Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
File:                     237f5699-9f34-3f3e-8592-776da251ad95.roa (raw, json)
Hash identifier:          cbZIhQqrHOeDgkDxfVF+XLjwetH8H+dIgmBvjDmhUFw=
Subject key identifier:   7A:8F:45:04:5E:28:82:86:6D:55:D3:3F:8F:61:E4:F3:33:FC:A6:FD
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285849CE9A693C83B87A23B0762A00
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     54163
IP address blocks:        207.91.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 02 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:69:3c:83:b8:7a:23:b0:76:2a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=c3c0f20c-39e2-4f8d-af0c-e9f612907e2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ea:5d:93:03:10:e0:1a:6b:0d:a6:65:46:32:
                    d7:83:74:cd:27:5e:9d:69:8e:57:f7:be:c0:59:1d:
                    e7:43:94:8d:87:a7:0b:a5:1a:a0:ff:f4:38:95:61:
                    02:dd:42:bd:87:28:17:15:27:8f:48:ad:44:39:5a:
                    6d:04:33:a8:3b:d8:48:39:61:b0:b3:18:19:60:fa:
                    32:84:9a:97:54:59:cc:a2:8d:ff:72:0e:05:5f:66:
                    89:76:1b:ac:9e:ad:90:8b:51:cb:e3:a0:54:35:17:
                    f8:a0:a6:0b:ea:7d:88:36:64:30:8d:c4:a3:c8:35:
                    bc:ee:6f:55:f7:02:95:2e:a8:63:7f:01:09:1b:21:
                    aa:1b:88:50:72:a3:82:45:3f:ae:15:27:11:82:44:
                    45:76:67:35:9d:3b:23:56:26:54:62:a9:4f:44:9d:
                    10:5e:f5:fc:1f:32:ba:d0:3a:16:3a:65:e9:42:99:
                    05:81:5e:b5:30:5d:aa:a2:9d:bc:9e:93:c1:d6:99:
                    5c:68:0e:be:40:a8:bc:f7:31:ab:d8:d2:10:4f:77:
                    8a:71:a1:06:78:51:36:44:7f:51:b6:ce:29:c9:d4:
                    ef:8f:3d:80:99:77:bd:42:7d:e3:1c:e3:e4:55:40:
                    ac:fe:de:27:64:ec:52:cf:90:2f:b8:fb:5c:98:ac:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:8F:45:04:5E:28:82:86:6D:55:D3:3F:8F:61:E4:F3:33:FC:A6:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/237f5699-9f34-3f3e-8592-776da251ad95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.91.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:f1:45:69:da:56:12:7f:e7:bc:8b:d0:a3:c9:d1:8f:79:81:
         a0:66:2e:af:cb:e9:57:54:dc:59:40:12:0f:21:e5:69:af:3b:
         01:ee:1a:f5:cc:8b:57:95:cc:d7:a1:ae:6c:5b:e0:fb:12:2e:
         0d:22:4e:04:bb:96:48:50:5c:b3:6d:3c:a4:ad:1d:61:ec:fe:
         9c:fe:25:28:62:7b:2e:8b:df:2d:12:6b:f1:35:0b:14:d9:23:
         28:8e:e7:5a:87:b4:38:94:cb:7e:af:b5:55:56:88:0a:cc:90:
         11:7c:fd:84:6f:6b:18:ec:0e:7e:9a:b7:3b:88:93:a9:34:2f:
         a7:70:66:a8:07:58:31:c4:a0:22:cb:4c:65:7c:90:67:68:be:
         bd:c0:f2:64:96:df:68:50:39:83:03:76:4a:c2:ff:cd:53:6a:
         6b:d1:4c:3b:d2:fc:13:b8:9e:d8:1c:1d:df:c0:97:a9:03:46:
         ff:59:40:7a:c0:ba:29:e3:c3:61:02:4b:cd:84:e1:a4:96:3f:
         0f:0a:11:02:53:3c:0b:82:e0:41:7d:cf:57:a4:46:2b:f0:da:
         8e:8d:c5:64:da:a6:d0:cf:a5:ff:39:9a:4d:2a:64:a2:25:30:
         58:79:87:72:ed:33:67:b2:66:4c:8d:9f:d3:9f:a7:ee:17:59:
         ad:5b:52:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 1 17:03:09 2025 by rpki-client