Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/126898ac-67c2-323d-9857-4e05fb2cc7cc.roa
File:                     126898ac-67c2-323d-9857-4e05fb2cc7cc.roa (raw, json)
Hash identifier:          kS8sbA+vP6cnZeKb1qSuUKEZyEuZX0Gnokd9dYwGMbU=
Subject key identifier:   21:80:8B:B2:52:2F:80:E8:00:6F:01:72:88:22:5E:60:22:92:AD:7A
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F43285848C8B2946F920F6EC6579EBF00
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/126898ac-67c2-323d-9857-4e05fb2cc7cc.roa
Signing time:             Wed 05 Feb 2025 17:28:22 +0000
ROA not before:           Wed 05 Feb 2025 17:28:22 +0000
ROA not after:            Tue 06 May 2025 16:28:22 +0000
asID:                     683
IP address blocks:        192.5.176.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:b2:94:6f:92:0f:6e:c6:57:9e:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Feb  5 17:28:22 2025 GMT
            Not After : May  6 16:28:22 2025 GMT
        Subject: CN=8b0d942e-2fba-446a-911a-f20bee1e5426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:49:be:cd:43:48:8b:a1:6e:75:99:d1:f6:b1:
                    84:95:fb:14:56:fa:c9:53:52:40:f7:4a:0c:d7:b5:
                    8b:44:5a:a6:03:02:40:23:d1:b5:e7:b4:f1:1f:5b:
                    5f:b5:ff:e8:6e:64:be:01:5b:ac:09:50:1d:4f:a0:
                    6f:40:44:87:f9:9b:89:51:08:30:fe:c8:1b:1a:23:
                    0a:fa:03:56:e9:37:d1:e2:13:3c:47:c1:7d:e0:bd:
                    1c:ee:2f:36:c7:44:24:a7:3c:f9:bb:e0:eb:7d:81:
                    7c:47:25:a8:e6:c7:8f:4d:5a:d1:90:e3:75:a3:63:
                    95:69:36:8d:53:99:8a:47:38:8c:ad:1a:bf:0c:58:
                    8d:c3:bb:61:af:30:d6:60:5f:16:d0:d7:98:af:5a:
                    7a:0d:d0:07:f8:8c:c9:1b:15:e5:5a:03:85:2d:ac:
                    d3:4e:f4:a3:c1:3b:94:2b:df:92:da:9b:00:65:8a:
                    0c:74:d9:d5:3e:ab:49:fe:b3:ef:04:db:d7:17:08:
                    f2:65:66:9a:28:10:64:96:b9:1e:d8:b9:7a:f8:61:
                    cb:58:47:dd:52:1a:c0:1d:9b:dc:4b:83:4f:e1:b5:
                    44:96:6e:b2:75:85:5f:a7:a8:dd:11:ef:6c:86:02:
                    da:83:c4:fa:a1:6f:8f:08:2e:9e:ec:fa:9a:e4:1c:
                    4a:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:80:8B:B2:52:2F:80:E8:00:6F:01:72:88:22:5E:60:22:92:AD:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/126898ac-67c2-323d-9857-4e05fb2cc7cc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:63:95:39:25:66:b2:43:71:fe:c3:2c:40:52:4a:ae:cc:8e:
         65:1e:dd:c3:8e:8d:3e:56:94:e0:04:9b:c5:c7:15:08:58:37:
         6c:41:c2:7d:6d:b6:ff:40:81:0a:c6:52:c4:1e:58:7f:e7:1f:
         4f:c4:c3:ad:aa:08:d2:6f:a2:ec:d5:9d:c0:25:0b:b8:00:6a:
         de:77:db:1e:bd:83:ad:9a:55:33:27:1f:e5:c4:7d:3b:1e:f5:
         97:6c:6f:c4:64:cb:ee:12:57:b7:65:29:12:5f:14:67:c0:fd:
         6c:99:6e:38:47:37:82:0b:53:39:f2:c8:ba:84:3a:6b:95:70:
         6d:c4:4b:63:c8:f5:c0:80:04:2a:86:7d:07:12:4e:9b:0b:5e:
         a8:97:b8:84:2e:b5:c0:00:6d:0c:79:96:54:29:d6:ee:d8:3a:
         56:d5:28:04:86:e7:4d:63:c2:6f:b0:6b:19:99:51:88:0c:94:
         86:8a:0f:9e:b6:37:9c:03:13:fe:5c:3a:46:3c:52:4e:b4:74:
         ba:db:fc:68:f3:f2:19:82:82:a4:40:66:d4:c1:e8:d4:46:4d:
         b0:f2:a2:45:b6:dc:ac:80:a7:43:49:6e:e4:b8:c1:77:ef:11:
         d0:71:3d:0f:5c:77:80:02:53:08:3d:2b:85:a6:dc:74:49:b0:
         c5:a4:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:10:04 2025 by rpki-client