Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa
File:                     c7c3c608-5015-3d96-b863-386a0ca13f96.roa (raw, json)
Hash identifier:          q5fpPLcTs1OpvHDbn379gpB4r31GEBIXHf1iADP+WOw=
Subject key identifier:   0E:88:48:EA:5D:27:8A:30:D2:5F:B4:45:65:AB:06:8C:DC:2D:0D:12
Certificate issuer:       /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
Certificate serial:       010D0C9F432858492CB222E0268187FA6DBFA6A0
Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa
Signing time:             Thu 13 Mar 2025 13:00:52 +0000
ROA not before:           Thu 13 Mar 2025 13:00:52 +0000
ROA not after:            Wed 11 Jun 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        192.245.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2c:b2:22:e0:26:81:87:fa:6d:bf:a6:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
        Validity
            Not Before: Mar 13 13:00:52 2025 GMT
            Not After : Jun 11 13:00:52 2025 GMT
        Subject: CN=3f842db8-f4e6-4f62-8d86-4891d4e039fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:02:45:97:1e:f7:2d:3d:d0:b5:24:86:3a:eb:
                    77:59:3c:2c:a7:f0:50:36:9e:01:ff:b2:0d:ab:31:
                    d7:65:d9:50:74:7b:c2:18:33:d0:13:e4:60:69:86:
                    5e:4f:d4:f6:72:86:9a:5d:33:3c:3f:fc:bd:30:b7:
                    e3:57:4d:3f:06:9e:39:0e:44:37:29:8c:45:4e:57:
                    15:a7:a8:a0:ac:14:f3:e6:b9:a2:1d:b4:d3:08:50:
                    97:d3:5c:95:ae:7d:32:03:6d:9b:f8:cf:41:d5:db:
                    0b:9a:1d:60:8c:85:8f:a7:94:81:10:01:f7:b2:e9:
                    1a:23:fc:2d:ee:8f:0e:72:11:04:c2:ce:4c:87:3e:
                    d3:93:8c:ce:d9:ac:d5:34:2f:64:e7:42:f2:92:18:
                    04:c5:eb:e3:eb:89:78:56:a7:12:51:06:2a:d9:d7:
                    e4:a9:b2:52:a2:a0:2e:6e:f6:42:be:e7:d1:6b:25:
                    bc:69:66:06:a8:e5:98:72:f0:9c:29:ae:70:46:75:
                    8b:eb:09:f5:53:82:d7:5b:42:55:53:27:fb:10:c9:
                    ff:9f:4e:37:63:a9:b5:b5:9d:22:6e:6d:33:61:92:
                    8b:fe:4f:8d:c8:0b:c0:59:2b:9e:58:83:63:d5:4e:
                    1a:37:f1:22:92:f6:1a:48:af:89:a2:47:41:e5:1c:
                    a2:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:88:48:EA:5D:27:8A:30:D2:5F:B4:45:65:AB:06:8C:DC:2D:0D:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/c7c3c608-5015-3d96-b863-386a0ca13f96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl

            X509v3 Authority Key Identifier:
                keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.245.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:c5:93:9e:53:8b:29:6d:67:f2:5b:08:22:8a:b3:f8:6c:3a:
         f3:03:b4:0f:01:ef:cf:70:1d:f2:44:b5:96:03:f0:91:c2:44:
         64:37:99:a8:1d:33:23:1e:29:0a:c8:ea:f0:77:8b:46:af:75:
         0c:46:2f:6d:bd:99:54:56:1b:cd:c8:b2:4c:96:2c:f1:4f:ac:
         5d:0e:79:66:79:da:c5:01:70:97:5f:f9:69:fb:8b:3b:44:09:
         16:ad:1e:f6:4a:2d:a2:47:4b:1c:70:2e:7e:85:7b:c7:bc:7f:
         44:fe:99:da:8c:73:02:ca:01:00:a7:a2:fe:de:3b:d8:c1:f2:
         03:57:02:41:f8:2a:62:c0:84:34:3b:2a:7e:2c:7e:43:dd:e8:
         11:08:98:0a:0b:a8:b4:51:89:f0:61:b7:a4:72:d6:a9:ab:80:
         ee:40:6c:c6:62:46:12:1e:ca:2e:63:7d:5d:e9:47:89:c6:0a:
         a8:10:95:bd:64:c6:f0:73:dd:a1:61:60:46:a5:70:f6:a9:a8:
         f1:42:3a:7e:72:b8:58:de:ee:61:17:df:c0:bb:88:ac:98:ab:
         f9:53:b9:3d:88:1c:8b:8d:c2:19:90:2a:a1:14:3b:87:02:e8:
         84:c1:a5:ef:a4:fd:bc:19:82:e5:09:39:65:05:cb:ff:01:4d:
         c6:0a:84:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:47:56 2025 by rpki-client