Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
File:                     393b44f8-5adf-321e-86dd-e66161f45087.roa (raw, json)
Hash identifier:          eAQGtG5Ra01dtAiLhGpxltnTiyZCWoIq+6Z+XHT3oxE=
Subject key identifier:   AD:C5:B1:53:E9:CF:A6:08:17:6B:19:79:84:68:9A:B7:0C:A1:AA:12
Certificate issuer:       /CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
Certificate serial:       010D0C9F4328584A1F901736E2E6369D875C4600
Authority key identifier: C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa
Signing time:             Sun 08 Jun 2025 13:01:01 +0000
ROA not before:           Sun 08 Jun 2025 13:01:01 +0000
ROA not after:            Sat 06 Sep 2025 13:01:01 +0000
asID:                     396291
IP address blocks:        192.190.172.0/24 maxlen: 24
                          209.94.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1f:90:17:36:e2:e6:36:9d:87:5c:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500a41ff-bb2f-4415-8f47-796f36c37ec0
        Validity
            Not Before: Jun  8 13:01:01 2025 GMT
            Not After : Sep  6 13:01:01 2025 GMT
        Subject: CN=b5d40149-b855-42f0-8969-96a5b9c322bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:4c:e5:b1:3a:0b:54:b1:89:56:8d:37:7e:2a:
                    43:46:60:11:90:f8:fc:01:e3:19:a8:8f:63:9b:34:
                    e0:97:05:63:90:63:2f:30:63:fc:5f:dc:12:fe:b0:
                    36:24:22:d8:c0:e5:36:af:93:5d:c6:36:56:1a:d6:
                    02:6c:1b:e8:5d:e4:18:75:cc:9a:a8:26:8f:66:c0:
                    a8:9f:2e:f1:54:57:19:a9:15:0e:cf:25:9e:2e:ac:
                    77:a3:42:fd:fa:30:fd:b1:de:1b:f2:82:37:7f:d8:
                    22:0a:d0:e8:61:16:49:15:b3:04:4b:b0:61:e6:05:
                    39:69:32:0a:d0:45:a1:3b:f0:8a:49:49:30:e8:31:
                    1b:f1:28:26:fd:65:0b:f5:76:13:ab:ce:d9:70:17:
                    b4:0a:06:6c:da:14:e7:97:73:7d:87:0d:61:6f:f7:
                    97:e1:f5:e8:40:38:64:43:74:a4:04:64:56:0c:87:
                    b5:fe:61:69:42:6b:e4:a4:81:47:f3:ad:09:92:33:
                    b2:1f:01:f9:2c:4f:e6:c7:2e:1d:13:3c:4a:e4:73:
                    ad:ee:c5:a6:ef:8c:d0:ea:fa:e7:d3:86:67:b6:4b:
                    36:e4:6b:61:46:78:c3:b5:7e:47:d2:68:ac:df:50:
                    ff:41:53:55:61:42:6c:b4:59:65:cb:bd:45:b9:34:
                    f0:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C5:B1:53:E9:CF:A6:08:17:6B:19:79:84:68:9A:B7:0C:A1:AA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/393b44f8-5adf-321e-86dd-e66161f45087.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0/500a41ff-bb2f-4415-8f47-796f36c37ec0.crl

            X509v3 Authority Key Identifier:
                keyid:C9:4D:56:DD:A6:66:DB:17:55:F5:D1:92:AF:AD:7E:F1:A5:C8:90:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/500a41ff-bb2f-4415-8f47-796f36c37ec0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.190.172.0/24
                  209.94.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e4:23:43:a4:54:a5:ed:31:ff:6b:1a:4b:10:6e:8e:f2:97:32:
         24:31:20:a8:60:85:a7:13:45:b4:33:9d:d2:f1:47:d0:fc:30:
         de:b6:81:87:69:24:8f:81:7c:f6:4f:e0:a0:ee:03:6f:e9:54:
         35:bb:aa:a0:c1:fe:c8:6b:48:8c:e6:f8:36:05:9b:11:7b:8d:
         c1:1c:fd:0a:d8:82:b1:c0:85:02:3f:95:4a:34:ef:4f:83:8b:
         41:d1:99:d1:db:da:8b:92:91:96:89:77:7a:73:d1:07:4e:82:
         7c:e4:ae:2a:21:e4:62:a7:12:46:37:28:b8:98:58:01:2e:bc:
         75:b0:7f:aa:e3:e4:f9:dd:f3:3e:26:8b:90:f5:b7:94:d9:54:
         73:0e:c3:82:70:76:42:aa:ff:bc:40:39:77:55:09:2a:b9:c6:
         87:c6:8e:13:9b:29:0f:dd:0c:7b:a7:5b:bd:23:99:42:2d:3b:
         5d:a4:de:be:57:7c:4c:14:fa:f2:0d:96:4d:d3:52:36:43:52:
         24:4b:98:f0:1a:74:ad:15:1e:49:03:ef:86:1b:35:5e:d8:6a:
         5d:a6:36:4e:4a:59:75:43:0b:44:52:94:8c:a3:53:be:6c:d2:
         54:52:20:db:c3:19:ba:1d:76:38:63:2a:a0:3b:2d:d8:83:0b:
         3e:14:e9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 10:34:21 2025 by rpki-client