Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
File:                     dc442485-e1e1-32df-b067-e09e5cdece8f.roa (raw, json)
Hash identifier:          mm7+xmcpx/qz+ZlasnMQEb6vjQOIE6W3aw1mQGHZHIQ=
Subject key identifier:   A5:AA:D7:F3:26:04:2E:5B:1C:61:74:B7:8C:C1:46:93:27:8A:03:A3
Certificate issuer:       /CN=5d1f7581-692a-467e-ae71-d3c4921d0765
Certificate serial:       010D0C9F43285848E59BC0FA9CF48744A6ACA200
Authority key identifier: FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     1299
IP address blocks:        199.83.232.0/23 maxlen: 23
                          199.83.232.0/26 maxlen: 26
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:c0:fa:9c:f4:87:44:a6:ac:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d1f7581-692a-467e-ae71-d3c4921d0765
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=fa521df9-29a8-444b-a2cc-55f69d47b961
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3b:83:1a:64:33:73:4e:06:13:62:65:f1:45:
                    81:ec:4c:9b:d6:57:f2:df:7f:01:d9:ab:4a:cc:6e:
                    7d:b5:e7:b3:a0:a5:bf:cc:25:0d:b9:2b:5d:19:1c:
                    ec:68:0b:c0:53:3b:0f:01:63:d3:85:ee:25:b6:8a:
                    45:c7:95:b2:0d:a4:1b:b8:22:02:84:11:4f:ee:1c:
                    a4:92:f6:a5:e2:35:66:2e:bf:ef:04:eb:78:91:93:
                    0d:b1:e9:ca:9b:0e:7c:0b:ee:68:21:86:cf:58:78:
                    8f:83:13:ee:3e:60:92:e5:5c:53:8d:27:d8:b3:fd:
                    92:0b:83:25:06:5b:02:b7:5d:73:45:31:b4:f8:cd:
                    7b:35:82:8e:14:84:60:d6:31:23:95:b2:62:d1:58:
                    5a:7e:74:e6:51:6a:36:13:51:59:48:ca:4f:d6:a4:
                    62:48:08:ac:0c:93:76:fc:86:2b:33:97:65:9e:e2:
                    ba:2d:10:9e:9f:1c:ca:06:01:32:29:b4:39:9d:ab:
                    67:a3:fd:9e:63:fc:4f:d9:76:e3:f0:48:3c:bf:20:
                    3c:38:b3:22:77:4d:28:ec:9a:5c:a0:d9:48:fb:69:
                    f1:c1:cb:f2:8b:41:38:8b:99:12:a4:8a:ec:67:4d:
                    ba:73:e4:63:42:f7:00:9a:35:5d:f6:7c:6c:2f:70:
                    01:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:AA:D7:F3:26:04:2E:5B:1C:61:74:B7:8C:C1:46:93:27:8A:03:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/dc442485-e1e1-32df-b067-e09e5cdece8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765/5d1f7581-692a-467e-ae71-d3c4921d0765.crl

            X509v3 Authority Key Identifier:
                keyid:FC:4F:B0:55:3F:45:E2:8B:81:B6:D2:90:B2:34:BC:DD:04:70:25:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d1f7581-692a-467e-ae71-d3c4921d0765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.232.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:47:da:51:30:26:eb:92:1c:e0:00:1e:c2:ee:a8:4c:da:20:
         40:9a:5d:d0:f4:01:93:bc:e1:c7:d1:78:27:38:6d:8d:23:c4:
         08:bc:30:14:f7:6b:1b:ce:bd:0a:8f:f4:59:9d:14:90:9d:0d:
         96:21:8e:2a:74:31:8e:0c:a2:da:81:fe:45:e3:0f:2f:55:3e:
         16:f8:b3:94:14:5a:9e:3c:07:f3:14:f4:eb:95:cb:1f:a7:b5:
         26:d6:35:6b:7f:e9:25:b4:c9:b0:66:c0:0f:ff:67:66:92:df:
         b6:68:cb:c5:0c:73:13:00:87:67:61:c6:f8:06:d6:75:54:e0:
         5f:45:41:14:82:30:0c:e4:4e:d4:34:35:2e:71:07:02:69:55:
         c6:83:69:d0:83:e6:76:e6:16:1c:f7:77:80:5d:39:45:12:a1:
         3d:e5:77:ca:29:4e:bb:71:66:c4:f0:83:9b:61:9b:14:f6:f2:
         98:b9:4e:3b:64:57:e0:f0:c7:17:14:21:66:b2:42:43:eb:5f:
         3f:b6:53:f6:37:f9:39:bd:b7:cb:8c:c1:d1:be:90:37:71:ae:
         79:ae:d7:1c:8d:cf:90:a4:c6:d5:f2:85:44:18:bf:92:a5:53:
         d3:ba:53:d3:24:4b:a8:53:5d:08:6d:07:c8:74:b5:93:b3:57:
         9e:7f:e1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 09:38:35 2025 by rpki-client