Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a53117c0-cbfc-3158-b7af-860db78e77da.roa
File:                     a53117c0-cbfc-3158-b7af-860db78e77da.roa (raw, json)
Hash identifier:          6OnjskDemPEHzdlmnYGFvUDuECxRsBUR6uRQOg4puzg=
Subject key identifier:   49:01:F3:AC:77:A6:C4:68:D2:0A:DF:9F:40:F7:68:01:6A:72:80:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849218427CE82B8CE41314A0300
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a53117c0-cbfc-3158-b7af-860db78e77da.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     6167
IP address blocks:        199.223.112.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:27:ce:82:b8:ce:41:31:4a:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=bf833313-9d28-418a-b335-e03fa88c72fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:88:94:7c:7f:60:88:3c:11:f7:6c:56:8d:54:
                    45:cd:8a:ce:3e:25:9e:99:b2:15:98:ec:bb:5f:bc:
                    59:4d:1d:51:94:1d:3c:8e:df:ac:a4:c8:ad:24:f4:
                    17:c7:7b:3f:87:2c:55:b1:0b:56:12:50:13:ac:3a:
                    a5:d2:35:3f:a6:bc:81:fd:ab:65:e1:97:bb:df:2c:
                    86:c2:24:bd:84:f4:17:06:9c:56:03:98:e8:28:cf:
                    c0:e9:41:12:aa:4f:7f:a4:e7:b0:35:c0:ba:1c:f2:
                    5e:3a:24:b8:be:d0:7b:c4:9b:92:b1:77:c2:44:1a:
                    fc:69:4a:3e:fe:66:5e:1f:8e:23:b0:9b:77:1a:c1:
                    b1:88:2b:f0:b1:c2:f5:a0:43:c6:0c:72:5f:e2:51:
                    c7:03:bd:d8:41:8a:50:99:1e:6e:37:3a:79:e4:4f:
                    bd:f4:5e:f4:1b:7b:48:47:41:a8:0b:31:e6:e0:f2:
                    37:7c:71:c5:98:a2:9a:4f:34:2a:e5:39:41:08:79:
                    72:37:2a:d0:17:bc:78:67:88:9f:e7:9d:09:3e:67:
                    07:a4:31:76:8a:2d:3b:0e:1a:04:21:d7:71:db:aa:
                    81:e6:d7:05:5a:0f:9e:7f:56:8d:99:8b:4c:61:9e:
                    dc:4c:e4:74:43:d8:a0:2e:92:06:88:e3:2c:d0:b8:
                    63:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:01:F3:AC:77:A6:C4:68:D2:0A:DF:9F:40:F7:68:01:6A:72:80:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/a53117c0-cbfc-3158-b7af-860db78e77da.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.223.112.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:0b:51:99:d9:a5:9b:98:9d:d6:f4:ed:c2:e5:f3:2f:2b:22:
         82:25:81:2d:ce:fd:23:dd:aa:36:88:78:2c:c9:97:27:af:5e:
         de:33:d6:28:59:63:17:4e:b3:8d:38:df:fa:2a:39:d3:5d:b4:
         ce:3f:4f:55:eb:90:fd:ce:64:ff:f3:11:70:0e:71:28:d3:38:
         2a:22:2b:18:31:76:aa:1a:7a:f9:f5:55:ad:55:6b:64:cb:2a:
         2b:6c:4d:90:1e:47:50:c0:85:0d:61:4d:b5:bc:e5:40:74:0a:
         33:84:44:f2:d7:70:0f:c9:90:79:30:23:ac:4f:bf:da:81:b6:
         5a:cb:8f:de:d8:31:de:64:a5:69:33:7f:19:14:8b:31:41:19:
         ce:5e:bf:fe:74:30:58:a9:36:3f:1e:93:ce:78:4a:43:94:48:
         33:3c:bf:60:d4:45:20:a0:92:8d:c4:37:ca:e0:20:fa:9a:13:
         a9:99:90:1c:24:12:37:96:55:2a:60:e4:e2:77:5e:51:c1:76:
         12:e0:7f:30:a4:5c:d2:9a:fc:98:0d:e1:fc:83:e0:5c:45:76:
         ed:c4:8b:94:4a:87:5d:97:1a:1a:88:69:df:01:cd:ab:dd:ea:
         0b:e9:21:73:24:34:07:33:17:9d:83:61:60:08:43:3b:b6:be:
         c7:56:df:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:05:30 2025 by rpki-client