Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d4d9899c-27c1-3eaa-95c1-14b565c62f11.roa
File:                     d4d9899c-27c1-3eaa-95c1-14b565c62f11.roa (raw, json)
Hash identifier:          GYo+FK5y/itv8YeNTvD4KJdwPD2TwJMTq54kRtdeRZ0=
Subject key identifier:   EE:D2:70:9C:94:B8:BE:B4:01:94:B3:17:93:62:08:7F:0D:36:7D:E1
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F43285849350EA476E8BCDA6A41EFDB20
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d4d9899c-27c1-3eaa-95c1-14b565c62f11.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     834
IP address blocks:        172.84.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:a4:76:e8:bc:da:6a:41:ef:db:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=426e20c2-1ad9-4b73-8e1e-ecc7442cb22e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ac:11:bd:ff:dd:15:1c:a4:5d:5d:01:29:35:
                    32:e3:55:d6:b3:86:ca:5d:f9:6b:b6:4d:7d:70:e0:
                    90:0c:ea:4a:e8:1e:62:d8:8f:4a:a9:8c:13:6e:49:
                    86:eb:2b:40:f0:ec:e1:78:89:2b:47:96:c6:2e:ba:
                    3a:3e:f1:ce:8a:a9:e8:c8:86:8c:ff:6d:5f:c1:18:
                    74:35:09:a9:aa:f0:cb:65:fe:6c:3a:62:a7:ac:71:
                    e2:d3:95:6d:4a:05:25:ca:83:76:89:97:76:d5:81:
                    14:f4:31:a5:19:7e:2d:62:e5:b6:0b:4d:35:1c:17:
                    98:04:6d:37:54:ae:b7:49:5a:5c:29:59:47:3d:83:
                    fe:83:89:31:17:13:5c:45:e6:54:d6:d4:5e:29:2e:
                    00:6d:ba:de:3f:9a:22:f3:16:1c:e4:47:81:03:f4:
                    ee:4b:9f:55:89:31:71:8d:2d:79:97:06:83:e8:4c:
                    8f:8b:1b:76:47:9e:d8:a2:b3:16:ab:a5:af:2a:05:
                    fa:3c:c3:46:64:bf:39:eb:25:11:4b:01:72:f0:c3:
                    f9:74:aa:d3:fe:ca:9a:25:29:f0:a7:4c:bf:ea:dc:
                    56:70:57:77:c5:44:32:3e:85:3e:80:be:48:f1:c2:
                    d4:b8:ec:02:f8:35:59:5a:0f:69:dc:14:61:23:1b:
                    67:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D2:70:9C:94:B8:BE:B4:01:94:B3:17:93:62:08:7F:0D:36:7D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/d4d9899c-27c1-3eaa-95c1-14b565c62f11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:62:a1:c0:8a:4c:71:e2:ab:cc:26:82:6e:fe:cd:5d:78:
         ca:f0:24:c3:2f:d0:3f:8c:95:db:62:a5:13:3c:38:da:7b:7d:
         25:db:5c:b4:c5:b1:2e:16:d5:15:5a:68:b8:13:2e:7c:ee:dd:
         98:6b:e8:9f:48:61:45:61:28:ca:21:f4:67:4c:a7:97:8a:1b:
         20:5d:c7:23:da:29:ae:bb:ac:88:d1:3d:04:38:06:70:9c:fa:
         eb:ed:e6:41:80:e4:f2:12:6d:d0:5d:c0:22:f8:29:21:bb:f4:
         c2:a6:93:6e:9b:74:35:48:12:d8:71:fe:d7:a2:18:48:b9:dd:
         cd:4d:5f:f6:4a:95:1a:91:ce:c0:5a:41:db:53:be:cb:0b:f6:
         5e:84:4e:28:d3:29:e9:9b:10:07:80:6f:24:17:67:48:fd:82:
         84:92:26:f9:21:75:da:10:0f:c2:e4:c6:01:27:6b:ce:d2:6a:
         7d:e2:9f:88:fb:20:94:3a:6e:78:82:ec:7d:a2:0f:4e:ee:6a:
         c0:f0:1f:2a:ef:45:da:93:68:7d:4c:33:59:ec:88:76:6f:6f:
         a8:2e:81:ff:6d:f0:82:aa:01:39:a3:3e:33:05:1d:42:2a:fa:
         1d:8a:87:c9:38:d9:78:3e:5a:ce:0b:0b:e0:d0:79:f4:3e:6c:
         79:3d:f8:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 16:02:45 2025 by rpki-client