Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/384b5f15-1e76-3b2b-bfcd-5d537178dd98.roa
File:                     384b5f15-1e76-3b2b-bfcd-5d537178dd98.roa (raw, json)
Hash identifier:          2BqKbDQ0eHS3irzyacqEd4MKV0tf7+548nHeQEK+jDk=
Subject key identifier:   D1:45:91:2E:0D:52:F2:0C:AE:A2:3A:DD:B0:9A:F9:22:02:38:EE:53
Certificate issuer:       /CN=ee451155-06f0-4e35-9b53-96104a44c5e1
Certificate serial:       010D0C9F432858494B6413C10711928426DAB900
Authority key identifier: 28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/384b5f15-1e76-3b2b-bfcd-5d537178dd98.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     396998
IP address blocks:        64.112.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:13:c1:07:11:92:84:26:da:b9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ee451155-06f0-4e35-9b53-96104a44c5e1
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=45393741-b4eb-4d2b-9777-a032e9bd3bdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:b0:5f:e6:de:12:b7:20:a4:fc:db:73:c4:78:
                    35:d8:7b:e8:f2:c3:0d:98:ba:2b:63:e1:20:d3:a2:
                    93:63:5e:ab:57:ec:82:77:ab:f5:98:ad:9b:b4:a7:
                    ad:45:f9:2c:a5:20:36:b3:c2:7a:61:4b:fc:0c:0e:
                    00:84:c5:d1:0b:b8:80:66:e9:f8:79:9e:6e:de:ea:
                    8b:5a:9b:5d:a8:0a:b4:13:72:96:c0:16:40:cc:93:
                    26:32:d6:1e:6e:01:4e:c7:01:68:f5:3e:72:33:1f:
                    84:13:e8:01:22:7f:3c:13:a2:fd:54:cf:de:49:65:
                    5f:e3:1f:88:dd:cc:dd:c1:01:db:33:f8:0f:37:2e:
                    60:a2:09:f5:4b:50:bf:76:8a:45:de:54:94:a9:89:
                    fb:57:8d:2d:ac:93:60:d3:53:52:19:34:ee:e7:22:
                    13:27:2c:06:f0:fa:83:65:cb:5d:41:f4:c4:49:f3:
                    b3:6b:db:1b:e6:b5:11:82:73:65:f7:34:d1:68:98:
                    b7:86:e4:46:98:78:5e:c9:9d:23:53:9a:2c:50:16:
                    a8:5d:a3:82:98:47:c3:62:eb:8f:18:bd:ff:b3:b8:
                    ca:93:73:56:5a:25:dd:88:8e:72:49:eb:74:8c:02:
                    c2:97:af:c2:7c:98:23:dd:39:ec:b6:17:9f:40:dd:
                    6d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:45:91:2E:0D:52:F2:0C:AE:A2:3A:DD:B0:9A:F9:22:02:38:EE:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/384b5f15-1e76-3b2b-bfcd-5d537178dd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1/ee451155-06f0-4e35-9b53-96104a44c5e1.crl

            X509v3 Authority Key Identifier:
                keyid:28:A2:C0:00:67:AA:B2:69:1E:E7:86:58:7B:D8:A8:FF:7A:47:3A:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ee451155-06f0-4e35-9b53-96104a44c5e1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.112.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:66:a3:94:89:e4:f3:86:02:0f:c6:e3:1c:65:12:a9:89:90:
         27:ca:22:44:b4:9e:06:cd:10:8a:78:0e:f4:98:ae:ce:9a:bf:
         ec:36:e0:27:d9:4e:0a:fc:da:7c:25:e0:82:43:78:28:3f:ab:
         1c:d8:42:a6:f0:81:d6:aa:08:6e:ce:11:b4:d3:27:87:9a:4c:
         57:75:29:2d:b1:5f:77:0d:2a:93:8a:a0:4c:af:d7:73:c9:85:
         71:d6:ed:47:53:a9:ff:f6:7a:e4:bd:32:f8:a7:ad:2e:02:e0:
         92:95:7f:50:32:33:d9:06:60:0c:fb:2c:de:92:02:c0:db:20:
         da:81:e6:b5:87:ea:f6:33:cc:93:75:f0:34:38:29:23:c6:1a:
         8d:42:4b:9c:c8:12:67:cc:4b:96:f9:07:e0:3e:38:88:5d:d3:
         06:38:0f:9e:70:15:76:80:49:74:79:85:79:e6:89:de:18:3b:
         6d:24:d0:c6:eb:c9:aa:d8:62:18:71:30:ab:01:8a:8b:a7:5f:
         fa:e5:8d:7c:08:2c:4e:b4:8a:c7:c5:c9:cb:7c:72:c9:20:cf:
         28:36:88:7c:1a:9c:81:bf:e4:e9:3c:b0:b1:eb:4d:aa:50:2e:
         62:35:e4:94:d4:12:ca:8f:46:ce:ae:c4:e2:38:8d:4d:72:57:
         e2:55:12:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:54:41 2025 by rpki-client