Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa
File:                     63ffc474-e1ec-3542-81e6-1632f95c2321.roa (raw, json)
Hash identifier:          wyNKj/5lJh/z2aLKJGnJKXr30kWv4YtmLDxaGjubTeA=
Subject key identifier:   D8:C2:7D:12:7D:75:0B:84:04:3B:B0:0B:A4:E1:F3:B7:A7:7A:A3:51
Certificate issuer:       /CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
Certificate serial:       010D0C9F43285849EA8520ABA328BCB34C650800
Authority key identifier: E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     198949
IP address blocks:        192.170.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 07 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:20:ab:a3:28:bc:b3:4c:65:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9822150f-2e6f-4fc9-b0d3-5a8e0903b333
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=9d724211-2e53-4003-b6a3-cf509603a86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:56:cf:da:ef:7a:d2:0f:6f:84:d9:61:3d:b9:
                    b0:ad:2e:66:05:cc:68:10:d4:31:b8:2d:53:75:db:
                    a9:8a:3f:cb:b9:c3:4e:c6:79:73:27:26:e5:15:18:
                    e9:1e:61:c5:aa:d7:0c:bd:b1:b6:30:8f:2d:74:9d:
                    c8:7e:29:97:9c:48:4b:f0:4d:fd:0b:e8:da:36:94:
                    5f:7c:ad:e3:a2:23:1b:ae:94:32:74:2a:9d:84:cc:
                    05:03:5c:b0:50:83:93:e0:5b:e1:68:91:67:e8:1f:
                    77:48:78:41:91:7a:1c:92:36:45:a2:cb:e9:5c:32:
                    93:1f:7b:78:33:3b:7f:2f:f1:68:51:7c:ad:5a:d5:
                    02:d1:1d:69:18:31:4c:18:e0:b7:f3:70:bc:0b:43:
                    6a:00:76:c1:68:6e:08:8c:ff:33:13:71:1f:56:55:
                    c9:3c:2d:11:4d:e9:c5:b4:c5:a9:5d:78:5e:77:dd:
                    74:e9:f0:de:6a:7f:10:fd:94:59:3e:42:dc:93:bd:
                    41:d7:d1:6e:af:b6:51:01:90:16:02:3c:57:84:e9:
                    57:e5:55:c3:32:2e:c8:6d:1d:3c:63:14:8c:02:b7:
                    78:88:2f:64:c2:68:b8:1a:df:02:ae:c1:25:9b:c0:
                    61:d0:98:c4:f1:35:8a:4f:35:f9:5a:f8:f2:50:d7:
                    b0:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:C2:7D:12:7D:75:0B:84:04:3B:B0:0B:A4:E1:F3:B7:A7:7A:A3:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/63ffc474-e1ec-3542-81e6-1632f95c2321.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.crl

            X509v3 Authority Key Identifier:
                keyid:E8:FB:53:43:63:09:90:50:5B:E8:A4:C4:4A:09:BC:46:9B:50:73:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9822150f-2e6f-4fc9-b0d3-5a8e0903b333.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.170.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:a7:2e:5f:70:82:52:35:f0:f0:6e:62:67:d2:73:37:8b:e9:
         38:a8:e2:9a:0e:be:86:f1:32:07:34:7c:40:d1:b0:6a:21:be:
         28:41:0b:63:2b:3e:78:48:3c:7a:bb:82:dd:05:2a:22:ac:d1:
         07:8d:bf:ad:c9:14:a1:56:f8:7d:af:0b:0a:28:23:e7:fd:0a:
         18:42:ce:b0:3f:de:a7:f5:ab:fb:ab:30:6d:bb:91:5c:d2:cf:
         18:42:4f:71:77:09:48:e0:68:84:ed:13:f5:4e:04:30:74:90:
         07:22:83:df:99:b9:20:2c:c2:23:6c:8a:0b:1a:3b:6e:14:c4:
         3b:ae:cb:08:12:d8:2e:04:dd:9f:df:c5:51:9b:10:33:6c:fb:
         e2:46:c8:ba:8f:8b:21:df:69:6b:30:5a:9c:8b:c3:68:7a:11:
         2e:19:ca:c8:83:79:62:0d:ae:39:cb:d8:c0:2f:1b:71:5d:64:
         0f:d3:aa:9f:b8:ed:ef:31:7b:4a:d5:1f:bf:50:93:d5:73:f5:
         85:b6:d4:eb:c9:9f:5f:79:39:ff:ff:81:ea:e3:40:a7:89:f4:
         db:36:07:bf:05:79:64:11:00:9a:4b:c1:08:73:91:98:ab:6a:
         db:f8:63:63:67:c2:50:52:74:5e:b7:fc:3c:ac:02:aa:95:08:
         7d:e5:f8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:48:49 2025 by rpki-client