Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
File:                     a30c69af-4a9f-3c4c-8d54-b9102c913071.roa (raw, json)
Hash identifier:          vU15NMLoaFqacpnmUGpZks/w5VVxDMektkjky7tuKxU=
Subject key identifier:   4B:87:82:CF:00:1A:AC:66:F9:58:D1:FC:39:9C:2E:2A:04:AD:F3:FD
Certificate issuer:       /CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
Certificate serial:       010D0C9F4328584949FE97530471BE78D5D1CA40
Authority key identifier: 9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa
Signing time:             Mon 24 Mar 2025 01:00:38 +0000
ROA not before:           Mon 24 Mar 2025 01:00:38 +0000
ROA not after:            Sun 22 Jun 2025 01:00:38 +0000
asID:                     21693
IP address blocks:        192.92.217.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:49:fe:97:53:04:71:be:78:d5:d1:ca:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a29e3674-acc6-4858-b0f1-7a2daaaed119
        Validity
            Not Before: Mar 24 01:00:38 2025 GMT
            Not After : Jun 22 01:00:38 2025 GMT
        Subject: CN=452043e6-e7ac-4266-815c-ac5557a50730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8e:03:1f:fd:56:4f:97:b5:79:5c:ce:be:df:
                    6e:b8:a3:4f:a1:dd:00:da:8e:01:d5:94:c2:fc:f5:
                    d8:84:b0:fe:be:99:dc:a6:cd:0a:67:b4:49:5d:e5:
                    35:9a:40:61:d8:e4:e6:42:6b:95:b8:42:f2:a9:2e:
                    ec:f1:2b:6f:20:d5:7e:64:95:63:aa:75:9b:32:28:
                    04:24:bb:3f:e1:9e:4e:bc:e2:57:80:15:5b:28:f4:
                    76:cf:dd:39:51:47:54:51:12:46:e0:92:75:4a:56:
                    70:bb:e8:62:ec:4c:21:58:bb:a9:88:82:8f:11:f8:
                    d8:48:80:cf:2e:ad:1f:da:90:c0:0c:dd:11:37:a2:
                    eb:8e:b4:7e:85:c5:cd:41:ef:a3:07:c6:66:13:f9:
                    77:26:71:81:15:c7:36:4d:df:46:bb:82:c1:c6:bc:
                    34:ba:db:bb:04:62:a6:92:30:d9:93:81:22:50:ce:
                    f8:bf:0f:38:99:df:fb:41:7c:22:ba:64:ae:9b:c6:
                    d4:a6:6c:f6:1e:ae:19:11:27:36:f0:95:99:3a:61:
                    34:fd:c9:74:4a:29:eb:c4:c9:0d:f2:cc:d7:5d:b4:
                    6f:5d:fa:81:f0:88:a1:b4:34:f4:d6:f4:bd:91:e9:
                    ed:8b:8b:06:8b:93:6b:74:98:ce:12:7e:11:79:e3:
                    8f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:87:82:CF:00:1A:AC:66:F9:58:D1:FC:39:9C:2E:2A:04:AD:F3:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a30c69af-4a9f-3c4c-8d54-b9102c913071.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119/a29e3674-acc6-4858-b0f1-7a2daaaed119.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5D:6D:33:5A:76:3A:7A:D8:7D:3C:A2:27:F9:F9:0C:8D:6C:3B:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a29e3674-acc6-4858-b0f1-7a2daaaed119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.217.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:35:ab:15:76:d8:57:44:04:70:59:c7:4e:3f:53:7d:fc:95:
         30:55:98:66:22:2c:b3:40:98:a5:47:a5:99:5a:18:11:be:f9:
         c8:c8:6e:f9:6d:57:da:d2:df:7d:4c:41:52:1f:01:1d:50:cc:
         da:b7:ed:55:a6:0f:19:39:21:a9:48:0c:b3:a1:d5:10:78:15:
         65:ff:95:c9:7a:ac:a5:84:de:c0:37:b2:56:9c:e8:da:a3:06:
         37:d9:02:42:0a:89:ea:46:df:71:01:81:77:4d:cd:96:f4:8b:
         c9:64:0f:18:7b:84:03:13:da:cf:1c:35:ae:5a:c1:16:d5:ab:
         cc:b6:a3:79:d6:97:ed:34:0e:c1:21:ee:57:46:41:92:0f:79:
         b1:69:3a:05:f3:4b:5d:73:1e:6e:71:a4:a8:59:5f:9b:21:a4:
         c7:2c:d5:06:2a:b1:17:b7:5d:d5:e4:6c:6b:33:36:12:4c:b8:
         78:f0:50:a8:f9:6f:03:91:a9:93:a9:e0:c6:23:06:67:cb:1c:
         bb:aa:e0:b0:77:13:2e:ba:33:3f:69:34:6b:71:77:ef:f7:06:
         1e:83:7b:1b:47:b7:a0:6c:b8:2a:f0:2a:5a:0b:94:c4:5b:04:
         ad:fd:d6:3d:43:bc:84:c6:1b:39:fe:54:be:6b:e6:16:8a:11:
         7a:8a:a5:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:49 2025 by rpki-client