Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa
File:                     6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa (raw, json)
Hash identifier:          p0gyBpq1o2aCmYk5IkwZXoAOghTz2ahhQTH/S3btFMY=
Subject key identifier:   57:68:D2:E3:2E:1B:FC:B9:FA:F1:0F:D8:3E:32:3E:DC:D5:CF:57:BF
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848F65BDC6B6963EC421D6B1610
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     12129
IP address blocks:        209.131.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:dc:6b:69:63:ec:42:1d:6b:16:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=196b389a-37a4-41b7-b7a7-f74e3ed359d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:43:fb:7f:78:da:9c:fc:cb:cd:52:75:6e:3f:
                    8e:fa:06:2b:bc:a7:41:3c:d2:15:7a:bc:8a:c9:ec:
                    93:57:66:65:c9:e1:63:07:89:2b:f2:aa:de:55:74:
                    bc:2f:94:b5:68:14:a0:51:60:4a:e2:ff:b7:8d:9b:
                    ba:d3:09:39:42:9f:37:87:ef:f2:af:e2:da:ff:b1:
                    eb:03:0a:b5:ca:3b:a6:7b:d9:4f:a9:21:a1:01:a2:
                    55:c1:47:81:96:31:f9:d5:c7:c7:d7:f2:92:72:39:
                    29:51:02:72:ba:00:71:d4:4c:7a:db:41:bf:a0:91:
                    59:d0:f0:b5:1e:e1:10:09:b1:35:5f:68:6e:f7:48:
                    8d:ac:d4:f8:94:c4:8a:c1:ad:fb:ad:14:90:e5:04:
                    56:38:51:f4:52:11:1d:02:d5:ac:28:72:38:c1:36:
                    91:54:08:f4:56:0a:d6:9a:e4:23:1b:be:c6:2c:e5:
                    11:66:4e:6b:24:c0:c7:8b:cb:0f:94:8b:ef:4d:91:
                    e3:20:60:95:cc:9a:23:70:af:91:c1:c1:b0:86:3b:
                    fe:8d:ce:8c:98:7b:3e:84:30:2e:ac:36:f4:5e:b3:
                    ef:0f:e7:c3:f1:e1:43:85:ee:a3:ba:1e:61:14:64:
                    6e:28:3f:5f:70:b4:cf:75:4a:bb:7f:16:42:c8:4c:
                    61:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:68:D2:E3:2E:1B:FC:B9:FA:F1:0F:D8:3E:32:3E:DC:D5:CF:57:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/6a6f3cff-6ac0-311f-91ee-4bee3b0137a3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.131.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:8d:2f:28:71:12:ac:e8:79:18:a5:e0:3e:e7:e0:61:9c:
         2d:2f:7e:5d:6c:02:a0:df:c2:c3:37:99:ed:fe:0e:93:50:3f:
         45:f1:aa:ca:11:b0:fb:5a:c3:08:9b:53:97:a0:d7:04:6b:d6:
         de:49:d5:e0:52:53:01:0a:f6:2f:af:70:dd:5d:6b:ec:82:13:
         5e:3e:c5:0e:37:e3:8b:60:9e:cf:6a:16:23:6f:56:3a:6d:ef:
         47:56:7c:7e:41:1a:df:be:8d:c7:61:a5:d6:93:93:3e:c2:e0:
         58:fc:44:0a:53:cb:98:5e:e4:e4:76:dd:25:e8:8f:44:32:ed:
         4d:2d:37:ba:af:65:d6:20:ab:33:3a:77:d2:07:1b:76:f0:ee:
         de:c2:cc:c8:2e:9e:70:f3:48:8d:47:1d:ac:3f:e7:77:b3:54:
         97:49:7e:e5:34:5a:cb:fa:ad:7b:5c:b9:cc:ef:63:b8:a6:df:
         7a:61:16:9b:75:d3:6f:01:52:07:86:a6:6d:db:c9:40:84:1d:
         c3:08:57:db:ef:44:42:c8:94:a8:1f:7c:48:2b:f1:fc:99:d6:
         12:cd:24:f0:84:4d:fb:f0:ab:b8:dd:4c:ab:c0:66:23:70:30:
         71:06:21:e3:ac:98:46:cb:51:3f:2d:01:c5:13:59:00:b8:d0:
         7f:cc:20:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 10:10:41 2025 by rpki-client