Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa
File:                     c23ac558-69f5-3c92-9a4a-e12e37e77616.roa (raw, json)
Hash identifier:          M0wGgAGZF3+J7PyyBoNzKU2rI0QoixbsDBhWYo1hdrU=
Subject key identifier:   6E:9A:37:44:93:D7:C0:FE:4C:86:71:BC:E8:2D:B9:CD:4D:C2:C0:C1
Certificate issuer:       /CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
Certificate serial:       010D0C9F4328584902EC067F2DDCC02236D33B58
Authority key identifier: 5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     14297
IP address blocks:        199.189.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:ec:06:7f:2d:dc:c0:22:36:d3:3b:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f8705776-f815-46c6-8f5c-48a3a87e37e6
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=9ca5608a-db6b-448d-8d4a-358941121e07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:09:98:44:bd:5d:66:13:cd:3b:1c:d1:80:34:
                    72:fe:27:57:d2:39:39:b2:66:14:db:8b:26:30:c7:
                    b9:0e:ab:41:78:8e:c6:b2:32:d0:96:d9:3f:7e:17:
                    0f:5b:99:c1:f5:4f:43:c2:56:56:13:8f:9e:bf:74:
                    8a:cf:8f:cd:af:7c:03:87:10:4b:68:48:6b:d7:b3:
                    19:0c:5c:1d:be:ba:8a:93:3f:83:80:50:54:5b:56:
                    14:0b:a3:4d:98:7d:a4:1c:e2:04:ad:63:ef:6d:06:
                    e3:c5:f4:87:56:20:ba:e3:fd:69:3d:c8:7a:59:58:
                    ba:01:07:fc:8b:b7:67:e6:fa:ab:6f:f7:74:95:14:
                    7e:81:7d:2d:31:21:d4:d7:18:0e:dc:00:04:62:50:
                    ec:81:d5:55:46:99:67:cd:13:4d:c6:0d:ac:6a:f4:
                    7f:16:ab:e8:46:c1:89:37:7f:43:f5:73:d3:cc:c1:
                    91:bf:06:af:c2:e3:4a:7f:9e:ce:93:46:50:50:43:
                    26:01:dd:80:95:be:bc:29:87:99:1f:72:45:a9:6c:
                    fb:b6:8d:7e:df:0e:22:44:cc:e3:89:b7:ca:c9:f7:
                    0f:c5:aa:cc:a0:7c:75:d4:a1:cd:fa:3a:48:db:f6:
                    b3:c5:a4:e5:86:20:74:85:e6:e5:a1:0c:c2:ae:48:
                    8b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:37:44:93:D7:C0:FE:4C:86:71:BC:E8:2D:B9:CD:4D:C2:C0:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/c23ac558-69f5-3c92-9a4a-e12e37e77616.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6/f8705776-f815-46c6-8f5c-48a3a87e37e6.crl

            X509v3 Authority Key Identifier:
                keyid:5A:A3:0B:62:4F:AC:8F:6C:E5:DE:F6:7D:10:05:D3:02:6F:E1:F9:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f8705776-f815-46c6-8f5c-48a3a87e37e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.189.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:29:8c:d5:2d:c9:09:4a:4e:88:34:0b:32:f7:12:2b:c8:4e:
         dc:b8:61:2f:55:b3:b5:1d:17:45:7f:a7:47:28:55:d0:96:b8:
         ef:09:40:ff:27:c1:a5:5d:72:68:4f:4f:06:66:f2:7b:f1:52:
         f1:a2:13:d4:75:e5:9f:3a:90:d8:63:cd:4c:40:93:65:71:8a:
         70:06:fe:ce:32:e4:42:ad:42:ef:d7:8e:d3:5b:74:66:00:34:
         72:88:5c:d0:e6:1a:1b:e9:76:98:2f:e6:5b:0d:c0:72:16:9d:
         6b:d6:48:c8:fb:4e:40:7f:6b:fe:38:05:29:1c:a3:58:26:a0:
         81:59:b0:1f:e9:ba:6c:1e:a5:17:45:13:04:81:2b:8e:d0:73:
         a9:dc:1b:f2:99:8d:52:a9:dc:30:72:2d:0d:68:b1:80:66:14:
         8a:30:69:ef:35:67:be:97:13:4d:32:42:82:32:30:a2:4c:81:
         28:0a:0a:b1:56:95:54:21:b5:48:67:be:7b:b8:c8:0d:36:07:
         99:e8:f5:27:b1:16:ef:17:40:82:5c:83:5c:79:3e:48:28:64:
         29:c8:38:ad:aa:33:26:a7:c1:11:48:bd:97:70:ae:e0:99:23:
         5a:bc:8b:dd:a2:a6:42:d5:36:3a:5e:14:f5:ab:91:d0:6f:37:
         f8:7b:bd:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 09:12:05 2025 by rpki-client