Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa
File:                     ac585e90-de97-3a5e-9981-425e5a740608.roa (raw, json)
Hash identifier:          024oJwUxGpaUvXwLI0uEVuNnoTRUUIeFDPDjhzYdSWs=
Subject key identifier:   4E:4C:37:37:01:31:02:6C:AA:D1:A8:62:36:48:03:74:A6:00:96:18
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A331AF033789DED66F68FEA00
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     0
IP address blocks:        192.195.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f0:33:78:9d:ed:66:f6:8f:ea:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=6303c335-d2e6-44e1-b019-8682d824b902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:63:59:9e:77:11:09:ae:df:87:06:96:a1:2e:
                    40:e1:d6:fb:4f:3a:16:88:00:55:3c:e0:89:b6:40:
                    12:f6:15:6c:ef:95:79:51:ff:cb:cb:46:26:b4:e0:
                    5b:c5:98:e2:f4:20:b3:6c:26:62:2a:61:0b:78:12:
                    58:22:06:d7:c9:c0:04:fd:ca:ab:a8:af:9c:b8:bc:
                    f8:a7:88:92:f4:cb:20:2a:7d:46:50:17:cb:89:14:
                    bd:e6:b5:1c:bc:ee:db:3b:58:6d:fa:b0:cc:a3:2c:
                    54:b3:29:b9:46:6e:e9:6a:b5:4b:a9:e2:1d:8b:52:
                    24:dd:fb:ff:9e:c0:aa:df:85:f5:b3:1e:6f:cb:ea:
                    54:3c:be:36:ae:9c:8b:b7:50:37:51:cb:db:59:6e:
                    78:fb:05:fe:32:9a:58:c1:01:39:54:d3:27:06:a3:
                    6c:40:76:a6:de:0c:95:88:b5:70:ce:1d:0f:7b:13:
                    a9:ae:0a:b6:11:55:8a:90:b3:f0:b5:11:8d:32:07:
                    65:ab:71:04:d1:b3:df:5c:50:c6:ec:6d:24:17:1b:
                    af:f8:98:a2:76:c2:e7:1d:f4:04:84:ec:82:af:d8:
                    06:4f:38:73:48:e6:30:a5:4a:ab:46:60:b4:a1:65:
                    32:fe:a4:f1:a4:f1:e4:00:68:3e:9e:95:ea:f7:b8:
                    ee:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:4C:37:37:01:31:02:6C:AA:D1:A8:62:36:48:03:74:A6:00:96:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/ac585e90-de97-3a5e-9981-425e5a740608.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.195.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:50:14:63:1c:54:89:fd:2f:09:45:47:be:ed:4f:37:10:7b:
         08:e5:14:1d:cf:80:4d:02:ec:96:48:ed:e7:b0:6e:5f:42:72:
         da:55:85:f9:5a:89:83:a3:35:8c:d1:20:21:2a:69:9d:99:d0:
         4c:19:c2:01:6d:5d:8e:4f:c1:18:d2:17:fa:d4:b9:bd:4f:ce:
         58:5f:c0:ef:1a:30:04:f4:28:20:e8:77:35:9a:cf:39:ac:3e:
         28:db:18:f1:c5:ef:22:38:92:c1:2f:73:21:f9:80:5d:8a:35:
         5d:eb:bb:ef:c8:8d:ca:3b:31:7e:f3:f6:82:c8:66:f0:c7:13:
         3a:44:75:95:bb:bf:91:dd:62:ab:8f:ee:c6:6c:29:c4:5d:d6:
         dc:a0:c6:16:ac:27:04:21:00:aa:9a:38:34:e3:00:b0:45:52:
         a0:e5:41:08:f1:00:3c:9f:bd:37:42:38:30:f4:8c:57:e4:43:
         6f:3f:55:76:ab:a5:fc:6f:b7:e9:8f:b4:27:c3:8d:56:e9:8d:
         cd:d2:87:02:38:90:92:9f:de:77:a0:f6:2a:5e:0a:3e:be:6b:
         e6:f2:c5:0b:86:45:de:1a:d5:3f:38:dd:e0:30:08:13:24:18:
         ec:17:cd:4f:25:dc:1c:71:01:6f:a4:5f:44:8e:3b:ef:a7:05:
         5c:7f:38:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 19:01:07 2025 by rpki-client