50:87:ca:f8:28:01:43:ce:76:67:bd:42:
                    e4:6f:98:61:01:67:95:1b:6d:c2:e0:c2:59:0b:af:
                    94:89:8d:9b:79:7c:ce:e7:8e:26:5b:b2:0c:c1:a5:
                    be:d3:4a:25:72:04:8e:40:89:d7:d5:01:34:df:1d:
                    bc:af:85:01:5a:1d:28:c4:d5:27:e6:08:25:b9:8f:
                    a0:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:AD:97:33:51:57:11:82:AE:EB:7D:8C:A5:23:BE:BF:9A:98:D4:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/353eb747-c576-38d0-9eba-a88b0bb216f2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f/611dbbed-256e-489b-8656-320fdaca032f.crl

            X509v3 Authority Key Identifier:
                keyid:34:01:17:47:F4:DB:06:E2:96:FB:D7:3F:F5:17:E1:AF:C6:1C:D6:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/611dbbed-256e-489b-8656-320fdaca032f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.110.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:c4:ab:1d:7f:6a:c5:73:4c:2d:79:e0:d7:3f:90:76:5c:42:
         4f:c5:08:c5:19:b9:ec:a3:6a:32:12:c4:34:53:f2:a0:9a:11:
         93:c2:a0:0d:93:4a:f5:eb:ec:a0:00:97:d4:a0:61:01:0b:1d:
         75:61:70:4f:b4:1c:99:1a:44:24:b4:fd:a9:f8:31:9f:df:13:
         f5:af:7c:26:45:1b:01:5d:6c:5e:a8:0c:0f:17:e3:fa:b9:de:
         b1:5f:03:8b:c8:a7:01:70:3e:a0:ef:93:6f:a0:a6:37:42:81:
         bb:9f:29:ed:3f:22:82:a1:3e:98:5e:19:73:74:94:67:1a:ca:
         5e:f0:69:4a:e3:cf:2b:4e:02:c2:76:c0:5f:1e:09:ec:2c:61:
         c7:38:8a:5a:ac:91:41:f0:03:e3:28:c3:4b:a7:48:b3:03:a9:
         fb:b3:0d:fa:2f:f2:5b:aa:d7:e9:ec:ee:5f:3c:9a:5e:a7:e9:
         3d:18:03:bc:8f:37:92:2c:a3:77:56:56:21:fb:85:81:85:70:
         4f:9c:ac:5f:2f:c9:b9:00:36:e7:39:a8:77:5c:62:2a:e5:48:
         11:4c:23:91:d7:e7:7f:34:c0:07:a4:56:80:d3:36:19:e5:12:
         81:9a:f6:4c:49:6d:0c:09:dd:f0:f0:2e:54:ea:37:f2:7e:0f:
         3c:61:13:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:05:50 2025 by rpki-client