Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d8483bd-9f85-31c6-b93d-630eda088e2d.roa
File:                     9d8483bd-9f85-31c6-b93d-630eda088e2d.roa (raw, json)
Hash identifier:          cG/f95ADAchG67uM7icEkfkswEZMjjs9VKFk6xsWMuA=
Subject key identifier:   95:50:B1:FF:25:22:0B:D0:F9:66:FD:CD:92:EA:98:BE:8F:D3:F8:8E
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848EC96A5ACBBA36C608CD8EED8
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d8483bd-9f85-31c6-b93d-630eda088e2d.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     202
IP address blocks:        199.42.12.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:a5:ac:bb:a3:6c:60:8c:d8:ee:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=78b3f7e0-2e9e-44e5-9bfd-10dc68a89235
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:40:16:dc:22:b2:82:a8:7e:dd:d3:df:3a:5a:
                    82:7a:21:25:a5:c7:bc:00:8c:bf:db:aa:1c:f4:db:
                    b8:73:e0:86:12:cb:b2:35:fa:d1:dc:03:9f:b3:fb:
                    81:c7:d6:a9:27:1d:d7:c6:9f:6d:74:82:13:f0:fd:
                    f3:44:aa:1c:88:78:a3:d5:5f:07:59:e5:c8:60:89:
                    50:3d:f2:cc:fb:53:86:c8:db:7b:26:2e:e8:36:98:
                    bf:32:13:4c:dc:df:3a:50:84:69:7a:a3:4e:2e:2e:
                    fe:1b:ac:3d:61:a7:7c:53:03:70:52:0a:b1:a5:63:
                    6e:18:db:06:f8:b9:21:68:6a:9d:01:e4:57:a1:a3:
                    46:30:ea:ab:08:6b:8a:32:21:a3:f7:d2:bd:8d:f8:
                    7d:a6:c7:16:99:2a:d2:e5:ac:40:03:8d:46:89:58:
                    27:3b:5f:b9:b1:00:5a:3b:b3:06:74:aa:7a:bf:0f:
                    02:d3:07:fc:c0:a8:25:c6:75:57:75:48:e9:3f:9b:
                    b9:a1:01:0b:eb:bb:71:64:e3:64:0c:4a:01:4f:7c:
                    43:37:7d:87:19:3e:c9:d5:fa:ca:92:62:ff:24:09:
                    ae:94:39:36:cd:41:21:da:c6:2e:7d:62:c7:0c:af:
                    e2:d7:74:5f:e5:7b:dc:a9:b5:65:ff:3f:61:e6:32:
                    e0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:50:B1:FF:25:22:0B:D0:F9:66:FD:CD:92:EA:98:BE:8F:D3:F8:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/9d8483bd-9f85-31c6-b93d-630eda088e2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.42.12.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:cb:98:18:5c:39:12:c9:90:12:76:14:3b:2b:4a:82:cd:8f:
         81:6b:d9:d6:32:be:ec:13:cf:ee:04:85:e0:a8:ad:d8:c5:fe:
         40:85:2e:eb:e3:0c:94:4e:85:0c:40:4b:e9:8d:18:90:17:f8:
         68:9d:ce:87:e9:c4:e9:59:5f:4d:11:2d:fe:67:56:29:4f:ac:
         14:b9:5d:12:56:56:c2:98:d2:7c:83:28:dc:1e:c9:cf:c3:fe:
         d4:4d:74:b4:91:99:23:41:ef:2a:53:3d:10:11:56:8f:17:df:
         c9:04:09:37:b0:a5:a6:3c:df:73:7b:32:e6:fc:35:d7:08:57:
         cb:e3:cd:5c:40:97:26:39:a4:5c:d5:7c:15:15:bb:20:0a:e9:
         36:fe:b4:5b:d3:fe:7f:61:a4:29:2d:69:c3:90:16:d3:c4:44:
         63:35:48:b5:45:83:84:e0:7f:94:8e:f3:19:04:61:86:5e:a7:
         be:f3:eb:fb:e6:6a:77:b6:6c:81:63:26:9e:1f:37:39:d7:d2:
         98:7f:6c:5b:9a:a3:36:df:ac:d4:24:40:f8:0d:2a:94:b0:c8:
         27:74:f7:29:38:e9:e8:51:11:71:81:91:2e:1a:51:5f:09:bb:
         14:e3:23:25:93:91:cc:78:ef:59:53:03:37:7b:da:70:5b:78:
         de:6b:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:28:07 2025 by rpki-client