Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa
File:                     f2983f60-df74-3593-83d6-9699aa4424c4.roa (raw, json)
Hash identifier:          q/kreTeZMBBuP8YNuwMUvtQT5/VLOKg0AkVz2jWdRw0=
Subject key identifier:   2F:E2:30:8C:36:30:58:E5:5A:6C:AD:6C:0B:28:33:72:7A:BE:D9:70
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584940394EB844BD37C9BC10ED00
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa
Signing time:             Thu 20 Mar 2025 13:00:53 +0000
ROA not before:           Thu 20 Mar 2025 13:00:53 +0000
ROA not after:            Wed 18 Jun 2025 13:00:53 +0000
asID:                     33392
IP address blocks:        199.101.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:40:39:4e:b8:44:bd:37:c9:bc:10:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Mar 20 13:00:53 2025 GMT
            Not After : Jun 18 13:00:53 2025 GMT
        Subject: CN=0ba4da41-758b-460f-83cb-2316a38662d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:23:70:a7:1d:a3:9c:13:96:3a:90:fb:fb:50:
                    c1:c8:3e:03:3d:ba:bc:31:72:b2:cc:c3:09:08:d2:
                    6c:76:cc:96:ae:d1:38:de:5a:be:45:5a:d5:0a:4f:
                    ed:87:81:6a:10:1b:92:6e:90:6a:1d:81:40:5b:7c:
                    91:b1:11:b8:d1:69:7b:92:8e:25:1a:bd:c9:28:ce:
                    c3:73:ed:14:1b:68:7a:e5:14:98:55:ac:65:d7:a6:
                    03:91:9a:b5:6c:05:eb:17:da:db:cb:23:39:c0:a2:
                    4a:0d:71:11:f6:5c:54:21:4a:2d:bc:c2:b5:9d:b6:
                    ef:72:a6:b5:9b:ae:ab:d9:26:92:91:81:42:16:5d:
                    77:1e:9b:a9:56:c7:39:9d:ab:ab:98:25:26:71:1b:
                    85:7d:78:e2:c7:eb:bb:b2:6b:28:2a:1a:34:69:f7:
                    24:a3:d4:7e:7a:d0:8f:4c:b3:e1:27:12:00:84:29:
                    17:18:4c:0b:f3:da:0b:f7:1b:d9:36:92:d5:8f:0a:
                    cc:fb:0d:3f:06:d6:4f:09:12:d2:b2:cb:d6:45:28:
                    1d:a0:f9:85:b6:ae:be:99:07:3b:f7:7a:48:70:f9:
                    61:34:b1:dc:a8:48:fb:0c:4e:a2:31:c2:3f:b1:2e:
                    63:f7:d5:40:26:98:aa:03:4d:6e:69:1a:7b:15:84:
                    1e:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E2:30:8C:36:30:58:E5:5A:6C:AD:6C:0B:28:33:72:7A:BE:D9:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/f2983f60-df74-3593-83d6-9699aa4424c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:4c:07:5d:7c:22:76:af:e2:c1:90:6a:17:21:ef:f7:83:46:
         13:5f:02:98:3c:f9:50:65:b4:b9:2a:8f:39:08:c7:d5:8a:a8:
         35:4d:bd:dd:06:82:88:da:1f:b1:f9:75:92:cc:e6:75:56:4a:
         74:cb:b3:67:8d:68:7b:f7:d4:27:06:56:7e:26:3b:8c:53:ce:
         01:7e:f9:ab:6d:23:31:b5:30:81:e0:be:30:91:e1:7a:41:d6:
         ab:ad:ac:1d:10:67:b1:4e:f6:ce:8e:cb:d7:06:6f:0d:f4:6e:
         35:74:aa:55:90:d0:eb:91:35:b8:10:c8:36:33:4d:4d:2b:fb:
         fe:d3:f7:be:80:a0:ac:e1:fa:40:b7:16:61:2a:14:b7:fd:18:
         2a:28:d4:ed:90:f7:5c:54:a6:8b:b8:b2:60:84:67:b6:79:63:
         b5:77:00:94:9e:36:1e:9a:8d:1b:00:02:40:c2:ef:d0:be:b5:
         98:4d:65:8c:c8:0f:bb:2c:3c:4d:53:09:f7:57:8f:76:28:87:
         2d:02:8b:7b:31:23:cb:d5:db:06:bf:18:77:13:7c:1b:79:86:
         d2:26:a4:54:e0:07:d9:9c:3e:0b:c2:e2:ec:79:7f:74:af:ee:
         8f:af:a2:eb:38:1b:58:fc:ff:8d:72:a9:2e:d2:69:05:a1:ae:
         8a:86:cb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:42:12 2025 by rpki-client