Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/febf101c-3f09-3c92-9b49-efea54bc2cfe.roa
File:                     febf101c-3f09-3c92-9b49-efea54bc2cfe.roa (raw, json)
Hash identifier:          kKIzp1xEvSED6BlLj5DmpZ2acg4jYoXJk12JV0fSFEI=
Subject key identifier:   3B:12:3A:64:2D:04:6A:82:4B:76:6B:ED:BF:0B:EE:C7:19:8A:06:85
Certificate issuer:       /CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
Certificate serial:       010D0C9F43285848EF6155F1897A460B92ADBF80
Authority key identifier: F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/febf101c-3f09-3c92-9b49-efea54bc2cfe.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     46408
IP address blocks:        199.192.224.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:55:f1:89:7a:46:0b:92:ad:bf:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5df2e7f-8e83-432a-8c27-5546944dda4b
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=d20efab0-1d27-417c-9b48-9725c1183aa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:78:7b:d2:a7:fa:f2:66:6c:af:54:65:2a:c8:
                    c1:6d:ae:58:c4:aa:0d:19:ca:30:80:6c:ed:16:9b:
                    8b:94:0f:ee:92:8c:4b:5c:04:87:52:ea:31:8d:51:
                    31:12:95:39:3c:cb:45:a9:b7:06:ed:94:69:4c:c0:
                    cd:61:3c:b3:db:0f:cb:7f:3e:88:3b:06:7e:ed:cf:
                    27:ad:f4:ac:e8:65:68:36:0e:6f:37:ef:32:71:93:
                    8e:8c:77:2c:16:e2:3b:98:5f:f8:b9:e9:1d:08:25:
                    65:ac:62:f2:f4:7b:2a:d6:7b:58:08:eb:98:f9:bb:
                    c9:e5:a9:41:52:98:16:f3:23:4b:3f:3e:16:a7:54:
                    3e:3c:d5:32:f9:a7:85:a3:7b:c5:25:13:9d:e1:74:
                    0b:0c:3f:a8:99:9f:29:fd:83:59:96:9a:66:19:c6:
                    51:4f:bb:65:d6:f5:5a:3f:ae:7c:8c:0e:bb:d4:27:
                    49:87:51:ed:40:7f:bb:e0:ff:02:7f:3b:01:ea:7b:
                    49:36:56:75:4f:da:59:0a:dd:db:52:04:de:d0:8a:
                    49:ff:d1:bd:e3:60:bd:c5:11:c1:04:6c:4c:d5:6d:
                    0c:f4:f7:dc:42:49:63:5f:dd:00:16:c9:9b:37:14:
                    4f:12:5f:ed:72:bd:14:ae:de:0e:3f:89:ed:de:f5:
                    3c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:12:3A:64:2D:04:6A:82:4B:76:6B:ED:BF:0B:EE:C7:19:8A:06:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/febf101c-3f09-3c92-9b49-efea54bc2cfe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b/d5df2e7f-8e83-432a-8c27-5546944dda4b.crl

            X509v3 Authority Key Identifier:
                keyid:F7:4D:4B:DE:0E:79:7B:FF:3E:5D:21:D7:B9:1A:A9:CB:AF:14:17:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/d5df2e7f-8e83-432a-8c27-5546944dda4b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.192.224.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:ba:ab:12:77:9b:d3:86:b1:16:e0:ce:fe:be:d9:ab:18:fb:
         cf:f2:73:1a:0d:5b:9d:92:46:8b:fc:62:a9:f5:9f:62:18:43:
         0d:3a:59:fd:1b:49:f9:a6:6a:ea:c9:37:20:08:20:d3:87:09:
         5b:6f:80:04:a4:4f:e2:55:ba:12:40:d0:0d:98:25:56:43:e8:
         f6:12:7a:72:5b:5e:e2:92:63:99:0e:ab:23:a8:05:8a:31:fd:
         19:d7:45:72:02:02:5d:e6:22:8c:62:53:5a:15:df:89:a2:86:
         f0:10:d7:71:b2:15:fd:4a:98:c9:48:0b:bd:99:bc:aa:d1:97:
         59:ee:86:ce:77:cc:a8:9b:a0:52:6e:90:2d:13:af:0d:1e:06:
         4c:10:12:9c:25:9a:b8:55:96:9e:a3:9b:70:95:03:fd:9a:a6:
         18:7e:32:99:64:c8:c0:b9:bd:b2:eb:c7:98:3c:07:1e:d7:78:
         1f:52:1e:55:9d:0d:4f:13:99:55:73:07:2e:6e:97:78:6f:cd:
         79:86:84:a1:24:8f:ba:d9:95:24:28:65:6f:6a:00:1a:c1:14:
         84:9f:31:70:ae:9e:32:3e:cb:02:f6:ca:50:7f:b1:54:be:51:
         2e:b8:85:1d:a8:dc:c8:f3:d0:c5:4e:80:58:ca:19:df:f7:17:
         41:a8:b2:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 13:37:37 2025 by rpki-client