Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa
File:                     7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa (raw, json)
Hash identifier:          cdwrX21rbEiYFbID8w8tT7/cr+d4eWETCtbddZRu+k8=
Subject key identifier:   D2:B1:12:5C:CC:0D:30:C0:25:87:A0:D9:D8:30:F4:8E:D3:E2:06:2D
Certificate issuer:       /CN=b794e507-3ed1-4151-855d-6305696fcb0c
Certificate serial:       010D0C9F43285849648442B3CE1C9D1A8C430174
Authority key identifier: D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     26464
IP address blocks:        199.192.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:42:b3:ce:1c:9d:1a:8c:43:01:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b794e507-3ed1-4151-855d-6305696fcb0c
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=a5976c4e-d0e4-4c8c-b902-d2cb51aaffd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f7:c4:e3:bd:af:cd:8c:d6:0d:89:90:20:0d:
                    26:9b:41:ae:87:f9:7c:85:48:7c:ac:53:08:8f:55:
                    eb:47:4d:55:9b:1f:59:09:5a:ca:44:3b:ee:bd:d4:
                    b7:d3:80:95:4f:e9:f6:3b:fa:ac:3b:e2:8d:60:8f:
                    cf:02:2c:7c:d3:c7:5c:e0:68:8d:c2:26:8c:55:94:
                    83:fb:33:a5:cf:74:d6:a9:db:3e:15:26:af:41:7c:
                    28:25:f0:ad:bc:8a:0e:7d:1c:d2:7f:99:7d:02:cb:
                    dd:d0:18:3d:7c:a9:da:d5:3b:dd:8f:62:3b:c2:aa:
                    56:1c:78:87:b6:66:9c:03:39:91:25:78:43:a5:ad:
                    5a:1b:86:fb:10:67:2c:49:9a:04:ad:09:d1:a5:27:
                    4b:f0:95:47:23:10:e8:61:ce:72:af:6b:74:29:16:
                    87:90:db:fb:ab:52:dc:72:63:7f:ce:27:3e:13:e4:
                    9c:1e:c8:8b:d4:86:e0:d9:8b:eb:3a:ac:92:2b:fb:
                    a3:63:a1:31:ae:62:ff:3b:7f:b0:33:3a:a7:21:9b:
                    48:5f:74:e2:42:b5:e8:0a:99:62:31:fc:6a:b1:d9:
                    3f:ba:7f:c5:24:4f:82:88:65:6f:b4:9a:aa:60:0f:
                    b4:2f:3f:c9:ca:7a:56:75:a0:53:25:9f:e2:04:62:
                    8f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:B1:12:5C:CC:0D:30:C0:25:87:A0:D9:D8:30:F4:8E:D3:E2:06:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/7401c51c-fcf3-32cf-9ba0-c6029ebefed5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c/b794e507-3ed1-4151-855d-6305696fcb0c.crl

            X509v3 Authority Key Identifier:
                keyid:D1:67:3E:09:96:F9:3A:0A:2D:95:28:BE:75:72:9D:15:38:1C:F0:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b794e507-3ed1-4151-855d-6305696fcb0c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:10:b9:b1:b8:f6:c0:df:15:6e:ef:59:08:4c:f2:ee:e2:c8:
         c2:ef:36:35:79:47:0a:52:06:49:55:b7:c9:06:fe:3a:18:5e:
         df:0c:65:f4:78:4d:06:dc:7b:da:f2:af:64:1a:a3:45:80:dc:
         8b:fc:f8:75:b6:b8:4c:99:cf:ef:d6:5b:74:e8:ad:75:48:40:
         a4:77:27:d6:2c:10:d3:f8:ec:9d:84:95:c8:52:c8:5b:ca:00:
         8e:4c:6c:d8:c4:0b:47:58:2b:29:27:78:49:7b:75:4b:f7:3e:
         7a:9b:01:9d:d2:c4:ae:99:d9:7e:d1:c7:f3:b4:f8:65:73:5b:
         bd:23:48:b0:9d:9f:45:9d:69:7d:89:5c:ea:88:6b:11:43:64:
         f1:ae:26:97:f4:1e:2a:01:ed:4f:ba:96:b4:2d:ab:b5:f1:b8:
         11:06:ca:c7:5c:2b:e3:60:48:ef:4d:2e:88:b8:13:50:06:05:
         a8:9d:1a:ed:45:36:3e:81:c1:52:9c:6b:60:df:ac:1e:91:e0:
         05:c3:2a:de:13:44:77:8c:cb:0a:19:7e:8d:a4:12:7c:53:a3:
         83:51:50:70:db:3e:ce:eb:34:5a:51:9e:31:04:67:e4:ea:3f:
         16:da:0c:d2:f8:48:42:be:d5:65:b9:99:ff:9a:7d:89:02:fd:
         9e:e1:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:24:08 2025 by rpki-client