Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/b440723c-4b02-365a-9404-c0efc6063923.roa
File:                     b440723c-4b02-365a-9404-c0efc6063923.roa (raw, json)
Hash identifier:          3QWzB2gLWCEXTKB1aoMyp4fHwOr7URxsEbhBrJW/OjY=
Subject key identifier:   3D:35:D1:B7:8E:3B:CB:AC:D3:F1:0F:DC:B8:C9:25:A3:BD:88:09:85
Certificate issuer:       /CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
Certificate serial:       010D0C9F432858492183FDAAB5E0DF418B0F8E00
Authority key identifier: 8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/b440723c-4b02-365a-9404-c0efc6063923.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     7018
IP address blocks:        192.190.144.0/22 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:83:fd:aa:b5:e0:df:41:8b:0f:8e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=762c45fd-61f9-43a6-8ad5-fea5ef27b187
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=1744926f-488e-4a9f-885b-5a8c03de1d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:54:e7:f1:ff:41:42:63:53:0e:e5:50:cf:3f:
                    9f:11:44:75:28:92:da:ad:58:48:48:03:8e:29:e6:
                    d0:d9:6d:52:58:05:33:79:c3:0f:a0:ec:30:c6:a5:
                    f5:c0:fa:6e:8a:27:ab:0c:30:b5:13:86:74:6c:4c:
                    f2:6b:6d:4d:11:cc:ff:c7:5c:e7:19:69:1c:a8:6a:
                    cd:1e:6a:9b:d9:67:e0:b7:50:22:08:1d:ee:1e:eb:
                    87:ae:4d:1c:09:63:06:2a:be:7d:80:67:77:8c:c0:
                    5a:e2:d7:ee:9e:35:e7:ee:f2:7c:dc:0c:52:25:17:
                    6d:40:3f:01:e4:70:55:f9:33:31:a2:31:2a:76:9b:
                    8f:6e:50:98:95:1f:7b:31:0e:3d:94:a2:4f:c2:35:
                    4f:22:de:5a:a8:71:f3:fb:df:36:81:81:b4:19:ea:
                    ff:1d:72:c0:44:af:a6:57:4a:26:a4:86:65:cc:90:
                    e7:0c:dd:28:80:5c:a8:91:91:68:31:ba:77:b0:56:
                    ca:43:55:45:a5:b4:ac:af:e6:61:5b:84:d2:26:32:
                    11:13:4a:a2:6b:d8:f5:63:7b:8c:09:a8:f7:ba:0b:
                    36:71:b3:c9:4a:dd:81:82:7e:22:a3:2e:49:e3:b7:
                    26:c9:3f:bd:4d:16:c3:da:4f:ed:1e:76:44:bd:67:
                    43:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:35:D1:B7:8E:3B:CB:AC:D3:F1:0F:DC:B8:C9:25:A3:BD:88:09:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/b440723c-4b02-365a-9404-c0efc6063923.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187/762c45fd-61f9-43a6-8ad5-fea5ef27b187.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C3:30:A2:3D:E2:01:CB:19:30:E7:68:F2:13:0E:A8:3E:36:F9:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/762c45fd-61f9-43a6-8ad5-fea5ef27b187.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:9c:b2:53:84:1d:ef:a9:17:07:e3:82:85:33:47:bf:4b:dc:
         4e:62:6f:3d:3c:89:0a:19:ad:07:4e:46:84:bc:40:90:ee:67:
         e3:65:62:37:58:83:c1:ec:89:48:0f:1b:ae:79:71:9e:de:a7:
         05:f3:4d:67:fa:5e:25:c3:a7:47:22:87:b3:bc:2d:76:1a:4a:
         88:44:cc:2f:1b:8d:8c:8a:0a:72:7e:1e:d0:0b:6d:16:3b:1c:
         ed:83:08:b8:24:a5:2e:6c:d5:d3:f4:03:0f:d3:5e:cc:df:69:
         5d:c2:0f:e9:5b:2f:78:1b:d7:cc:d0:0a:b5:f9:99:5a:91:a6:
         5d:5a:1e:3b:54:41:25:2b:77:86:00:99:1b:8f:b6:c0:50:70:
         80:94:17:5b:a4:8b:b7:ec:50:69:d6:cd:09:74:f5:7a:d9:fb:
         94:6d:ed:b7:ef:de:44:33:5f:a0:b5:8f:6c:3b:a1:17:fc:22:
         0d:81:0a:e0:b6:a6:82:28:eb:da:22:08:fa:a4:bd:69:c0:59:
         b2:0f:5b:0d:ae:e5:8d:08:5b:7c:8e:75:83:39:6c:f7:3d:ab:
         ef:77:5d:8b:39:5a:ff:30:4b:8b:e8:b7:45:2e:a8:a9:72:70:
         77:c4:5e:02:0c:60:01:b5:14:e4:40:68:d7:ba:1e:3e:fd:8d:
         aa:ba:ed:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:11 2025 by rpki-client